<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="23436">
<package pkgid="266fbe8762b207fad07c6172911c026104ff17d7e581ffd75ec8f8ed6b7596e4" name="2ping" arch="noarch">
  <version epoch="0" ver="4.5.1" rel="lp152.4.3.1"/>
  <changelog author="jslaby@suse.com" date="1428062400">- update to 1397618874.f2c2047
- 2ping-fix-use-of-uninitialized-warning.patch: add</changelog>
  <changelog author="p.drouand@gmail.com" date="1469361600">- Update to version 3.2.1
  * Please read the ChangeLog; not able to track all changes since
    previous version
- Upstream moved to python
  * Remove %{perl_requires} dependency
  * Remove perl recommendations; perl(Digest::CRC), perl(Digest::MD5),
    perl(Digest::SHA) and perl(IO::Socket::INET6)
  * Add python-devel and python-setuptools requirements
- Use official tarball and download Url
- Remove obsolete 2ping-fix-use-of-uninitialized-warning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469793600">- Make rpmlint happy by avoiding installation in %build.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 4.1
  * Fixed --fuzz CRC function.
  * Added --encrypt option for shared-secret encrypted packets.
  * Added --listen --all-interfaces option for automatically binding to
  all interface IPs (requires Python netifaces module).
  * Simplified monotonic_clock functionality, relying on Python 3 for
  most functionality, reducing the possibility of platform bugs.
- Includes changes from 4.0
  * Rewrite to Python 3 (3.4 or higher).
  * Fixed hmac-sha256 handling, added hmac-sha512.
  * --nagios will now work when combined with --deadline, in addition to
  - -count.
  * Added Wireshark Lua dissector and sample capture.
  * Added battery level (ExtID 0x88a1f7c7).  Note that while 2ping
  recognizes the new option in incoming packets, it currently does not
  have the capability to send battery levels.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added 2ping.keyring, which contains the key from the author</changelog>
  <changelog author="rpm@fthiessen.de" date="1533988800">- Update to version 4.1.2
  * Fix UTF-8 tests when run with invalid locale.
  * Fix cleanup on non-encrypted sessions.</changelog>
  <changelog author="sean@suspend.net" date="1539000000">- Update to version 4.2
  * Added SIGHUP handling of listener processes
  * Added an example bash_completion script
  * Better cleanup handling of peer information</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549195200">- Update to version 4.3
  * Add --srv-service
  * Change --adaptive behavior to better match ping -A
  * Fix typos in manpage
- Ran spec-cleaner
- Fix rpmlint duplicate error with fdupes</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1593691200">- Update to version 4.5
  * Added PyCryptodome support (recommended over PyCrypto, though the latter is still detected/supported).
  * Replaced best_poller module with Python native selectors module.
  * Changed --flood output: dots/backspaces are no longer printed, and loss results / errors display full details.
  * --audible tones will only occur if stdout is a TTY.
  * Improved hostname/IP display edge cases.
  * Added an AF_UNIX --loopback test mode.
  * Listener sockets are added and removed as needed, instead of being re-created on each rescan.
  * Listener sockets are automatically rescanned periodically.
  * Multiple systemd sockets are now allowed.
  * A run can be both a listener and a client at the same time (mainly useful for smoke testing).
  * Other socket handling refactoring.
  * Other code refactoring.
  * Listener statistics are displayer per-bind.
  * Many, many testing/CI improvements.
- Remove groups in spec
- Package systemd service unit
- Add missing optional build requirements to enable all available options
- Some other clean up in spec</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594296000">- Change optional requirements to recommends since they just enhance the tool
- Use correct package names for the recommends</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1611576000">- use one python, not singlespec</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616414400">- Update to version 4.5.1
  * 2ping.bash_completion: Make more resilient to failure / missing
    features.
  * Minimum Python version changed from 3.5 to 3.6.
  * Minor no-op code and distribution updates.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1623672000">- python symbol is not provided by python 3, use proper python3</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628596800">- Added hardening to systemd service(s). Added patch(es):
  * harden_2ping.service.patch</changelog>
</package>
<package pkgid="3adff323afb5d7d27eba864c3f9cdeae2050270a7f1e2b0f74e9175a80756c93" name="2ping" arch="src">
  <version epoch="0" ver="4.5.1" rel="lp152.4.3.1"/>
  <changelog author="jslaby@suse.de" date="1289390400">- Initial package (version 1.0)</changelog>
  <changelog author="jslaby@suse.com" date="1428062400">- update to 1397618874.f2c2047
- 2ping-fix-use-of-uninitialized-warning.patch: add</changelog>
  <changelog author="p.drouand@gmail.com" date="1469361600">- Update to version 3.2.1
  * Please read the ChangeLog; not able to track all changes since
    previous version
- Upstream moved to python
  * Remove %{perl_requires} dependency
  * Remove perl recommendations; perl(Digest::CRC), perl(Digest::MD5),
    perl(Digest::SHA) and perl(IO::Socket::INET6)
  * Add python-devel and python-setuptools requirements
- Use official tarball and download Url
- Remove obsolete 2ping-fix-use-of-uninitialized-warning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469793600">- Make rpmlint happy by avoiding installation in %build.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 4.1
  * Fixed --fuzz CRC function.
  * Added --encrypt option for shared-secret encrypted packets.
  * Added --listen --all-interfaces option for automatically binding to
  all interface IPs (requires Python netifaces module).
  * Simplified monotonic_clock functionality, relying on Python 3 for
  most functionality, reducing the possibility of platform bugs.
- Includes changes from 4.0
  * Rewrite to Python 3 (3.4 or higher).
  * Fixed hmac-sha256 handling, added hmac-sha512.
  * --nagios will now work when combined with --deadline, in addition to
  - -count.
  * Added Wireshark Lua dissector and sample capture.
  * Added battery level (ExtID 0x88a1f7c7).  Note that while 2ping
  recognizes the new option in incoming packets, it currently does not
  have the capability to send battery levels.</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added 2ping.keyring, which contains the key from the author</changelog>
  <changelog author="rpm@fthiessen.de" date="1533988800">- Update to version 4.1.2
  * Fix UTF-8 tests when run with invalid locale.
  * Fix cleanup on non-encrypted sessions.</changelog>
  <changelog author="sean@suspend.net" date="1539000000">- Update to version 4.2
  * Added SIGHUP handling of listener processes
  * Added an example bash_completion script
  * Better cleanup handling of peer information</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549195200">- Update to version 4.3
  * Add --srv-service
  * Change --adaptive behavior to better match ping -A
  * Fix typos in manpage
- Ran spec-cleaner
- Fix rpmlint duplicate error with fdupes</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1593691200">- Update to version 4.5
  * Added PyCryptodome support (recommended over PyCrypto, though the latter is still detected/supported).
  * Replaced best_poller module with Python native selectors module.
  * Changed --flood output: dots/backspaces are no longer printed, and loss results / errors display full details.
  * --audible tones will only occur if stdout is a TTY.
  * Improved hostname/IP display edge cases.
  * Added an AF_UNIX --loopback test mode.
  * Listener sockets are added and removed as needed, instead of being re-created on each rescan.
  * Listener sockets are automatically rescanned periodically.
  * Multiple systemd sockets are now allowed.
  * A run can be both a listener and a client at the same time (mainly useful for smoke testing).
  * Other socket handling refactoring.
  * Other code refactoring.
  * Listener statistics are displayer per-bind.
  * Many, many testing/CI improvements.
- Remove groups in spec
- Package systemd service unit
- Add missing optional build requirements to enable all available options
- Some other clean up in spec</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594296000">- Change optional requirements to recommends since they just enhance the tool
- Use correct package names for the recommends</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1611576000">- use one python, not singlespec</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1616414400">- Update to version 4.5.1
  * 2ping.bash_completion: Make more resilient to failure / missing
    features.
  * Minimum Python version changed from 3.5 to 3.6.
  * Minor no-op code and distribution updates.</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.cz&gt;" date="1623672000">- python symbol is not provided by python 3, use proper python3</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1628596800">- Added hardening to systemd service(s). Added patch(es):
  * harden_2ping.service.patch</changelog>
</package>
<package pkgid="7652843c59f9fc6b7819eac48aaddfdf70e1615af427489d2c70e95a6ed85ec3" name="389-ds" arch="src">
  <version epoch="0" ver="1.4.3.12~git0.9bc042902" rel="lp152.2.6.1"/>
  <changelog author="hguo@suse.com" date="1517400000">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
</package>
<package pkgid="a2948802336a38dcdc9ba519b7110e5beca09ce84ba3695a6c15a6ef37ecdc6d" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.4.3.12~git0.9bc042902" rel="lp152.2.6.1"/>
  <changelog author="hguo@suse.com" date="1517400000">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
</package>
<package pkgid="e6e25a62c22022ec3ae2dbe3cef6d18a72b34894e507bfc74986aa027c1f3826" name="389-ds" arch="src">
  <version epoch="0" ver="1.4.3.17~git0.3c2d054e1" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
</package>
<package pkgid="677be7131c45cee452981fdd8d97a594f7dce8652e7e9fc706e7694fcf71a400" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.4.3.17~git0.3c2d054e1" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
</package>
<package pkgid="cad72e85a57296f83424fc99d5a46df96f598b0336fb17f1adbae29896ae384f" name="389-ds" arch="src">
  <version epoch="0" ver="1.4.3.19~git0.bef0b5bed" rel="lp152.2.12.1"/>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
</package>
<package pkgid="46843aaffc4936c84380e629c964f8008b6a827641cfefab301ee525b96c579d" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.4.3.19~git0.bef0b5bed" rel="lp152.2.12.1"/>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
</package>
<package pkgid="85dfc1df12acf0a9354ff207e7d3a5a9a9a86b4281d344358595090c83f179c9" name="389-ds" arch="src">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="lp152.2.15.1"/>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="98f30c2555624b69ca9569c0d96e67e4f0d22a15884f9ed356eed00401f0b9bb" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="lp152.2.15.1"/>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="29376d6b71d91d8e3635b0f7ac7ce091f44dd4150e57e938e525fbec1bdb1fa8" name="389-ds" arch="src">
  <version epoch="0" ver="1.4.3.24~git13.7b705e743" rel="lp152.2.18.1"/>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
  <changelog author="william.brown@suse.com" date="1627473600">- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 1.4.3.24~git13.7b705e743:
  * Issue 4837 - persistent search returns entries even when an error is returned by content-sync-plugin (#4838)
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 49761 - Fix CI tests
  * Issue 2820 - Fix CI test suite issues
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4814 - _cl5_get_tod_expiration may crash at startup
  * Ticket 51140 - missing ifdef
  * Update rpm.mk for RUST
  * Bump version to 1.4.3.24
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4747 - followup with a missing import
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Add changelog compaction task in 1.4.3
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Ticket 51175 - resolve plugin name leaking
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Ticket 4326 - entryuuid fixup did not work correctly (#4328)
  * Ticket 137 - Implement EntryUUID plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity</changelog>
</package>
<package pkgid="aa6864cb85310202a1088c506f22207fda37ad2515bd642f94f57faa909a7bc6" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.4.3.24~git13.7b705e743" rel="lp152.2.18.1"/>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
  <changelog author="william.brown@suse.com" date="1627473600">- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 1.4.3.24~git13.7b705e743:
  * Issue 4837 - persistent search returns entries even when an error is returned by content-sync-plugin (#4838)
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 49761 - Fix CI tests
  * Issue 2820 - Fix CI test suite issues
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4814 - _cl5_get_tod_expiration may crash at startup
  * Ticket 51140 - missing ifdef
  * Update rpm.mk for RUST
  * Bump version to 1.4.3.24
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4747 - followup with a missing import
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Add changelog compaction task in 1.4.3
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Ticket 51175 - resolve plugin name leaking
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Ticket 4326 - entryuuid fixup did not work correctly (#4328)
  * Ticket 137 - Implement EntryUUID plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity</changelog>
</package>
<package pkgid="7076f0ee766ea86aa33fefab462640a931c6fff81e46e7d2d5cfbc78808a63dd" name="389-ds" arch="src">
  <version epoch="0" ver="1.4.3.9~git0.3eb8617f6" rel="lp152.2.3.1"/>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
</package>
<package pkgid="dd03b992ca5277b584c05dddaa3982303007e4cf83c44a6b7eb4f3dbd0b93b2f" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.4.3.9~git0.3eb8617f6" rel="lp152.2.3.1"/>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
</package>
<package pkgid="0d815e51fc8590acb74da39b9094f11d33a06ea1d691148f32cf8549cb6a2141" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3.12~git0.9bc042902" rel="lp152.2.6.1"/>
  <changelog author="hguo@suse.com" date="1517400000">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
</package>
<package pkgid="0cfd90addd7e78efe7f508311fc30f46a30be72fcd55f68ec822f62c0d171b4a" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3.17~git0.3c2d054e1" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
</package>
<package pkgid="bece321a09120051caf548ea1a4621886617778d19a16642245270b43cd28ddf" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3.19~git0.bef0b5bed" rel="lp152.2.12.1"/>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
</package>
<package pkgid="30ff771ecfdfc52f3f053414459455fe55b007d5e839f6a5374de5a990714421" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="lp152.2.15.1"/>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="efc5a3fdf01b27e039375d404a75adeaa194da9ed394edefecdcbbb1d51e8041" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3.24~git13.7b705e743" rel="lp152.2.18.1"/>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
  <changelog author="william.brown@suse.com" date="1627473600">- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 1.4.3.24~git13.7b705e743:
  * Issue 4837 - persistent search returns entries even when an error is returned by content-sync-plugin (#4838)
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 49761 - Fix CI tests
  * Issue 2820 - Fix CI test suite issues
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4814 - _cl5_get_tod_expiration may crash at startup
  * Ticket 51140 - missing ifdef
  * Update rpm.mk for RUST
  * Bump version to 1.4.3.24
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4747 - followup with a missing import
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Add changelog compaction task in 1.4.3
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Ticket 51175 - resolve plugin name leaking
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Ticket 4326 - entryuuid fixup did not work correctly (#4328)
  * Ticket 137 - Implement EntryUUID plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity</changelog>
</package>
<package pkgid="a95bc8ebb8373b7c78a9e2f501fe04634ac1eea98ba18de208518e3d13aabf33" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3.9~git0.3eb8617f6" rel="lp152.2.3.1"/>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
</package>
<package pkgid="b8a285d41d51f7756e088989813c320779147f98d338b795adfd1dc64588065d" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.3.12~git0.9bc042902" rel="lp152.2.6.1"/>
  <changelog author="hguo@suse.com" date="1517400000">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
</package>
<package pkgid="60c3b648e1fc72c1d454f1ac6673b79e92b0244c363001e6ee67116a74b1088a" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.3.17~git0.3c2d054e1" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
</package>
<package pkgid="3d0af347c1d82fde989e29b1b7cddc00d29d96a6d0d3e6ce3a12a2695d33f6f6" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.3.19~git0.bef0b5bed" rel="lp152.2.12.1"/>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
</package>
<package pkgid="2fd7dd3411f74bf5abac34128a13b9ea05beb5cf41caf8af8116699b004bc961" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="lp152.2.15.1"/>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="fe633926e168f9efcba4baf3cece8421b03f98d3bafc3c7d74a2df0f09e4e703" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.3.24~git13.7b705e743" rel="lp152.2.18.1"/>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
  <changelog author="william.brown@suse.com" date="1627473600">- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 1.4.3.24~git13.7b705e743:
  * Issue 4837 - persistent search returns entries even when an error is returned by content-sync-plugin (#4838)
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 49761 - Fix CI tests
  * Issue 2820 - Fix CI test suite issues
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4814 - _cl5_get_tod_expiration may crash at startup
  * Ticket 51140 - missing ifdef
  * Update rpm.mk for RUST
  * Bump version to 1.4.3.24
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4747 - followup with a missing import
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Add changelog compaction task in 1.4.3
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Ticket 51175 - resolve plugin name leaking
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Ticket 4326 - entryuuid fixup did not work correctly (#4328)
  * Ticket 137 - Implement EntryUUID plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity</changelog>
</package>
<package pkgid="f1f6709d1f734beb96e08ce1f72290d2332d865289cdf9a9b4260032f23e17ee" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.3.9~git0.3eb8617f6" rel="lp152.2.3.1"/>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
</package>
<package pkgid="23c0c0d711b938c132632274e9d80c0252af69c5a5ff71b703be6b0d03c77476" name="AusweisApp2" arch="src">
  <version epoch="0" ver="1.20.2" rel="lp152.2.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
</package>
<package pkgid="28c335136d80a0fc4d8c20943aecaf538d4ff649282f00891e66a71331c2c66f" name="AusweisApp2" arch="x86_64">
  <version epoch="0" ver="1.20.2" rel="lp152.2.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
</package>
<package pkgid="9d423222e5e69e20968266716334b42fe51633655c120d533e27a4afa104db28" name="AusweisApp2" arch="src">
  <version epoch="0" ver="1.22.0" rel="lp152.2.6.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
</package>
<package pkgid="a4ab1f59b379905d843f822b8989cba8cb8334de9b25d220029dd58a327c552b" name="AusweisApp2" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="lp152.2.6.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
</package>
<package pkgid="ea379978fee2839352ce620bcb04dff2eb5a47d9d6f8f80e2ec95793fad8d342" name="AusweisApp2" arch="src">
  <version epoch="0" ver="1.22.1" rel="lp152.2.9.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
</package>
<package pkgid="63044f2136b3f484fd8cda06286ec5fbc789ec8ab154e6171284ce23cb104ad6" name="AusweisApp2" arch="x86_64">
  <version epoch="0" ver="1.22.1" rel="lp152.2.9.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
</package>
<package pkgid="3b1ce567e5cb84f31df43a3b71f0b0349c5396fcc81c854e7a9bc7baf7e275bc" name="AusweisApp2" arch="src">
  <version epoch="0" ver="1.22.2" rel="lp152.2.12.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1617192000">- New upstream release
  + Version 1.22.2
  * CyberJack RFID basis reader is working again on Windows.
  * Automatic start of the setup wizard when running AusweisApp2
    for the first time on desktop systems is working again now.
  * Fixed a bug in the self-idenfication dialog.
  * Fixed some crashes.
  * The Android SDK is now also made available on Maven Central
    as JCenter has been discontinued.
  * Support for authorization certificates with PIN management.
  * Update of OpenSSL to version 1.1.1k.</changelog>
</package>
<package pkgid="e49c39f521575e25d6589413b8995c31ff1899a8a25d6a086b3659924ed24017" name="AusweisApp2" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="lp152.2.12.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1617192000">- New upstream release
  + Version 1.22.2
  * CyberJack RFID basis reader is working again on Windows.
  * Automatic start of the setup wizard when running AusweisApp2
    for the first time on desktop systems is working again now.
  * Fixed a bug in the self-idenfication dialog.
  * Fixed some crashes.
  * The Android SDK is now also made available on Maven Central
    as JCenter has been discontinued.
  * Support for authorization certificates with PIN management.
  * Update of OpenSSL to version 1.1.1k.</changelog>
</package>
<package pkgid="cfbc89af10f4790baf55725a5654d88d96bb32322a831abec79a076213dea719" name="Botan" arch="i586">
  <version epoch="0" ver="2.10.0" rel="lp152.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1505995200">- Explicitly require libopenssl-1_0_0-devel (bsc#1055322)
  * Botan 1.x won't support OpenSSL 1.1
  (https://github.com/randombit/botan/issues/753)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506427200">- Fix for CVE-2017-14737: A cryptographic cache-based side channel in the RSA
  implementation allows local attacker to recover information about RSA secret
  keys.
  * add CVE-2017-14737.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507118400">- Update to 1.10.17
  - Address a side channel affecting modular exponentiation. An attacker
    capable of a local or cross-VM cache analysis attack may be able to recover
    bits of secret exponents as used in RSA, DH, etc. CVE-2017-14737 Workaround
    a miscompilation bug in GCC 7 on x86-32 affecting GOST-34.11 hash function.
    (GH #1192 #1148 #882, bsc#1060433)
  - Add SecureVector::data() function which returns the start of the buffer.
    This makes it slightly simpler to support both 1.10 and 2.x APIs in the
    same codebase.  When compiled by a C++11 (or later) compiler, a template
    typedef of SecureVector, secure_vector, is added. In 2.x this class is a
    std::vector with a custom allocator, so has a somewhat different interface
    than SecureVector in 1.10. But this makes it slightly simpler to support
    both 1.10 and 2.x APIs in the same codebase.
  - Fix a bug that prevented configure.py from running under Python3
  - Botan 1.10.x does not support the OpenSSL 1.1 API. Now the build will
    [#]error if OpenSSL 1.1 is detected. Avoid ?with-openssl if compiling against
    1.1 or later. (GH #753)
  - Import patches from Debian adding basic support for
    building on aarch64, ppc64le, or1k, and mipsn32 platforms.
  * obsoletes CVE-2017-14737.patch
  * refreshes aarch64-support.patch
  * drop ppc64le-support.patch for upstream version
    (disables altivec support as per concerns by upstream)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1509537600">- configure Botan explicitly with python3</changelog>
  <changelog author="i@marguerite.su" date="1515412800">- fix build. python3 configure itself is useless?
  we should make package python3 too.</changelog>
  <changelog author="i@marguerite.su" date="1515672000">- add Botan2-INT_MAX.patch
  * Fix ?INT_MAX was not declared in this scope?
    in openSUSE Leap 42.1</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518091200">- fix unknown flag -fstack-clash-protection for openSUSE 42.3
- rename to Botan2
- drop Botan2-INT_MAX.patch as not needed anymore
- Bump to libbotan 2.4
  Changes and new features:
  * Several build improvements requested by downstream packagers,
    including the ability to disable building the static library. All
    makefile constructs that were specific to nmake or GNU make have
    been eliminated, thus the option ``--makefile-style`` which was
    previously used to select the makefile type has also been
    removed. (GH #1230 #1237 #1300 #1318 #1319 #1324 #1325 #1346)
  * Support for negotiating the DH group as specified in RFC 7919 is
    now available in TLS (GH #1263)
  * Support for ARIA-GCM ciphersuites are now available in TLS. They
    are disabled by default. (GH #1284)
  * Add support for generating and verifying X.509 objects
    (certificates, CRLs, etc) using RSA-PSS signatures (GH #1270 and
    [#1368])
  * Add support for AES key wrapping with padding, as specified in RFC
    5649 and NIST SP 800-38F (GH #1301)
  * OCSP requests made during certificate verification had the
    potential to hang forever. Now the sockets are non-blocking and a
    timeout is enforced. (GH #1360 fixing GH #1326)
  * Add ``Public_Key::fingerprint_public`` which allows fingerprinting
    the public key.
    The previously available ``Private_Key::fingerprint`` is
    deprecated, now ``Private_Key::fingerprint_private`` should be
    used if this is required.  (GH #1357)
  * ECC certificates generated by Botan used an invalid encoding for
    the parameters field, which was rejected by some certificate
    validation libraries notably BouncyCastle. (GH #1367)
  * Loading an ECC key which used OID encoding for the domain
    parameters, then saving it, would result in a key using the
    explicit parameters encoding.  Now the OID encoding is
    retained. (GH #1365)
  * Correct various problems in certificate path validation that arose
    when multiple paths could be constructed leading to a trusted root
    but due to other constraints only some of them validated. (GH
    [#1363])
  * It is now possible for certificate validation to return warning
    indicators, such as that the distinguished name is not within
    allowed limits or that a certificate with a negative serial number
    was observed. (GH #1363 #1359)
  * XMSS signatures now are multi-threaded for improved performance
    (GH #1267)
  * Fix a bug that caused the TLS peer cert list to be empty on a
    resumed session.  (GH #1303 #1342)
  * Increase the maximum HMAC key length from 512 bytes to 4096
    bytes. This allows using a DH key exchange in TLS with a group
    greater than 4096 bits. (GH #1316)
  * Fix a bug in the TLS server where, on receiving an SSLv3 client
    hello, it would attempt to negotiate TLS v1.2. Now a
    protocol_version alert is sent.  Found with tlsfuzzer. (GH #1316)
  * Fix several bugs related to sending the wrong TLS alert type in
    various error scenarios, caught with tlsfuzzer.
  * Add support for a ``tls_http_server`` command line utility which
    responds to simple GET requests. This is useful for testing
    against a browser, or various TLS test tools which expect the
    underlying protocol to be HTTP. (GH #1315)
  * Add an interface for generic PSK data stores, as well as an
    implementation which encrypts stored values with AES key
    wrapping. (GH #1302)
  * Optimize GCM mode on systems both with and without carryless
    multiply support. This includes a new base case implementation
    (still constant time), a new SSSE3 implementation for systems with
    SSSE3 but not clmul, and better algorithms for systems with clmul
    and pmull. (GH #1253 #1263)
  * Various optimizations for OCB, CFB, CTR, SM3, SM4, GMAC, BLAKE2b,
    Blowfish, Twofish, CAST-128, and CRC24 (GH #1281)
  * Salsa20 now supports the seek operation.
  * Add ``EC_Group::known_named_groups`` (GH #1339)
  * Symmetric algorithms (block ciphers, stream ciphers, MACs) now
    verify that a key was set before accepting data. Previously
    attempting to use an unkeyed object would instead result in either
    a crash or invalid outputs. (GH #1279)
  * The X509 certificate, CRL and PKCS10 types have been heavily
    refactored internally. Previously all data of these types was
    serialized to strings, then in the event a more complicated data
    structure (such as X509_DN) was needed, it would be recreated from
    the string representation. However the round trip process was not
    perfect and could cause fields to become lost. This approach is no
    longer used, fixing several bugs (GH #1010 #1089 #1242 #1252). The
    internal data is now stored in a ``shared_ptr``, so copying such
    objects is now very cheap. (GH #884)
  * ASN.1 string objects previously held their contents as ISO 8859-1
    codepoints.  However this led to certificates which contained
    strings outside of this character set (eg in Cyrillic, Greek, or
    Chinese) being rejected. Now the strings are always converted to
    UTF-8, which allows representing any character. In addition, UCS-4
    strings are now supported.  (GH #1113 #1250 #1287 #1289)
  * It is now possible to create an uninitialized X509_Certificate
    object. Such an object will throw if any attempt to access its
    members is made. (GH #1335)
  * In BER decoder, avoid unbounded stack recursion when parsing
    nested indefinite length values. Now at most 16 nested indefinite
    length values are accepted, anything deeper resulting in a
    decoding error.  (GH #1304 OSS-Fuzz 4353).
  * A new ASN.1 printer API allows generating a string representation
    of arbitrary BER data. This is used in the ``asn1print`` command
    line utility and may be useful in other applications, for instance
    for debugging.
  * New functions for bit rotations that distinguish rotating by a
    compile-time constant vs a runtime variable rotation. This allows
    better optimizations in both cases. Notably performance of
    CAST-128 and CAST-256 are substantially improved. (GH #1247)
  * TLS CBC ciphersuites now are implemented using the standard CBC
    code, instead of reimplementing CBC inside the TLS stack. This
    allows for parallel decryption of TLS CBC ciphertexts, and
    improves performance especially when using AES hardware
    support. (GH #1269)
  * Add callbacks to make it possible for an application using TLS to
    provide custom implementations of signature schemes, eg when
    offloading the computations to another device. (GH #1332)
  * Use a direct calculation for calendar computations instead of
    relying on non-portable operating system interfaces. (GH #1336)
  * Fix a bug in the amalgamation generation which could cause build
    failures on some systems including macOS. (GH #1264 #1265)
  * A particular code sequence in TLS handshake would always (with an
    ECC ciphersuite) result in an exception being thrown and then
    caught.  This has changed so no exception is thrown. (GH #1275)
  * The code for byteswapping has been improved for ARMv7 and for
    Windows x86-64 systems using MSVC. (GH #1274)
  * The GMAC class no longer derives from GHASH. This should not cause
    any noticeable change for applications. (GH #1253)
  * The base implementation of AES now uses a single 4K table, instead
    of 4 such tables. This offers a significant improvement against
    cache-based side channels without hurting performance too much. In
    addition the table is now guaranteed to be aligned on a cache
    line, which ensures the additional countermeasure of reading each
    cache line works as expected. (GH #1255)
  * In TLS client resumption, avoid sending a OCSP stapling
    request. This caused resumption failures with some servers. (GH
    [#1276])
  * The overhead of making a call through the FFI layer has been
    reduced.
  * The IDs for SHA-3 PKCSv1.5 signatures added in 2.3.0 were
    incorrect. They have been changed to use the correct encoding, and
    a test added to ensure such errors do not recur.
  * Counter mode allows setting a configurable width of the
    counter. Previously it was allowed for a counter of even 8 bits
    wide, which would mean the keystream would repeat after just 256
    blocks. Now it requires the width be at least 32 bits. The only
    way this feature could be used was by manually constructing a
    ``CTR_BE`` object and setting the second parameter to something in
    the range of 1 to 3.
  * A new mechanism for formatting ASN.1 data is included in
    ``asn1_print.h``.  This is the same functionality used by the
    command line ``asn1print`` util, now cleaned up and moved to the
    library.
  * Add ``Pipe::append_filter``. This is like the existing
    (deprecated) ``Pipe::append``, the difference being that
    ``append_filter`` only allows modification before the first call
    to ``start_msg``. (GH #1306 #1307)
  * The size of ASN1_Tag is increased to 32 bits. This avoids a
    problem with UbSan (GH #751)
  * Fix a bug affecting bzip2 compression. In certain circumstances,
    compression would fail with ``BZ_SEQUENCE_ERROR`` due to calling
    bzlib in an way it does not support. (GH #1308 #1309)
  * In 2.3.0, final annotations were added to many classes including
    the TLS policies (like ``Strict_Policy`` and
    ``BSI_TR_02102_2``). However it is reasonable and useful for an
    application to derive from one of these policies, so as to create
    an application specific policy that is based on a library-provided
    policy, but with a few tweaks. So the final annotations have been
    removed on these classes. (GH #1292)
  * A new option ``--with-pdf`` enables building a PDF copy of the
    handbook.  (GH #1337)
  * A new option ``--with-rst2man`` enables building a man page for
    the command line util using Docutils rst2man. (GH #1349)
  * Support for NEON is now enabled under Clang.
  * Now the compiler version is detected using the preprocessor,
    instead of trying to parse the output of the compiler's version
    string, which was subject to problems with localization. (GH
    [#1358])
  * By default the gzip compressor will not include a timestamp in the
    header.  The timestamp can be set by passing it to the
    ``Gzip_Compression`` constructor.
  * Add an OID for RIPEMD-160
  * Fixes for CMake build (GH #1251)
  * Avoid some signed overflow warnings (GH #1220 #1245)
  * As upstream support for Native Client has been deprecated by
    Google, support is now also deprecated in Botan and will be
    removed in a future release.
  * The Perl-XS wrapper has not been maintained in many years. It is
    now deprecated, and if no attempts are made to revive it, it will
    be removed in a future release.
  * Support for building on IRIX has been removed.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518350400">- fix expected version after bump in baselibs.conf too</changelog>
  <changelog author="adam.majer@suse.de" date="1518436800">- Rename libbotan-devel to libbotan2-devel. We can't have clashing
  packages in the archive because Botan1 and Botan2 provide the
  same -devel binary. Botan2 is also no API compatible with Botan.</changelog>
  <changelog author="adam.majer@suse.de" date="1518436801">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Added CVE-2021-24115.patch to fix CVE-2021-24115 ( boo#1182670 )
  * Backport 4db001ca2 to 2.10
  * In Botan before 2.17.3, or this backport, constant-time
    computations are not used for certain decoding and encoding
    operations (base32, base58, base64, and hex)
- Dropped unneeded build requirement gmp,
  GNU MP was removed in 1.11.10
- Enabled tests to verify integrity after patching</changelog>
</package>
<package pkgid="3fc5c509145fdbb8154f75a6a6edecbec153db4f8e50a3f947f83776a7c84a22" name="Botan" arch="src">
  <version epoch="0" ver="2.10.0" rel="lp152.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1505995200">- Explicitly require libopenssl-1_0_0-devel (bsc#1055322)
  * Botan 1.x won't support OpenSSL 1.1
  (https://github.com/randombit/botan/issues/753)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506427200">- Fix for CVE-2017-14737: A cryptographic cache-based side channel in the RSA
  implementation allows local attacker to recover information about RSA secret
  keys.
  * add CVE-2017-14737.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507118400">- Update to 1.10.17
  - Address a side channel affecting modular exponentiation. An attacker
    capable of a local or cross-VM cache analysis attack may be able to recover
    bits of secret exponents as used in RSA, DH, etc. CVE-2017-14737 Workaround
    a miscompilation bug in GCC 7 on x86-32 affecting GOST-34.11 hash function.
    (GH #1192 #1148 #882, bsc#1060433)
  - Add SecureVector::data() function which returns the start of the buffer.
    This makes it slightly simpler to support both 1.10 and 2.x APIs in the
    same codebase.  When compiled by a C++11 (or later) compiler, a template
    typedef of SecureVector, secure_vector, is added. In 2.x this class is a
    std::vector with a custom allocator, so has a somewhat different interface
    than SecureVector in 1.10. But this makes it slightly simpler to support
    both 1.10 and 2.x APIs in the same codebase.
  - Fix a bug that prevented configure.py from running under Python3
  - Botan 1.10.x does not support the OpenSSL 1.1 API. Now the build will
    [#]error if OpenSSL 1.1 is detected. Avoid ?with-openssl if compiling against
    1.1 or later. (GH #753)
  - Import patches from Debian adding basic support for
    building on aarch64, ppc64le, or1k, and mipsn32 platforms.
  * obsoletes CVE-2017-14737.patch
  * refreshes aarch64-support.patch
  * drop ppc64le-support.patch for upstream version
    (disables altivec support as per concerns by upstream)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1509537600">- configure Botan explicitly with python3</changelog>
  <changelog author="i@marguerite.su" date="1515412800">- fix build. python3 configure itself is useless?
  we should make package python3 too.</changelog>
  <changelog author="i@marguerite.su" date="1515672000">- add Botan2-INT_MAX.patch
  * Fix ?INT_MAX was not declared in this scope?
    in openSUSE Leap 42.1</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518091200">- fix unknown flag -fstack-clash-protection for openSUSE 42.3
- rename to Botan2
- drop Botan2-INT_MAX.patch as not needed anymore
- Bump to libbotan 2.4
  Changes and new features:
  * Several build improvements requested by downstream packagers,
    including the ability to disable building the static library. All
    makefile constructs that were specific to nmake or GNU make have
    been eliminated, thus the option ``--makefile-style`` which was
    previously used to select the makefile type has also been
    removed. (GH #1230 #1237 #1300 #1318 #1319 #1324 #1325 #1346)
  * Support for negotiating the DH group as specified in RFC 7919 is
    now available in TLS (GH #1263)
  * Support for ARIA-GCM ciphersuites are now available in TLS. They
    are disabled by default. (GH #1284)
  * Add support for generating and verifying X.509 objects
    (certificates, CRLs, etc) using RSA-PSS signatures (GH #1270 and
    [#1368])
  * Add support for AES key wrapping with padding, as specified in RFC
    5649 and NIST SP 800-38F (GH #1301)
  * OCSP requests made during certificate verification had the
    potential to hang forever. Now the sockets are non-blocking and a
    timeout is enforced. (GH #1360 fixing GH #1326)
  * Add ``Public_Key::fingerprint_public`` which allows fingerprinting
    the public key.
    The previously available ``Private_Key::fingerprint`` is
    deprecated, now ``Private_Key::fingerprint_private`` should be
    used if this is required.  (GH #1357)
  * ECC certificates generated by Botan used an invalid encoding for
    the parameters field, which was rejected by some certificate
    validation libraries notably BouncyCastle. (GH #1367)
  * Loading an ECC key which used OID encoding for the domain
    parameters, then saving it, would result in a key using the
    explicit parameters encoding.  Now the OID encoding is
    retained. (GH #1365)
  * Correct various problems in certificate path validation that arose
    when multiple paths could be constructed leading to a trusted root
    but due to other constraints only some of them validated. (GH
    [#1363])
  * It is now possible for certificate validation to return warning
    indicators, such as that the distinguished name is not within
    allowed limits or that a certificate with a negative serial number
    was observed. (GH #1363 #1359)
  * XMSS signatures now are multi-threaded for improved performance
    (GH #1267)
  * Fix a bug that caused the TLS peer cert list to be empty on a
    resumed session.  (GH #1303 #1342)
  * Increase the maximum HMAC key length from 512 bytes to 4096
    bytes. This allows using a DH key exchange in TLS with a group
    greater than 4096 bits. (GH #1316)
  * Fix a bug in the TLS server where, on receiving an SSLv3 client
    hello, it would attempt to negotiate TLS v1.2. Now a
    protocol_version alert is sent.  Found with tlsfuzzer. (GH #1316)
  * Fix several bugs related to sending the wrong TLS alert type in
    various error scenarios, caught with tlsfuzzer.
  * Add support for a ``tls_http_server`` command line utility which
    responds to simple GET requests. This is useful for testing
    against a browser, or various TLS test tools which expect the
    underlying protocol to be HTTP. (GH #1315)
  * Add an interface for generic PSK data stores, as well as an
    implementation which encrypts stored values with AES key
    wrapping. (GH #1302)
  * Optimize GCM mode on systems both with and without carryless
    multiply support. This includes a new base case implementation
    (still constant time), a new SSSE3 implementation for systems with
    SSSE3 but not clmul, and better algorithms for systems with clmul
    and pmull. (GH #1253 #1263)
  * Various optimizations for OCB, CFB, CTR, SM3, SM4, GMAC, BLAKE2b,
    Blowfish, Twofish, CAST-128, and CRC24 (GH #1281)
  * Salsa20 now supports the seek operation.
  * Add ``EC_Group::known_named_groups`` (GH #1339)
  * Symmetric algorithms (block ciphers, stream ciphers, MACs) now
    verify that a key was set before accepting data. Previously
    attempting to use an unkeyed object would instead result in either
    a crash or invalid outputs. (GH #1279)
  * The X509 certificate, CRL and PKCS10 types have been heavily
    refactored internally. Previously all data of these types was
    serialized to strings, then in the event a more complicated data
    structure (such as X509_DN) was needed, it would be recreated from
    the string representation. However the round trip process was not
    perfect and could cause fields to become lost. This approach is no
    longer used, fixing several bugs (GH #1010 #1089 #1242 #1252). The
    internal data is now stored in a ``shared_ptr``, so copying such
    objects is now very cheap. (GH #884)
  * ASN.1 string objects previously held their contents as ISO 8859-1
    codepoints.  However this led to certificates which contained
    strings outside of this character set (eg in Cyrillic, Greek, or
    Chinese) being rejected. Now the strings are always converted to
    UTF-8, which allows representing any character. In addition, UCS-4
    strings are now supported.  (GH #1113 #1250 #1287 #1289)
  * It is now possible to create an uninitialized X509_Certificate
    object. Such an object will throw if any attempt to access its
    members is made. (GH #1335)
  * In BER decoder, avoid unbounded stack recursion when parsing
    nested indefinite length values. Now at most 16 nested indefinite
    length values are accepted, anything deeper resulting in a
    decoding error.  (GH #1304 OSS-Fuzz 4353).
  * A new ASN.1 printer API allows generating a string representation
    of arbitrary BER data. This is used in the ``asn1print`` command
    line utility and may be useful in other applications, for instance
    for debugging.
  * New functions for bit rotations that distinguish rotating by a
    compile-time constant vs a runtime variable rotation. This allows
    better optimizations in both cases. Notably performance of
    CAST-128 and CAST-256 are substantially improved. (GH #1247)
  * TLS CBC ciphersuites now are implemented using the standard CBC
    code, instead of reimplementing CBC inside the TLS stack. This
    allows for parallel decryption of TLS CBC ciphertexts, and
    improves performance especially when using AES hardware
    support. (GH #1269)
  * Add callbacks to make it possible for an application using TLS to
    provide custom implementations of signature schemes, eg when
    offloading the computations to another device. (GH #1332)
  * Use a direct calculation for calendar computations instead of
    relying on non-portable operating system interfaces. (GH #1336)
  * Fix a bug in the amalgamation generation which could cause build
    failures on some systems including macOS. (GH #1264 #1265)
  * A particular code sequence in TLS handshake would always (with an
    ECC ciphersuite) result in an exception being thrown and then
    caught.  This has changed so no exception is thrown. (GH #1275)
  * The code for byteswapping has been improved for ARMv7 and for
    Windows x86-64 systems using MSVC. (GH #1274)
  * The GMAC class no longer derives from GHASH. This should not cause
    any noticeable change for applications. (GH #1253)
  * The base implementation of AES now uses a single 4K table, instead
    of 4 such tables. This offers a significant improvement against
    cache-based side channels without hurting performance too much. In
    addition the table is now guaranteed to be aligned on a cache
    line, which ensures the additional countermeasure of reading each
    cache line works as expected. (GH #1255)
  * In TLS client resumption, avoid sending a OCSP stapling
    request. This caused resumption failures with some servers. (GH
    [#1276])
  * The overhead of making a call through the FFI layer has been
    reduced.
  * The IDs for SHA-3 PKCSv1.5 signatures added in 2.3.0 were
    incorrect. They have been changed to use the correct encoding, and
    a test added to ensure such errors do not recur.
  * Counter mode allows setting a configurable width of the
    counter. Previously it was allowed for a counter of even 8 bits
    wide, which would mean the keystream would repeat after just 256
    blocks. Now it requires the width be at least 32 bits. The only
    way this feature could be used was by manually constructing a
    ``CTR_BE`` object and setting the second parameter to something in
    the range of 1 to 3.
  * A new mechanism for formatting ASN.1 data is included in
    ``asn1_print.h``.  This is the same functionality used by the
    command line ``asn1print`` util, now cleaned up and moved to the
    library.
  * Add ``Pipe::append_filter``. This is like the existing
    (deprecated) ``Pipe::append``, the difference being that
    ``append_filter`` only allows modification before the first call
    to ``start_msg``. (GH #1306 #1307)
  * The size of ASN1_Tag is increased to 32 bits. This avoids a
    problem with UbSan (GH #751)
  * Fix a bug affecting bzip2 compression. In certain circumstances,
    compression would fail with ``BZ_SEQUENCE_ERROR`` due to calling
    bzlib in an way it does not support. (GH #1308 #1309)
  * In 2.3.0, final annotations were added to many classes including
    the TLS policies (like ``Strict_Policy`` and
    ``BSI_TR_02102_2``). However it is reasonable and useful for an
    application to derive from one of these policies, so as to create
    an application specific policy that is based on a library-provided
    policy, but with a few tweaks. So the final annotations have been
    removed on these classes. (GH #1292)
  * A new option ``--with-pdf`` enables building a PDF copy of the
    handbook.  (GH #1337)
  * A new option ``--with-rst2man`` enables building a man page for
    the command line util using Docutils rst2man. (GH #1349)
  * Support for NEON is now enabled under Clang.
  * Now the compiler version is detected using the preprocessor,
    instead of trying to parse the output of the compiler's version
    string, which was subject to problems with localization. (GH
    [#1358])
  * By default the gzip compressor will not include a timestamp in the
    header.  The timestamp can be set by passing it to the
    ``Gzip_Compression`` constructor.
  * Add an OID for RIPEMD-160
  * Fixes for CMake build (GH #1251)
  * Avoid some signed overflow warnings (GH #1220 #1245)
  * As upstream support for Native Client has been deprecated by
    Google, support is now also deprecated in Botan and will be
    removed in a future release.
  * The Perl-XS wrapper has not been maintained in many years. It is
    now deprecated, and if no attempts are made to revive it, it will
    be removed in a future release.
  * Support for building on IRIX has been removed.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518350400">- fix expected version after bump in baselibs.conf too</changelog>
  <changelog author="adam.majer@suse.de" date="1518436800">- Rename libbotan-devel to libbotan2-devel. We can't have clashing
  packages in the archive because Botan1 and Botan2 provide the
  same -devel binary. Botan2 is also no API compatible with Botan.</changelog>
  <changelog author="adam.majer@suse.de" date="1518436801">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Added CVE-2021-24115.patch to fix CVE-2021-24115 ( boo#1182670 )
  * Backport 4db001ca2 to 2.10
  * In Botan before 2.17.3, or this backport, constant-time
    computations are not used for certain decoding and encoding
    operations (base32, base58, base64, and hex)
- Dropped unneeded build requirement gmp,
  GNU MP was removed in 1.11.10
- Enabled tests to verify integrity after patching</changelog>
</package>
<package pkgid="485dc440cc70f887595c25277607b8f0c1ab831d5190a5c78343a063745c38fc" name="Botan" arch="x86_64">
  <version epoch="0" ver="2.10.0" rel="lp152.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1505995200">- Explicitly require libopenssl-1_0_0-devel (bsc#1055322)
  * Botan 1.x won't support OpenSSL 1.1
  (https://github.com/randombit/botan/issues/753)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506427200">- Fix for CVE-2017-14737: A cryptographic cache-based side channel in the RSA
  implementation allows local attacker to recover information about RSA secret
  keys.
  * add CVE-2017-14737.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507118400">- Update to 1.10.17
  - Address a side channel affecting modular exponentiation. An attacker
    capable of a local or cross-VM cache analysis attack may be able to recover
    bits of secret exponents as used in RSA, DH, etc. CVE-2017-14737 Workaround
    a miscompilation bug in GCC 7 on x86-32 affecting GOST-34.11 hash function.
    (GH #1192 #1148 #882, bsc#1060433)
  - Add SecureVector::data() function which returns the start of the buffer.
    This makes it slightly simpler to support both 1.10 and 2.x APIs in the
    same codebase.  When compiled by a C++11 (or later) compiler, a template
    typedef of SecureVector, secure_vector, is added. In 2.x this class is a
    std::vector with a custom allocator, so has a somewhat different interface
    than SecureVector in 1.10. But this makes it slightly simpler to support
    both 1.10 and 2.x APIs in the same codebase.
  - Fix a bug that prevented configure.py from running under Python3
  - Botan 1.10.x does not support the OpenSSL 1.1 API. Now the build will
    [#]error if OpenSSL 1.1 is detected. Avoid ?with-openssl if compiling against
    1.1 or later. (GH #753)
  - Import patches from Debian adding basic support for
    building on aarch64, ppc64le, or1k, and mipsn32 platforms.
  * obsoletes CVE-2017-14737.patch
  * refreshes aarch64-support.patch
  * drop ppc64le-support.patch for upstream version
    (disables altivec support as per concerns by upstream)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1509537600">- configure Botan explicitly with python3</changelog>
  <changelog author="i@marguerite.su" date="1515412800">- fix build. python3 configure itself is useless?
  we should make package python3 too.</changelog>
  <changelog author="i@marguerite.su" date="1515672000">- add Botan2-INT_MAX.patch
  * Fix ?INT_MAX was not declared in this scope?
    in openSUSE Leap 42.1</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518091200">- fix unknown flag -fstack-clash-protection for openSUSE 42.3
- rename to Botan2
- drop Botan2-INT_MAX.patch as not needed anymore
- Bump to libbotan 2.4
  Changes and new features:
  * Several build improvements requested by downstream packagers,
    including the ability to disable building the static library. All
    makefile constructs that were specific to nmake or GNU make have
    been eliminated, thus the option ``--makefile-style`` which was
    previously used to select the makefile type has also been
    removed. (GH #1230 #1237 #1300 #1318 #1319 #1324 #1325 #1346)
  * Support for negotiating the DH group as specified in RFC 7919 is
    now available in TLS (GH #1263)
  * Support for ARIA-GCM ciphersuites are now available in TLS. They
    are disabled by default. (GH #1284)
  * Add support for generating and verifying X.509 objects
    (certificates, CRLs, etc) using RSA-PSS signatures (GH #1270 and
    [#1368])
  * Add support for AES key wrapping with padding, as specified in RFC
    5649 and NIST SP 800-38F (GH #1301)
  * OCSP requests made during certificate verification had the
    potential to hang forever. Now the sockets are non-blocking and a
    timeout is enforced. (GH #1360 fixing GH #1326)
  * Add ``Public_Key::fingerprint_public`` which allows fingerprinting
    the public key.
    The previously available ``Private_Key::fingerprint`` is
    deprecated, now ``Private_Key::fingerprint_private`` should be
    used if this is required.  (GH #1357)
  * ECC certificates generated by Botan used an invalid encoding for
    the parameters field, which was rejected by some certificate
    validation libraries notably BouncyCastle. (GH #1367)
  * Loading an ECC key which used OID encoding for the domain
    parameters, then saving it, would result in a key using the
    explicit parameters encoding.  Now the OID encoding is
    retained. (GH #1365)
  * Correct various problems in certificate path validation that arose
    when multiple paths could be constructed leading to a trusted root
    but due to other constraints only some of them validated. (GH
    [#1363])
  * It is now possible for certificate validation to return warning
    indicators, such as that the distinguished name is not within
    allowed limits or that a certificate with a negative serial number
    was observed. (GH #1363 #1359)
  * XMSS signatures now are multi-threaded for improved performance
    (GH #1267)
  * Fix a bug that caused the TLS peer cert list to be empty on a
    resumed session.  (GH #1303 #1342)
  * Increase the maximum HMAC key length from 512 bytes to 4096
    bytes. This allows using a DH key exchange in TLS with a group
    greater than 4096 bits. (GH #1316)
  * Fix a bug in the TLS server where, on receiving an SSLv3 client
    hello, it would attempt to negotiate TLS v1.2. Now a
    protocol_version alert is sent.  Found with tlsfuzzer. (GH #1316)
  * Fix several bugs related to sending the wrong TLS alert type in
    various error scenarios, caught with tlsfuzzer.
  * Add support for a ``tls_http_server`` command line utility which
    responds to simple GET requests. This is useful for testing
    against a browser, or various TLS test tools which expect the
    underlying protocol to be HTTP. (GH #1315)
  * Add an interface for generic PSK data stores, as well as an
    implementation which encrypts stored values with AES key
    wrapping. (GH #1302)
  * Optimize GCM mode on systems both with and without carryless
    multiply support. This includes a new base case implementation
    (still constant time), a new SSSE3 implementation for systems with
    SSSE3 but not clmul, and better algorithms for systems with clmul
    and pmull. (GH #1253 #1263)
  * Various optimizations for OCB, CFB, CTR, SM3, SM4, GMAC, BLAKE2b,
    Blowfish, Twofish, CAST-128, and CRC24 (GH #1281)
  * Salsa20 now supports the seek operation.
  * Add ``EC_Group::known_named_groups`` (GH #1339)
  * Symmetric algorithms (block ciphers, stream ciphers, MACs) now
    verify that a key was set before accepting data. Previously
    attempting to use an unkeyed object would instead result in either
    a crash or invalid outputs. (GH #1279)
  * The X509 certificate, CRL and PKCS10 types have been heavily
    refactored internally. Previously all data of these types was
    serialized to strings, then in the event a more complicated data
    structure (such as X509_DN) was needed, it would be recreated from
    the string representation. However the round trip process was not
    perfect and could cause fields to become lost. This approach is no
    longer used, fixing several bugs (GH #1010 #1089 #1242 #1252). The
    internal data is now stored in a ``shared_ptr``, so copying such
    objects is now very cheap. (GH #884)
  * ASN.1 string objects previously held their contents as ISO 8859-1
    codepoints.  However this led to certificates which contained
    strings outside of this character set (eg in Cyrillic, Greek, or
    Chinese) being rejected. Now the strings are always converted to
    UTF-8, which allows representing any character. In addition, UCS-4
    strings are now supported.  (GH #1113 #1250 #1287 #1289)
  * It is now possible to create an uninitialized X509_Certificate
    object. Such an object will throw if any attempt to access its
    members is made. (GH #1335)
  * In BER decoder, avoid unbounded stack recursion when parsing
    nested indefinite length values. Now at most 16 nested indefinite
    length values are accepted, anything deeper resulting in a
    decoding error.  (GH #1304 OSS-Fuzz 4353).
  * A new ASN.1 printer API allows generating a string representation
    of arbitrary BER data. This is used in the ``asn1print`` command
    line utility and may be useful in other applications, for instance
    for debugging.
  * New functions for bit rotations that distinguish rotating by a
    compile-time constant vs a runtime variable rotation. This allows
    better optimizations in both cases. Notably performance of
    CAST-128 and CAST-256 are substantially improved. (GH #1247)
  * TLS CBC ciphersuites now are implemented using the standard CBC
    code, instead of reimplementing CBC inside the TLS stack. This
    allows for parallel decryption of TLS CBC ciphertexts, and
    improves performance especially when using AES hardware
    support. (GH #1269)
  * Add callbacks to make it possible for an application using TLS to
    provide custom implementations of signature schemes, eg when
    offloading the computations to another device. (GH #1332)
  * Use a direct calculation for calendar computations instead of
    relying on non-portable operating system interfaces. (GH #1336)
  * Fix a bug in the amalgamation generation which could cause build
    failures on some systems including macOS. (GH #1264 #1265)
  * A particular code sequence in TLS handshake would always (with an
    ECC ciphersuite) result in an exception being thrown and then
    caught.  This has changed so no exception is thrown. (GH #1275)
  * The code for byteswapping has been improved for ARMv7 and for
    Windows x86-64 systems using MSVC. (GH #1274)
  * The GMAC class no longer derives from GHASH. This should not cause
    any noticeable change for applications. (GH #1253)
  * The base implementation of AES now uses a single 4K table, instead
    of 4 such tables. This offers a significant improvement against
    cache-based side channels without hurting performance too much. In
    addition the table is now guaranteed to be aligned on a cache
    line, which ensures the additional countermeasure of reading each
    cache line works as expected. (GH #1255)
  * In TLS client resumption, avoid sending a OCSP stapling
    request. This caused resumption failures with some servers. (GH
    [#1276])
  * The overhead of making a call through the FFI layer has been
    reduced.
  * The IDs for SHA-3 PKCSv1.5 signatures added in 2.3.0 were
    incorrect. They have been changed to use the correct encoding, and
    a test added to ensure such errors do not recur.
  * Counter mode allows setting a configurable width of the
    counter. Previously it was allowed for a counter of even 8 bits
    wide, which would mean the keystream would repeat after just 256
    blocks. Now it requires the width be at least 32 bits. The only
    way this feature could be used was by manually constructing a
    ``CTR_BE`` object and setting the second parameter to something in
    the range of 1 to 3.
  * A new mechanism for formatting ASN.1 data is included in
    ``asn1_print.h``.  This is the same functionality used by the
    command line ``asn1print`` util, now cleaned up and moved to the
    library.
  * Add ``Pipe::append_filter``. This is like the existing
    (deprecated) ``Pipe::append``, the difference being that
    ``append_filter`` only allows modification before the first call
    to ``start_msg``. (GH #1306 #1307)
  * The size of ASN1_Tag is increased to 32 bits. This avoids a
    problem with UbSan (GH #751)
  * Fix a bug affecting bzip2 compression. In certain circumstances,
    compression would fail with ``BZ_SEQUENCE_ERROR`` due to calling
    bzlib in an way it does not support. (GH #1308 #1309)
  * In 2.3.0, final annotations were added to many classes including
    the TLS policies (like ``Strict_Policy`` and
    ``BSI_TR_02102_2``). However it is reasonable and useful for an
    application to derive from one of these policies, so as to create
    an application specific policy that is based on a library-provided
    policy, but with a few tweaks. So the final annotations have been
    removed on these classes. (GH #1292)
  * A new option ``--with-pdf`` enables building a PDF copy of the
    handbook.  (GH #1337)
  * A new option ``--with-rst2man`` enables building a man page for
    the command line util using Docutils rst2man. (GH #1349)
  * Support for NEON is now enabled under Clang.
  * Now the compiler version is detected using the preprocessor,
    instead of trying to parse the output of the compiler's version
    string, which was subject to problems with localization. (GH
    [#1358])
  * By default the gzip compressor will not include a timestamp in the
    header.  The timestamp can be set by passing it to the
    ``Gzip_Compression`` constructor.
  * Add an OID for RIPEMD-160
  * Fixes for CMake build (GH #1251)
  * Avoid some signed overflow warnings (GH #1220 #1245)
  * As upstream support for Native Client has been deprecated by
    Google, support is now also deprecated in Botan and will be
    removed in a future release.
  * The Perl-XS wrapper has not been maintained in many years. It is
    now deprecated, and if no attempts are made to revive it, it will
    be removed in a future release.
  * Support for building on IRIX has been removed.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518350400">- fix expected version after bump in baselibs.conf too</changelog>
  <changelog author="adam.majer@suse.de" date="1518436800">- Rename libbotan-devel to libbotan2-devel. We can't have clashing
  packages in the archive because Botan1 and Botan2 provide the
  same -devel binary. Botan2 is also no API compatible with Botan.</changelog>
  <changelog author="adam.majer@suse.de" date="1518436801">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Added CVE-2021-24115.patch to fix CVE-2021-24115 ( boo#1182670 )
  * Backport 4db001ca2 to 2.10
  * In Botan before 2.17.3, or this backport, constant-time
    computations are not used for certain decoding and encoding
    operations (base32, base58, base64, and hex)
- Dropped unneeded build requirement gmp,
  GNU MP was removed in 1.11.10
- Enabled tests to verify integrity after patching</changelog>
</package>
<package pkgid="3490e97268bc1646cb4a761d5bf6a23ad4293f87c61c43c2386e24e704bfc237" name="Botan-doc" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="lp152.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1505995200">- Explicitly require libopenssl-1_0_0-devel (bsc#1055322)
  * Botan 1.x won't support OpenSSL 1.1
  (https://github.com/randombit/botan/issues/753)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506427200">- Fix for CVE-2017-14737: A cryptographic cache-based side channel in the RSA
  implementation allows local attacker to recover information about RSA secret
  keys.
  * add CVE-2017-14737.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507118400">- Update to 1.10.17
  - Address a side channel affecting modular exponentiation. An attacker
    capable of a local or cross-VM cache analysis attack may be able to recover
    bits of secret exponents as used in RSA, DH, etc. CVE-2017-14737 Workaround
    a miscompilation bug in GCC 7 on x86-32 affecting GOST-34.11 hash function.
    (GH #1192 #1148 #882, bsc#1060433)
  - Add SecureVector::data() function which returns the start of the buffer.
    This makes it slightly simpler to support both 1.10 and 2.x APIs in the
    same codebase.  When compiled by a C++11 (or later) compiler, a template
    typedef of SecureVector, secure_vector, is added. In 2.x this class is a
    std::vector with a custom allocator, so has a somewhat different interface
    than SecureVector in 1.10. But this makes it slightly simpler to support
    both 1.10 and 2.x APIs in the same codebase.
  - Fix a bug that prevented configure.py from running under Python3
  - Botan 1.10.x does not support the OpenSSL 1.1 API. Now the build will
    [#]error if OpenSSL 1.1 is detected. Avoid ?with-openssl if compiling against
    1.1 or later. (GH #753)
  - Import patches from Debian adding basic support for
    building on aarch64, ppc64le, or1k, and mipsn32 platforms.
  * obsoletes CVE-2017-14737.patch
  * refreshes aarch64-support.patch
  * drop ppc64le-support.patch for upstream version
    (disables altivec support as per concerns by upstream)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1509537600">- configure Botan explicitly with python3</changelog>
  <changelog author="i@marguerite.su" date="1515412800">- fix build. python3 configure itself is useless?
  we should make package python3 too.</changelog>
  <changelog author="i@marguerite.su" date="1515672000">- add Botan2-INT_MAX.patch
  * Fix ?INT_MAX was not declared in this scope?
    in openSUSE Leap 42.1</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518091200">- fix unknown flag -fstack-clash-protection for openSUSE 42.3
- rename to Botan2
- drop Botan2-INT_MAX.patch as not needed anymore
- Bump to libbotan 2.4
  Changes and new features:
  * Several build improvements requested by downstream packagers,
    including the ability to disable building the static library. All
    makefile constructs that were specific to nmake or GNU make have
    been eliminated, thus the option ``--makefile-style`` which was
    previously used to select the makefile type has also been
    removed. (GH #1230 #1237 #1300 #1318 #1319 #1324 #1325 #1346)
  * Support for negotiating the DH group as specified in RFC 7919 is
    now available in TLS (GH #1263)
  * Support for ARIA-GCM ciphersuites are now available in TLS. They
    are disabled by default. (GH #1284)
  * Add support for generating and verifying X.509 objects
    (certificates, CRLs, etc) using RSA-PSS signatures (GH #1270 and
    [#1368])
  * Add support for AES key wrapping with padding, as specified in RFC
    5649 and NIST SP 800-38F (GH #1301)
  * OCSP requests made during certificate verification had the
    potential to hang forever. Now the sockets are non-blocking and a
    timeout is enforced. (GH #1360 fixing GH #1326)
  * Add ``Public_Key::fingerprint_public`` which allows fingerprinting
    the public key.
    The previously available ``Private_Key::fingerprint`` is
    deprecated, now ``Private_Key::fingerprint_private`` should be
    used if this is required.  (GH #1357)
  * ECC certificates generated by Botan used an invalid encoding for
    the parameters field, which was rejected by some certificate
    validation libraries notably BouncyCastle. (GH #1367)
  * Loading an ECC key which used OID encoding for the domain
    parameters, then saving it, would result in a key using the
    explicit parameters encoding.  Now the OID encoding is
    retained. (GH #1365)
  * Correct various problems in certificate path validation that arose
    when multiple paths could be constructed leading to a trusted root
    but due to other constraints only some of them validated. (GH
    [#1363])
  * It is now possible for certificate validation to return warning
    indicators, such as that the distinguished name is not within
    allowed limits or that a certificate with a negative serial number
    was observed. (GH #1363 #1359)
  * XMSS signatures now are multi-threaded for improved performance
    (GH #1267)
  * Fix a bug that caused the TLS peer cert list to be empty on a
    resumed session.  (GH #1303 #1342)
  * Increase the maximum HMAC key length from 512 bytes to 4096
    bytes. This allows using a DH key exchange in TLS with a group
    greater than 4096 bits. (GH #1316)
  * Fix a bug in the TLS server where, on receiving an SSLv3 client
    hello, it would attempt to negotiate TLS v1.2. Now a
    protocol_version alert is sent.  Found with tlsfuzzer. (GH #1316)
  * Fix several bugs related to sending the wrong TLS alert type in
    various error scenarios, caught with tlsfuzzer.
  * Add support for a ``tls_http_server`` command line utility which
    responds to simple GET requests. This is useful for testing
    against a browser, or various TLS test tools which expect the
    underlying protocol to be HTTP. (GH #1315)
  * Add an interface for generic PSK data stores, as well as an
    implementation which encrypts stored values with AES key
    wrapping. (GH #1302)
  * Optimize GCM mode on systems both with and without carryless
    multiply support. This includes a new base case implementation
    (still constant time), a new SSSE3 implementation for systems with
    SSSE3 but not clmul, and better algorithms for systems with clmul
    and pmull. (GH #1253 #1263)
  * Various optimizations for OCB, CFB, CTR, SM3, SM4, GMAC, BLAKE2b,
    Blowfish, Twofish, CAST-128, and CRC24 (GH #1281)
  * Salsa20 now supports the seek operation.
  * Add ``EC_Group::known_named_groups`` (GH #1339)
  * Symmetric algorithms (block ciphers, stream ciphers, MACs) now
    verify that a key was set before accepting data. Previously
    attempting to use an unkeyed object would instead result in either
    a crash or invalid outputs. (GH #1279)
  * The X509 certificate, CRL and PKCS10 types have been heavily
    refactored internally. Previously all data of these types was
    serialized to strings, then in the event a more complicated data
    structure (such as X509_DN) was needed, it would be recreated from
    the string representation. However the round trip process was not
    perfect and could cause fields to become lost. This approach is no
    longer used, fixing several bugs (GH #1010 #1089 #1242 #1252). The
    internal data is now stored in a ``shared_ptr``, so copying such
    objects is now very cheap. (GH #884)
  * ASN.1 string objects previously held their contents as ISO 8859-1
    codepoints.  However this led to certificates which contained
    strings outside of this character set (eg in Cyrillic, Greek, or
    Chinese) being rejected. Now the strings are always converted to
    UTF-8, which allows representing any character. In addition, UCS-4
    strings are now supported.  (GH #1113 #1250 #1287 #1289)
  * It is now possible to create an uninitialized X509_Certificate
    object. Such an object will throw if any attempt to access its
    members is made. (GH #1335)
  * In BER decoder, avoid unbounded stack recursion when parsing
    nested indefinite length values. Now at most 16 nested indefinite
    length values are accepted, anything deeper resulting in a
    decoding error.  (GH #1304 OSS-Fuzz 4353).
  * A new ASN.1 printer API allows generating a string representation
    of arbitrary BER data. This is used in the ``asn1print`` command
    line utility and may be useful in other applications, for instance
    for debugging.
  * New functions for bit rotations that distinguish rotating by a
    compile-time constant vs a runtime variable rotation. This allows
    better optimizations in both cases. Notably performance of
    CAST-128 and CAST-256 are substantially improved. (GH #1247)
  * TLS CBC ciphersuites now are implemented using the standard CBC
    code, instead of reimplementing CBC inside the TLS stack. This
    allows for parallel decryption of TLS CBC ciphertexts, and
    improves performance especially when using AES hardware
    support. (GH #1269)
  * Add callbacks to make it possible for an application using TLS to
    provide custom implementations of signature schemes, eg when
    offloading the computations to another device. (GH #1332)
  * Use a direct calculation for calendar computations instead of
    relying on non-portable operating system interfaces. (GH #1336)
  * Fix a bug in the amalgamation generation which could cause build
    failures on some systems including macOS. (GH #1264 #1265)
  * A particular code sequence in TLS handshake would always (with an
    ECC ciphersuite) result in an exception being thrown and then
    caught.  This has changed so no exception is thrown. (GH #1275)
  * The code for byteswapping has been improved for ARMv7 and for
    Windows x86-64 systems using MSVC. (GH #1274)
  * The GMAC class no longer derives from GHASH. This should not cause
    any noticeable change for applications. (GH #1253)
  * The base implementation of AES now uses a single 4K table, instead
    of 4 such tables. This offers a significant improvement against
    cache-based side channels without hurting performance too much. In
    addition the table is now guaranteed to be aligned on a cache
    line, which ensures the additional countermeasure of reading each
    cache line works as expected. (GH #1255)
  * In TLS client resumption, avoid sending a OCSP stapling
    request. This caused resumption failures with some servers. (GH
    [#1276])
  * The overhead of making a call through the FFI layer has been
    reduced.
  * The IDs for SHA-3 PKCSv1.5 signatures added in 2.3.0 were
    incorrect. They have been changed to use the correct encoding, and
    a test added to ensure such errors do not recur.
  * Counter mode allows setting a configurable width of the
    counter. Previously it was allowed for a counter of even 8 bits
    wide, which would mean the keystream would repeat after just 256
    blocks. Now it requires the width be at least 32 bits. The only
    way this feature could be used was by manually constructing a
    ``CTR_BE`` object and setting the second parameter to something in
    the range of 1 to 3.
  * A new mechanism for formatting ASN.1 data is included in
    ``asn1_print.h``.  This is the same functionality used by the
    command line ``asn1print`` util, now cleaned up and moved to the
    library.
  * Add ``Pipe::append_filter``. This is like the existing
    (deprecated) ``Pipe::append``, the difference being that
    ``append_filter`` only allows modification before the first call
    to ``start_msg``. (GH #1306 #1307)
  * The size of ASN1_Tag is increased to 32 bits. This avoids a
    problem with UbSan (GH #751)
  * Fix a bug affecting bzip2 compression. In certain circumstances,
    compression would fail with ``BZ_SEQUENCE_ERROR`` due to calling
    bzlib in an way it does not support. (GH #1308 #1309)
  * In 2.3.0, final annotations were added to many classes including
    the TLS policies (like ``Strict_Policy`` and
    ``BSI_TR_02102_2``). However it is reasonable and useful for an
    application to derive from one of these policies, so as to create
    an application specific policy that is based on a library-provided
    policy, but with a few tweaks. So the final annotations have been
    removed on these classes. (GH #1292)
  * A new option ``--with-pdf`` enables building a PDF copy of the
    handbook.  (GH #1337)
  * A new option ``--with-rst2man`` enables building a man page for
    the command line util using Docutils rst2man. (GH #1349)
  * Support for NEON is now enabled under Clang.
  * Now the compiler version is detected using the preprocessor,
    instead of trying to parse the output of the compiler's version
    string, which was subject to problems with localization. (GH
    [#1358])
  * By default the gzip compressor will not include a timestamp in the
    header.  The timestamp can be set by passing it to the
    ``Gzip_Compression`` constructor.
  * Add an OID for RIPEMD-160
  * Fixes for CMake build (GH #1251)
  * Avoid some signed overflow warnings (GH #1220 #1245)
  * As upstream support for Native Client has been deprecated by
    Google, support is now also deprecated in Botan and will be
    removed in a future release.
  * The Perl-XS wrapper has not been maintained in many years. It is
    now deprecated, and if no attempts are made to revive it, it will
    be removed in a future release.
  * Support for building on IRIX has been removed.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518350400">- fix expected version after bump in baselibs.conf too</changelog>
  <changelog author="adam.majer@suse.de" date="1518436800">- Rename libbotan-devel to libbotan2-devel. We can't have clashing
  packages in the archive because Botan1 and Botan2 provide the
  same -devel binary. Botan2 is also no API compatible with Botan.</changelog>
  <changelog author="adam.majer@suse.de" date="1518436801">- Don't drop -fstack-clash-protection for openSUSE 42.3 - we just
  need the Update repository present.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518609600">- change group of libbotan-%{version_suffix} to 'System/Libraries' as
  requested on review</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518782400">- drop explicit package requirements
- split binary package and documentation from dynamic library package
  and make documentation package noarch
- merge back Botan2 package to Botan with changelog history
- drop Botan patches
    aarch64-support.patch - doesn't seem to be required anymore
    Botan-fix_install_paths.patch - doesn't seem to be required
    no-cpuid-header.patch - SLE11 not target anymore
    Botan-fix_pkgconfig.patch - this seem to be wrong
    Botan-no-buildtime.patch - not needed anymore
    dont-set-mach-value.diff - doesn't apply, unclear and undocumented why it is there
    Botan-inttypes.patch - not required
    Botan-ull_constants.patch.bz2 - no reason anymore</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522756800">- Update to Botan 2.5
  * Fix error in certificate wildcard matching (CVE-2018-9127), where a
    wildcard cert for b*.example.com would be accepted as a match for any host
    with name *b*.example.com (GH #1519)
  * Add support for RSA-PSS signatures in TLS (GH #1285)
  * Ed25519 certificates are now supported (GH #1501)
  * Many optimizations in ECC operations. ECDSA signatures are 8-10 times
    faster. ECDSA verification is about twice as fast. ECDH key agreement is
    3-4 times faster. (GH #1457 #1478)
  * Implement product scanning Montgomery reduction, which improves
    Diffie-Hellman and RSA performance by 10 to 20% on most platforms. (GH
    [#1472])
  * DSA signing and verification performance has improved by 30-50%.
  * Add a new Credentials_Manager callback that specifies which CAs the server
    has indicated it trusts (GH #1395 fixing #1261)
  * Add new TLS::Callbacks methods that allow creating or removing extensions,
    as well as examining extensions sent by the peer (GH #1394 #1186)
  * Add new TLS::Callbacks methods that allow an application to negotiate use
    of custom elliptic curves. (GH #1448)
  * Add ability to create custom elliptic curves (GH #1441 #1444)
  * Add support for POWER8 AES instructions (GH #1459 #1393 #1206)
  * Fix DSA/ECDSA handling of hashes longer than the group order (GH #1502
    [#986])
  * The default encoding of ECC public keys has changed from compressed to
    uncompressed point representation. This improves compatability with some
    common software packages including Golang?s standard library. (GH #1480
    [#1483])
  * It is now possible to create DNs with custom components. (GH #1490 #1492)
  * It is now possible to specify the serial number of created certificates,
    instead of using the default 128-bit random integer. (GH #1489 #1491)
  * Change DL_Group and EC_Group to store their data as shared_ptr for fast
    copying. Also both classes precompute additional useful values (eg for
    modular reductions). (GH #1435 #1454)
  * Make it possible for PKCS10 requests to include custom extensions. This
    also makes it possible to use muliple SubjectAlternativeNames of a single
    type in a request, which was previously not possible. (GH #1429 #1428)
  * Add new optimized interface for FE1 format preserving encryption. By
    caching a number of values computed in the course of the FPE calculation,
    it provides a 6-7x speedup versus the old API. (GH #1469)
  * Add DSA and ElGamal keygen functions to FFI (#1426)
  * Add Pipe::prepend_filter to replace Pipe::prepend (GH #1402)
  * Fix a memory leak in the OpenSSL block cipher integration, introduced in
  * 2.2.0
  * Use an improved algorithm for generating safe primes which is several tens
    of times faster. Also, fix a bug in the prime sieving algorithm which
    caused standard prime generation (like for RSA keys) to be slower than
    necessary. (GH #1413 #1411)
  * Correct the return value of PK_Encryptor::maximum_input_size which reported
    a much too small value (GH #1410)
  * Remove use of CPU specific optimization flags, instead the user should set
    these via CXXFLAGS if desired. (GH #1392)
  * Resolve an issue that would cause a crash in the tests if they were run on
    a machine without SSE2/NEON/VMX instructions. (GH #1495)
  * The Python module now tries to load DLLs from a list of names and uses the
    first one which successfully loads and indicates it supports the desired
    API level. (GH #1497)
  * Various minor optimizations for SHA-3 (GH #1433 #1434)
  * The output of botan --help has been improved (GH #1387)
  * Add --der-format flag to command line utils, making it possible verify
    DSA/ECDSA signatures generated by OpenSSL command line (GH #1409)
  * Add support for --library-suffix option to configure.py (GH #1405 #1404)
  * Use feature flags to enable/disable system specific code (GH #1378)
  * Add --msvc-runtime option to allow using static runtime (GH #1499 #210)
  * Add ?enable-sanitizers= option to allow specifying which sanitizers to
    enable. The existing --with-sanitizers option just enables some default set
    which is known to work with the minimum required compiler versions.
  * Use either rst2man or rst2man.py for generating man page as distributions
    differ on where this program is installed (GH #1516)
  * The threefish module has been renamed threefish_512 since that is the
    algorithm it provides. (GH #1477)
  * The Perl XS based wrapper has been removed, as it was unmaintained and
    broken. (GH #1412)
  * The sqlite3 encryption patch under contrib has been removed. It is still
    maintained by the original author at
    https://github.com/OlivierJG/botansqlite3</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1523361600">- Update to Botan 2.6
  * CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a
    malformed ciphertext cause the decryptor to read and HMAC an additional 64K
    bytes of data which is not part of the record. This could cause a crash if
    the read went into unmapped memory. No information leak or out of bounds
    write occurs.
  * Add support for OAEP labels (GH #1508)
  * RSA signing is about 15% faster (GH #1523) and RSA verification is about 50% faster.
  * Add exponent blinding to RSA (GH #1523)
  * Add Cipher_Mode::create and AEAD_Mode::create (GH #1527)
  * Fix bug in TLS server introduced in 2.5 which caused connection to fail if
    the client offered any signature algorithm not known to the server (for
    example RSA/SHA-224).
  * Fix a bug in inline asm that would with GCC 7.3 cause incorrect
    computations and an infinite loop during the tests. (GH #1524 #1529)</changelog>
  <changelog author="kasimir_@outlook.de" date="1523534400">- fixed to build on armv6 and armv7</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1531224000">- Update to Botan 2.7
  * CVE-2018-12435 Avoid a side channel in ECDSA signature generation (GH
    [#1604])
  * Avoid a side channel in RSA key generation due to use of a non-constant
    time gcd algorithm. (GH #1542 #1556)
  * Optimize prime generation, especially improving RSA key generation. (GH
    [#1542])
  * Make Karatsuba multiplication, Montgomery field operations, Barrett
    reduction and Montgomery exponentiation const time (GH #1540 #1606 #1609
    [#1610])
  * Optimizations for elliptic curve operations especially improving reductions
    and inversions modulo NIST primes (GH #1534 #1538 #1545 #1546 #1547 #1550)
  * Add 24 word wide Comba multiplication, improving 3072-bit RSA and DH by
    ~25%. (GH #1564)
  * Unroll Montgomery reduction for specific sizes (GH #1603)
  * Improved performance of signature verification in ECGDSA, ECKCDSA, SM2 and
    GOST by 10-15%.
  * XMSS optimizations (GH #1583 #1585)
  * Fix an error that meant XMSS would only sign half as many signatures as is
    allowed (GH #1582)
  * Add support for base32 encoding/decoding (GH #1541)
  * Add BMI2 optimized version of SHA-256, 40% faster on Skylake (GH #1584)
  * Allow the year to be up to 2200 in ASN.1 time objects. Previously this was
    limited to 2100. (GH #1536)
  * Add support for Scrypt password hashing (GH #1570)
  * Add support for using Scrypt for private key encryption (GH #1574)
  * Optimizations for DES/3DES, approx 50% faster when used in certain modes
    such as CBC decrypt or CTR.
  * XMSS signature verification did not check that the signature was of the
    expected length which could lead to a crash. (GH #1537)
  * The bcrypt variants 2b and 2y are now supported.
  * Support for 192-bit Suite B TLS profile is now implemented, as the 128-bit
    Suite B is since 2015 not allowed anymore.
  * Previously botan allowed GCM to be used with an empty nonce, which is not
    allowed by the specification. Now such nonces are rejected.
  * Avoid problems on Windows when compiling in Unicode mode (GH #1615 #1616)
  * Previously for ASN.1 encoded signatures (eg ECDSA) Botan would accept any
    valid BER encoding. Now only the single valid DER encoding is accepted.
  * Correct an error that could in rare cases cause an internal error exception
    when doing computations with the P-224 curve.
  * Optimizations to reduce allocations/copies during DER encoding and BER
    decoding (GH #1571 #1572 #1600)
  * Botan generates X.509 subject key IDs by hashing the public key with
    whatever hash function is being used to sign the certificate. However
    especially for SHA-512 this caused SKIDs that were far longer than
    necessary. Now all SKIDs are truncated to 192 bits.
  * In the test suite use mkstemp to create temporary files instead of creating
    them in the current working directory. (GH #1533 #1530)
  * It is now possible to safely override CXX when invoking make in addition to
    when configure.py is run. (GH #1579)
  * OIDs for Camellia and SM4 in CBC and GCM mode are now defined, making it
    possible to use this algorithms for private key encryption.
  * Avoid creating symlinks to the shared object on OpenBSD (#1535)
  * The factor command runs much faster on larger inputs now.
  * Support for Windows Phone/UWP was deprecated starting in 2.5. This
    deprecation has been reversed as it seems UWP is still actively used. (GH
    [#1586] #1587)
  * Support for Visual C++ 2013 is deprecated, and will be removed in Jan 2019.
  * Added support for GCC?s ?sysroot option to configure.py for
    cross-compiling.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1533038400">- Fix version in baselibs.conf</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547121600">- Update to Botan 2.9
  * Bump SONAME
  * CVE-2018-20187 Address a side channel during ECC key generation, which used an
    unblinded Montgomery ladder. As a result, a timing attack can reveal
    information about the high bits of the secret key.
  * Fix bugs in TLS which caused negotiation failures when the client used an
    unknown signature algorithm or version (GH #1711 #1709 #1708)
  * Fix bug affecting GCM, EAX and ChaCha20Poly1305 where if the associated data
    was set after starting a message, the new AD was not reflected in the produced
    tag. Now with these modes setting an AD after beginning a message throws an
    exception.
  * Use a smaller sieve which improves performance of prime generation.
  * Fixed a bug that caused ChaCha to produce incorrect output after encrypting 256
    GB. (GH #1728)
  * Add NEON and AltiVec implementations of ChaCha (GH #1719 #1728 #1729)
  * Optimize AVX2 ChaCha (GH #1730)
  * Many more operations in BigInt, ECC and RSA code paths are either fully const
    time or avoid problematic branches that could potentially be exploited in a
    side channel attack. (GH #1738 #1750 #1754 #1755 #1757 #1758 #1759 #1762 #1765
    [#1770] #1773 #1774 #1779 #1780 #1794 #1795 #1796 #1797)
  * Several optimizations for BigInt and ECC, improving ECDSA performance by as
    much as 30%. (GH #1734 #1737 #1777 #1750 #1737 #1788)
  * Support recovering an ECDSA public key from a message/signature pair (GH #664
    [#1784])
  * Add base58 encoding/decoding functions (GH #1783)
  * In the command line interface, add support for reading passphrases from the
    terminal with echo disabled (GH #1756)
  * Add CT::Mask type to simplify const-time programming (GH #1751)
  * Add new configure options --disable-bmi2, --disable-rdrand, and
  - -disable-rdseed to prevent use of those instruction sets.
  * Add error_type and error_code functions to Exception type (GH #1744)
  * Now on POSIX systems posix_memalign is used instead of mmap for allocating the
    page-locked memory pool. This avoids issues with fork. (GH #602 #1798)
  * When available, use RDRAND to generate the additional data in
    Stateful_RNG::randomize_with_ts_input
  * Use vzeroall/vzeroupper intrinsics to avoid AVX2/SSE transition penalties.
  * Support for Visual C++ 2013 has been removed (GH #1557 #1697)
  * Resolve a memory leak when verifying ECDSA signatures with versions of OpenSSL
    before 1.1.0 (GH #1698)
  * Resolve a memory leak using ECDH via OpenSSL (GH #1767)
  * Fix an error in XTS which prohibited encrypting values which were exactly the
    same length as the underlying block size. Messages of this size are allowed by
    the standard and other XTS implementations. (GH #1706)
  * Resolve a bug in TSS which resulted in it using an incorrect length field in
    the shares. Now the correct length is encoded, but either correct or buggy
    lengths are accepted when decoding. (GH #1722)
  * Correct a bug when reducing a negative BigInt modulo a small power of 2. (GH
    [#1755])
  * Add CLI utils for threshold secret splitting. (GH #1722)
  * Fix a bug introduced in 2.8.0 that caused compilation failure if using a single
    amalgamation file with AVX2 enabled. (GH #1700)
  * Add an explicit OS target for Emscripten and improve support for it. (GH #1702)
  * Fix small issues when building for QNX
  * Switch the Travis CI build to using Ubuntu 16.04 (GH #1767)
  * Add options to configure.py to disable generation of pkg-config file, and (for
    systems where pkg-config support defaults to off, like Windows), to enable
    generating it. (GH #1268)
  * Modify configure.py to accept empty lists or trailing/extra commas. (GH #1705)
- Update to Botan 2.8
  * Add support for using Apple CommonCrypto library for hashing (GH #1667),
    cipher modes (GH #1674) and block ciphers (GH #1673).
  * Support for negotiating TLS versions 1.0 and 1.1 is disabled in the default
    TLS policy. In addition, support for negotiating TLS ciphersuites using CBC
    or CCM mode is disabled by default. Applications which need to interop with
    old peers must enable these in their TLS policy object. (GH #1651)
  * During primality testing, use a Lucas test in addition to Miller-Rabin. It
    is possible to construct a composite integer which passes n Miller-Rabin
    tests with probability (1/4)^n. So for a incautious verifier using a small
    number of tests (under 16 or so) it is possible if unlikely they would
    accept such a composite as prime. Adding a Lucas test precludes such an
    attack. (GH #1636)
  * Add XChaCha and XChaCha20Poly1305 (GH #1640)
  * Add AVX2 implementations of ChaCha (GH #1662) and Serpent (GH #1660)
  * Add a new password hashing interface in pwdhash.h (GH #1670)
  * C binding improvements. Added functions to get name and supported
    keylengths of cipher, hash and MAC objects, support for FE1 format
    preserving encryption (GH #1625 #1646), functions to load and save RSA keys
    in PKCS #1 format (GH #1621), HOTP and TOTP algorithms, scrypt, certificate
    verification (GH #1647), functions to get the output length of public key
    operations (GH #1642), and functions for loading and serializing X25519
    keys (GH #1681)
  * Support for building with BOTAN_MP_WORD_BITS set to 8 or 16 has been removed.
  * Previously SM2 had two distinct key types, one for signatures and another
    for encryption. They have now been merged into a single key type since in
    practice it seems the same key is at times used for both operations. (GH
    [#1637])
  * The Cipher_Mode class now derives from SymmetricAlgorithm (GH #1639)
  * Add support for using the ARMv8 instructions for SM4 encryption (GH #1622)
  * The entropy source using SecRandomCopyBytes has been removed as it was
    redundant with other entropy sources (GH #1668)
  * The Python module has much better error checking and reporting, and offers
    new functionality such as scrypt, MPI and FPE. (GH #1643 #1646)
  * Fixed a bug that caused CCM to fail with an exception when used with L=8 (GH #1631 #1632)
  * The default bcrypt work factor has been increased from 10 to 12.
  * The default algorithm used in passhash9 has changed from SHA-256 to
    SHA-512, and the default work factor increased from 10 to 15.
  * In ECC private keys, include the public key data for compatibility with GnuTLS (GH #1634 #1635)
  * Add support for using Linux getrandom syscall to access the system PRNG.
    This is disabled by default, use --with-os-feature=getrandom to enable.
  * It is now possible to encrypt private keys using SIV mode.
  * The FFI function botan_privkey_load now ignores its rng argument.
  * Resolve a problem when building under Visual C++ 15.8 (GH #1624)
  * Fix a bug in XSalsa20 (192-bit Salsa nonces) where if set_iv was called
    twice without calling set_key, the resulting encryption was incorrect. (GH
    [#1640])
  * Handle an error seen when verifying invalid ECDSA signatures using LibreSSL
    on non x86-64 platforms (GH #1627 #1628)
  * Fix bugs in PKCS7 and X9.23 CBC padding schemes, which would ignore the
    first byte in the event the padding took up the entire block. (GH #1690)
  * Correct bugs which would cause CFB, OCB, and GCM modes to crash when they
    were used in an unkeyed state. (GH #1639)
  * Optimizations for SM4 and Poly1305
  * Avoid a cache side channel in the AES key schedule
  * Add pk_encrypt and pk_decrypt CLI operations
  * Now asn1print CLI defaults to printing context-specific fields.
  * Use codec_base for Base64, which matches how Base32 is implemented (GH #1597)
  * The cast module has been split up into cast128 and cast256 (GH #1685)
  * When building under Visual C++ 2013, the user must acknowledge the upcoming
    removal of support using the configure.py flag --ack-vc2013-deprecated (GH
    [#1557])</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1554206400">- Update to Botan 2.10
  * Bump SONAME
  * Warning: XMSS currently implements draft-06 which is not compatible with
    the final RFC 8391 specification. A PR is open to fix this, however it will
    break all current uses of XMSS. If you are currently using XMSS please
    comment at https://github.com/randombit/botan/pull/1858. Otherwise the PR
    will be merged and support for draft-06 will be removed starting in 2.11.
  * Added a new certificate store implementation that can access the MacOS
    keychain certificate store. (GH #1830)
  * Redesigned Memory_Pool class, which services allocations out of a set of
    pages locked into memory (using mlock/VirtualLock). It is now faster and
    with improved exploit mitigations. (GH #1800)
  * Add BMI2 implementations of SHA-512 and SHA-3 which improve performance by
    25-35% on common CPUs. (GH #1815)
  * Unroll SHA-3 computation improving performance by 10-12% (GH #1838)
  * Add a Thread_Pool class. It is now possible to run the tests in multiple
    threads with --test-threads=N flag to select the number of threads to use.
    Use --test-threads=0 to run with as many CPU cores as are available on the
    current system. The default remains single threaded. (GH #1819)
  * XMSS signatures now uses a global thread pool instead of spawning new
    threads for each usage. This improves signature generation performance by
    between 10% and 60% depending on architecture and core count. (GH #1864)
  * Some functions related to encoding and decoding BigInts have been
    deprecated. (GH #1817)
  * Binary encoding and decoding of BigInts has been optimized by performing
    word-size operations when possible. (GH #1817)
  * Rename the exception Integrity_Failure to Invalid_Authentication_Tag to
    make its meaning and usage more clear. The old name remains as a typedef.
    (GH #1816)
  * Support for using Boost filesystem and MSVC?s std::filesystem have been
    removed, since already POSIX and Win32 versions had to be maintained for
    portability. (GH #1814)
  * Newly generated McEliece and XMSS keys now default to being encrypted using
    SIV mode, support for which was added in 2.8.0. Previously GCM was used by
    default for these algorithms.
  * Use arc4random on Android systems (GH #1851)
  * Fix the encoding of PGP-S2K iteration counts (GH #1853 #1854)
  * Add a facility for sandboxing the command line util. Currently FreeBSD
    (Capsicum) and OpenBSD (pledge) sandboxes are supported. (GH #1808)
  * Use if constexpr when available.
  * Disable building shared libs on iOS as it was broken and it is not clear
    shared libraries are ever useful on iOS (GH #1865)
  * Renamed the darwin build target to macos. This should not cause any
    user-visible change. (GH #1866)
  * Add support for using sccache to cache the Windows CI build (GH #1807)
  * Add --extra-cxxflags option which allows adding compilation flags without
    overriding the default set. (GH #1826)
  * Add --format= option to the hash cli which allows formatting the output as
    base64 or base58, default output remains hex.
  * Add base58_enc and base58_dec cli utils for base58 encoding/decoding. (GH #1848)
  * Enable getentropy by default on macOS (GH #1862)
  * Avoid using -momit-leaf-frame-pointer flags, since -fomit-frame-pointer is
    already the default with recent versions of GCC.
  * Fix XLC sanitizer flags.
  * Rename Blake2b class to BLAKE2b to match the official name. There is a typedef for compat.
  * Fix a bug where loading a raw Ed25519_PublicKey of incorrect length would
    lead to a crash. (GH #1850)
  * Fix a bug that caused compilation problems using CryptoNG PRNG. (GH #1832)
  * Extended SHAKE-128 cipher to support any key between 1 and 160 bytes,
    instead of only multiples of 8 bytes.
  * Minor HMAC optimizations.
  * Build fixes for GNU/Hurd.
  * Fix a bug that prevented generating or verifying Ed25519 signatures in the
    CLI (GH #1828 #1829)
  * Fix a compilation error when building the amalgamation outside of the
    original source directory when AVX2 was enabled. (GH #1812)
  * Fix a crash when creating the amalgamation if a header file was edited on
    Windows but then the amalgamation was built on Linux (GH #1763)</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1618574400">- Added CVE-2021-24115.patch to fix CVE-2021-24115 ( boo#1182670 )
  * Backport 4db001ca2 to 2.10
  * In Botan before 2.17.3, or this backport, constant-time
    computations are not used for certain decoding and encoding
    operations (base32, base58, base64, and hex)
- Dropped unneeded build requirement gmp,
  GNU MP was removed in 1.11.10
- Enabled tests to verify integrity after patching</changelog>
</package>
<package pkgid="e70d75d4c40fec4a9a30caaf7895b95f55058b89f802cb22b187c0cf6e027540" name="Box2D" arch="src">
  <version epoch="0" ver="2.3.1" rel="lp152.4.3.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Download the real upstream tarball</changelog>
</package>
<package pkgid="0dacd979c7ae4ecdbb4ad6086ba9d2baa13cef7255a38cebe66eb8d95f3cb23b" name="Box2D" arch="src">
  <version epoch="0" ver="2.3.1" rel="lp152.4.5.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Download the real upstream tarball</changelog>
</package>
<package pkgid="ba6391250552de8e0869026f19bdc0057db8fb8885af2f8d2a31407f0d9290c6" name="Box2D" arch="src">
  <version epoch="0" ver="2.4.1" rel="lp152.4.6.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1606996800">- Update to version 2.4.1.
  * API Changes
  * Extended distance joint to have a minimum and maximum limit.
  * Removed rope joint. Use the distance joint instead.
  * B2_USER_SETTINGS and b2_user_settings.h can control user
    data, length units, and maximum polygon vertices.
  * Default user data is now uintptr_t instead of void*
  * b2FixtureDef::restitutionThreshold lets you set the
    restitution velocity threshold per fixture.
  * BREAKING Changes
  * BREAKING: distance joint 0 stiffness now means the spring is
    turned off rather than making the joint rigid.
  * BREAKING: distance joint minimum and maximum must be set
    correctly to get old behavior.
  * Infrastructure
  * Library installation function available in CMake.
  * Shared library (DLL) option available.
  * Bug fixes
- Updates since 2.3.1
  * Infrastructure
  * Documentation in Doxygen format
  * Unit test support
  * Continuous integration testing using Travis CI
  * Limited use of C++11 (nullptr and override)
  * Collision
  * Chain and edge shape must now be one-sided to eliminate ghost
    collisions
  * Broad-phase optimizations
  * Added b2ShapeCast for linear shape casting
  * Dynamics
  * Joint limits are now predictive and not stateful
  * Experimental 2D cloth (rope)
  * b2Body::SetActive -&gt; b2Body::SetEnabled
  * Better support for running multiple worlds
  * Handle zero density better
  * The body behaves like a static body
  * The body is drawn with a red color
  * Added translation limit to wheel joint
  * World dump now writes to box2d_dump.inl
  * Static bodies are never awake
  * All joints with spring-dampers now use stiffness and damping
  * Added utility functions to convert frequency and damping
    ratio to stiffness and damping
- Remove Box2D-fix-version-2.3.1.patch, fixed.
- Change package name from Box2D to box2d.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Fix the source URL</changelog>
</package>
<package pkgid="a442259272010566f60d7d42bc9ed0989e6ab4f7ef8d5fbe6c5920e05ac0e3cb" name="Box2D-doc" arch="noarch">
  <version epoch="0" ver="2.3.1" rel="lp152.4.3.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Download the real upstream tarball</changelog>
</package>
<package pkgid="b067b0741d152147e0f7a967943cdf8a93269b6393b4b937449b9e8d620fffc9" name="Box2D-doc" arch="noarch">
  <version epoch="0" ver="2.3.1" rel="lp152.4.5.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Download the real upstream tarball</changelog>
</package>
<package pkgid="b374328db6b6c3e6d2adee5b8ce12c955e75b6949b8795ad8c727f3bfd76162a" name="HepMC" arch="src">
  <version epoch="0" ver="3.2.2" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1386331200">- Initial version</changelog>
  <changelog author="badshah400@gmail.com" date="1501934400">- Update to version 3.0.0:
  + See list of changes from:
    https://gitlab.cern.ch/hepmc/HepMC3/blob/3.0.0/ChangeLog.
- Drop shared library subpackage; there is no numbered shared lib
  any more. Package everything into the devel package.
- Use cmake macros for build and install.
- Drop unused cmake options.
- Build and install doxygen documentation.
- Manually install examples to docdir, running fdupes to weed out
  duplicated files.
- Update URL and Source URL for new upstream links.
- Updated file-list.</changelog>
  <changelog author="jengelh@inai.de" date="1502280000">- Reapply shared library guidelines.
- Add sover.diff to force shlib versioning.
- Slightly trim description for length.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556712000">- Update to version 3.1.1:
  * Improved treatment of events with cycles.
  * Improved documentation and examples.
- Changes from version 3.1.0:
  * Renaming the namespace, header directory and library name to
    HepMC3
  * SmartPointer is repaced with shared_ptr from C++11, so C++11
    is always required now
  * Split library into HepMC3(core) and HepMC3search (search
    engine)
  * New Search engine with highly abstract search capabilities
  * New readers and writers: WriterAsciiHepMC2, ReaderLHEF
  * Ascii files now have own string in header: Asciiv3
  * Deduction of input file format in ReaderFactory
  * Improved consistency of interface
  * Removal of most deprecated functions and  multiple bugfixes
  * Implemented test suite
  * Improved examples and documentation
- Drop sover.diff: so versioning added by upstream.
- Update Source url in keeping with upstream name changes.
- Adapt to name changes (HepMC -&gt; HepMC3) in spec file wherever
  appropriate.
- Use %%cmake_build for building and parallel jobs when building
  documentation.
- Package new library libHepMC3search.
- New BuildRequires: graphviz-gd and ghostscript-fonts-std needed
  to generate docs, gcc-fortran needed for library.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578484800">- Update to version 3.1.2:
  * Add GenParticle::abs_pid() to match FourVector::abs_eta(),
    abs_rap().
  * Add FourVector component-setting functions in HepMC method
    naming convention; deprecate old camelCase ones.
  * Bugfix release. Fixed some typos and minor bugs.
  * Fixed name of ROOT dictionary
  * Added more standard attributes
  * Extended documentation for doxygen
  * Added stremer output to Reader/Writer classes
  * Added procedures for boost, rotation and reflection to
    GenEvent
  * Added operators for printing events, particles, etc.
  * Added example with reading of compressed file and more tests
- Run fdupes on full docdir to link even more duplicated files.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1585483200">- Disable setting rpaths on installed libs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586001600">- Update to version 3.2.1:
  * Bugfix release.
  * Explicit usage of namespaces.
  * Disallow empty lines for the attribute names.
  * Added an option for explicit selection of packages for
    testing.
  * Adjustments in the interfaces of Tauola/Photos/mc-tester as a
    part of preparation to the new releases of these libraries
  * Experimental support for Python modulescompilation with pypy.
  * Bugfix in VectorString attribute.
  * Improvement in the attribute parsing.
  * Added an option to handle Python 3.9.
  * Implemented special treatment of some broken HePMC2 events.
- Update to version 3.2.0:
  * First release with Python bindings.
  * Added ReaderPlugin and WriterPlugin and macros to declare
    plugins.
  * Fixed GenCrossSection for the case of multiple
    cross-sections.
  * Removed Error class.
  * Removed ReaderHEPEVT::read_hepevt_particle(int i, bool
    iflong=true), ReaderHEPEVT::read_event(GenEvent &amp;evt, bool
    iflong).
  * Removed ReaderHEPEVT::get_vertices_positions_present and
    ReaderHEPEVT::set_vertices_positions_present. The
    functionality above is implemented now Reader::set_options,
    Reader::get_options.
  * Fixed GenEvent::weight_names(). Now it should be called w/o
    arguments.
  * Added set_options, get_options to I/O classes for fine control
    of I/O.
  * The standard Selector members from Selector (e.g.
    Selector::MASS) were moved into a new class StandardSelector.
  * Added HEPMC3_ prefix to DEBUG, ERROR, WARNING  macros.
  * Added Reader::skip(int &amp;) for fast forwarding of input.
  * Added to LHEF::Writer wrapper functions that can be used in
    Python.
  * use delete/override for class members.
- Build python3 bindings and package them in a new subpackage
  python3-HepMC; introduces BuildRequires on python3 and
  python3-devel.
- Build docs and examples by passing the appropriate options to
  cmake and package them in a -doc subpackage; drop commands used
  to build doc separately.
- Use %bcond_with/%bcond_without to enable pythia and disable
  rootio respectively.
- Add BuildRequires: pkgconfig(zlib) to enable linking against
  zlib.
- Package LICENCE and COPYING files using %license.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587556800">- Update Licensing:
  * Main License has been changed to GPL-3.0-or-later.
  * Python bindings licensed under the BSD-3-Clause.
- Package the appropriate License file for python-%{name} package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591617600">- Add HepMC-type-mismatch-error.patch: Fix type mismatch between
  function definition and function call flagged by GCC 10.
- Use autosetup to setup build dir and automatically apply patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 3.2.2:
  * Fixed treatment of the weights in case of different number of
    weights and weight names.
  * Fixed WriterAsciiHepMC2 option for separate flows.
  * Improved treatment of python installation.
  * Split the sources of python bindings into smaller files to
    optimize compilation.
  * Improved cmake configuration for special cases, e.g. old
    cmake, no ROOT, some compilers, etc. Added more error
    handling.
  * Fixed compilation of the search module with Clang.
  * Added an example for search module.
  * Fixed the HepMC2 output for events without weights.
  * Fixed the signal vertex ID for HepMC2 output.
  * Added an interface for HepMC2 (in-memory-conversion).
  * Added functions to search module: search for relatives
    (particle or vertex)-&gt;(particle or vertex) in different
    combinations.
  * The previous point bumps .so version of the libHepMC3search to
    4.
  * Improved the configuration of Pythia8 for tests (minimal
    version requirement).
  * Fixed compatibility of ROOT trees written with HePMC3.0 and
    removed the typedefs in the dictionaries.
- Drop HepMC-type-mismatch-error.patch: incorporated upstream.</changelog>
</package>
<package pkgid="cce25bde74546ddf9dadf7df9c188a1e2c48095393ff6825afec6e959332409e" name="HepMC-devel" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1386331200">- Initial version</changelog>
  <changelog author="badshah400@gmail.com" date="1501934400">- Update to version 3.0.0:
  + See list of changes from:
    https://gitlab.cern.ch/hepmc/HepMC3/blob/3.0.0/ChangeLog.
- Drop shared library subpackage; there is no numbered shared lib
  any more. Package everything into the devel package.
- Use cmake macros for build and install.
- Drop unused cmake options.
- Build and install doxygen documentation.
- Manually install examples to docdir, running fdupes to weed out
  duplicated files.
- Update URL and Source URL for new upstream links.
- Updated file-list.</changelog>
  <changelog author="jengelh@inai.de" date="1502280000">- Reapply shared library guidelines.
- Add sover.diff to force shlib versioning.
- Slightly trim description for length.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556712000">- Update to version 3.1.1:
  * Improved treatment of events with cycles.
  * Improved documentation and examples.
- Changes from version 3.1.0:
  * Renaming the namespace, header directory and library name to
    HepMC3
  * SmartPointer is repaced with shared_ptr from C++11, so C++11
    is always required now
  * Split library into HepMC3(core) and HepMC3search (search
    engine)
  * New Search engine with highly abstract search capabilities
  * New readers and writers: WriterAsciiHepMC2, ReaderLHEF
  * Ascii files now have own string in header: Asciiv3
  * Deduction of input file format in ReaderFactory
  * Improved consistency of interface
  * Removal of most deprecated functions and  multiple bugfixes
  * Implemented test suite
  * Improved examples and documentation
- Drop sover.diff: so versioning added by upstream.
- Update Source url in keeping with upstream name changes.
- Adapt to name changes (HepMC -&gt; HepMC3) in spec file wherever
  appropriate.
- Use %%cmake_build for building and parallel jobs when building
  documentation.
- Package new library libHepMC3search.
- New BuildRequires: graphviz-gd and ghostscript-fonts-std needed
  to generate docs, gcc-fortran needed for library.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578484800">- Update to version 3.1.2:
  * Add GenParticle::abs_pid() to match FourVector::abs_eta(),
    abs_rap().
  * Add FourVector component-setting functions in HepMC method
    naming convention; deprecate old camelCase ones.
  * Bugfix release. Fixed some typos and minor bugs.
  * Fixed name of ROOT dictionary
  * Added more standard attributes
  * Extended documentation for doxygen
  * Added stremer output to Reader/Writer classes
  * Added procedures for boost, rotation and reflection to
    GenEvent
  * Added operators for printing events, particles, etc.
  * Added example with reading of compressed file and more tests
- Run fdupes on full docdir to link even more duplicated files.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1585483200">- Disable setting rpaths on installed libs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586001600">- Update to version 3.2.1:
  * Bugfix release.
  * Explicit usage of namespaces.
  * Disallow empty lines for the attribute names.
  * Added an option for explicit selection of packages for
    testing.
  * Adjustments in the interfaces of Tauola/Photos/mc-tester as a
    part of preparation to the new releases of these libraries
  * Experimental support for Python modulescompilation with pypy.
  * Bugfix in VectorString attribute.
  * Improvement in the attribute parsing.
  * Added an option to handle Python 3.9.
  * Implemented special treatment of some broken HePMC2 events.
- Update to version 3.2.0:
  * First release with Python bindings.
  * Added ReaderPlugin and WriterPlugin and macros to declare
    plugins.
  * Fixed GenCrossSection for the case of multiple
    cross-sections.
  * Removed Error class.
  * Removed ReaderHEPEVT::read_hepevt_particle(int i, bool
    iflong=true), ReaderHEPEVT::read_event(GenEvent &amp;evt, bool
    iflong).
  * Removed ReaderHEPEVT::get_vertices_positions_present and
    ReaderHEPEVT::set_vertices_positions_present. The
    functionality above is implemented now Reader::set_options,
    Reader::get_options.
  * Fixed GenEvent::weight_names(). Now it should be called w/o
    arguments.
  * Added set_options, get_options to I/O classes for fine control
    of I/O.
  * The standard Selector members from Selector (e.g.
    Selector::MASS) were moved into a new class StandardSelector.
  * Added HEPMC3_ prefix to DEBUG, ERROR, WARNING  macros.
  * Added Reader::skip(int &amp;) for fast forwarding of input.
  * Added to LHEF::Writer wrapper functions that can be used in
    Python.
  * use delete/override for class members.
- Build python3 bindings and package them in a new subpackage
  python3-HepMC; introduces BuildRequires on python3 and
  python3-devel.
- Build docs and examples by passing the appropriate options to
  cmake and package them in a -doc subpackage; drop commands used
  to build doc separately.
- Use %bcond_with/%bcond_without to enable pythia and disable
  rootio respectively.
- Add BuildRequires: pkgconfig(zlib) to enable linking against
  zlib.
- Package LICENCE and COPYING files using %license.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587556800">- Update Licensing:
  * Main License has been changed to GPL-3.0-or-later.
  * Python bindings licensed under the BSD-3-Clause.
- Package the appropriate License file for python-%{name} package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591617600">- Add HepMC-type-mismatch-error.patch: Fix type mismatch between
  function definition and function call flagged by GCC 10.
- Use autosetup to setup build dir and automatically apply patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 3.2.2:
  * Fixed treatment of the weights in case of different number of
    weights and weight names.
  * Fixed WriterAsciiHepMC2 option for separate flows.
  * Improved treatment of python installation.
  * Split the sources of python bindings into smaller files to
    optimize compilation.
  * Improved cmake configuration for special cases, e.g. old
    cmake, no ROOT, some compilers, etc. Added more error
    handling.
  * Fixed compilation of the search module with Clang.
  * Added an example for search module.
  * Fixed the HepMC2 output for events without weights.
  * Fixed the signal vertex ID for HepMC2 output.
  * Added an interface for HepMC2 (in-memory-conversion).
  * Added functions to search module: search for relatives
    (particle or vertex)-&gt;(particle or vertex) in different
    combinations.
  * The previous point bumps .so version of the libHepMC3search to
    4.
  * Improved the configuration of Pythia8 for tests (minimal
    version requirement).
  * Fixed compatibility of ROOT trees written with HePMC3.0 and
    removed the typedefs in the dictionaries.
- Drop HepMC-type-mismatch-error.patch: incorporated upstream.</changelog>
</package>
<package pkgid="3eeaeece13aa8b8a6f74a7e0a47568ad50c294637732e818d73f8193793017df" name="HepMC-doc" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1386331200">- Initial version</changelog>
  <changelog author="badshah400@gmail.com" date="1501934400">- Update to version 3.0.0:
  + See list of changes from:
    https://gitlab.cern.ch/hepmc/HepMC3/blob/3.0.0/ChangeLog.
- Drop shared library subpackage; there is no numbered shared lib
  any more. Package everything into the devel package.
- Use cmake macros for build and install.
- Drop unused cmake options.
- Build and install doxygen documentation.
- Manually install examples to docdir, running fdupes to weed out
  duplicated files.
- Update URL and Source URL for new upstream links.
- Updated file-list.</changelog>
  <changelog author="jengelh@inai.de" date="1502280000">- Reapply shared library guidelines.
- Add sover.diff to force shlib versioning.
- Slightly trim description for length.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556712000">- Update to version 3.1.1:
  * Improved treatment of events with cycles.
  * Improved documentation and examples.
- Changes from version 3.1.0:
  * Renaming the namespace, header directory and library name to
    HepMC3
  * SmartPointer is repaced with shared_ptr from C++11, so C++11
    is always required now
  * Split library into HepMC3(core) and HepMC3search (search
    engine)
  * New Search engine with highly abstract search capabilities
  * New readers and writers: WriterAsciiHepMC2, ReaderLHEF
  * Ascii files now have own string in header: Asciiv3
  * Deduction of input file format in ReaderFactory
  * Improved consistency of interface
  * Removal of most deprecated functions and  multiple bugfixes
  * Implemented test suite
  * Improved examples and documentation
- Drop sover.diff: so versioning added by upstream.
- Update Source url in keeping with upstream name changes.
- Adapt to name changes (HepMC -&gt; HepMC3) in spec file wherever
  appropriate.
- Use %%cmake_build for building and parallel jobs when building
  documentation.
- Package new library libHepMC3search.
- New BuildRequires: graphviz-gd and ghostscript-fonts-std needed
  to generate docs, gcc-fortran needed for library.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578484800">- Update to version 3.1.2:
  * Add GenParticle::abs_pid() to match FourVector::abs_eta(),
    abs_rap().
  * Add FourVector component-setting functions in HepMC method
    naming convention; deprecate old camelCase ones.
  * Bugfix release. Fixed some typos and minor bugs.
  * Fixed name of ROOT dictionary
  * Added more standard attributes
  * Extended documentation for doxygen
  * Added stremer output to Reader/Writer classes
  * Added procedures for boost, rotation and reflection to
    GenEvent
  * Added operators for printing events, particles, etc.
  * Added example with reading of compressed file and more tests
- Run fdupes on full docdir to link even more duplicated files.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1585483200">- Disable setting rpaths on installed libs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586001600">- Update to version 3.2.1:
  * Bugfix release.
  * Explicit usage of namespaces.
  * Disallow empty lines for the attribute names.
  * Added an option for explicit selection of packages for
    testing.
  * Adjustments in the interfaces of Tauola/Photos/mc-tester as a
    part of preparation to the new releases of these libraries
  * Experimental support for Python modulescompilation with pypy.
  * Bugfix in VectorString attribute.
  * Improvement in the attribute parsing.
  * Added an option to handle Python 3.9.
  * Implemented special treatment of some broken HePMC2 events.
- Update to version 3.2.0:
  * First release with Python bindings.
  * Added ReaderPlugin and WriterPlugin and macros to declare
    plugins.
  * Fixed GenCrossSection for the case of multiple
    cross-sections.
  * Removed Error class.
  * Removed ReaderHEPEVT::read_hepevt_particle(int i, bool
    iflong=true), ReaderHEPEVT::read_event(GenEvent &amp;evt, bool
    iflong).
  * Removed ReaderHEPEVT::get_vertices_positions_present and
    ReaderHEPEVT::set_vertices_positions_present. The
    functionality above is implemented now Reader::set_options,
    Reader::get_options.
  * Fixed GenEvent::weight_names(). Now it should be called w/o
    arguments.
  * Added set_options, get_options to I/O classes for fine control
    of I/O.
  * The standard Selector members from Selector (e.g.
    Selector::MASS) were moved into a new class StandardSelector.
  * Added HEPMC3_ prefix to DEBUG, ERROR, WARNING  macros.
  * Added Reader::skip(int &amp;) for fast forwarding of input.
  * Added to LHEF::Writer wrapper functions that can be used in
    Python.
  * use delete/override for class members.
- Build python3 bindings and package them in a new subpackage
  python3-HepMC; introduces BuildRequires on python3 and
  python3-devel.
- Build docs and examples by passing the appropriate options to
  cmake and package them in a -doc subpackage; drop commands used
  to build doc separately.
- Use %bcond_with/%bcond_without to enable pythia and disable
  rootio respectively.
- Add BuildRequires: pkgconfig(zlib) to enable linking against
  zlib.
- Package LICENCE and COPYING files using %license.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587556800">- Update Licensing:
  * Main License has been changed to GPL-3.0-or-later.
  * Python bindings licensed under the BSD-3-Clause.
- Package the appropriate License file for python-%{name} package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591617600">- Add HepMC-type-mismatch-error.patch: Fix type mismatch between
  function definition and function call flagged by GCC 10.
- Use autosetup to setup build dir and automatically apply patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 3.2.2:
  * Fixed treatment of the weights in case of different number of
    weights and weight names.
  * Fixed WriterAsciiHepMC2 option for separate flows.
  * Improved treatment of python installation.
  * Split the sources of python bindings into smaller files to
    optimize compilation.
  * Improved cmake configuration for special cases, e.g. old
    cmake, no ROOT, some compilers, etc. Added more error
    handling.
  * Fixed compilation of the search module with Clang.
  * Added an example for search module.
  * Fixed the HepMC2 output for events without weights.
  * Fixed the signal vertex ID for HepMC2 output.
  * Added an interface for HepMC2 (in-memory-conversion).
  * Added functions to search module: search for relatives
    (particle or vertex)-&gt;(particle or vertex) in different
    combinations.
  * The previous point bumps .so version of the libHepMC3search to
    4.
  * Improved the configuration of Pythia8 for tests (minimal
    version requirement).
  * Fixed compatibility of ROOT trees written with HePMC3.0 and
    removed the typedefs in the dictionaries.
- Drop HepMC-type-mismatch-error.patch: incorporated upstream.</changelog>
</package>
<package pkgid="ba19ada6c9e3f0c980e772251c6b9260bcc3d860668e6de8dd8a8c833fb46819" name="HepMC2" arch="src">
  <version epoch="0" ver="2.06.11" rel="lp152.4.3.1"/>
  <changelog author="badshah400@gmail.com" date="1501934400">- Initial version (copy from HepMC = 2.06.09).</changelog>
  <changelog author="badshah400@gmail.com" date="1501934401">- Adapt to using HepMC2 as package name.</changelog>
  <changelog author="badshah400@gmail.com" date="1504267200">- Add explicit Conflicts between HepMC2-devel and HepMC-devel &gt; 3,
  make HepMC2-devel provide HepMC-devel = %{version}.</changelog>
  <changelog author="badshah400@gmail.com" date="1504612800">- Fix shared lib Group, should be System/Libraries.</changelog>
  <changelog author="jengelh@inai.de" date="1504612801">- Trim description for size (like was already done for HepMC
  1st Generation).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 2.06.11:
  * HepMC/HepMCDefs.h: Add a HEPMC_HAS_ORDERED_WEIGHTS #define.
  * HepMC/WeightContainer.h: Add weights() and weight_names()
    public methods.
  * src/WeightContainer.cc: Fix print() to use canonical weight
    ordering.
  * src/GenEventStreamIO.cc: Fix the I/O streaming to preserve the
    weight ordering.
  * Fixed the tests.
- Use %license for COPYING file.
- Minor updates to spec file.
- Update URL and Source Url to new upstream website.</changelog>
</package>
<package pkgid="2f801420eda589706be647648e96f856db534d61c9e3ee540661e4d1a575f445" name="HepMC2-devel" arch="x86_64">
  <version epoch="0" ver="2.06.11" rel="lp152.4.3.1"/>
  <changelog author="badshah400@gmail.com" date="1501934400">- Initial version (copy from HepMC = 2.06.09).</changelog>
  <changelog author="badshah400@gmail.com" date="1501934401">- Adapt to using HepMC2 as package name.</changelog>
  <changelog author="badshah400@gmail.com" date="1504267200">- Add explicit Conflicts between HepMC2-devel and HepMC-devel &gt; 3,
  make HepMC2-devel provide HepMC-devel = %{version}.</changelog>
  <changelog author="badshah400@gmail.com" date="1504612800">- Fix shared lib Group, should be System/Libraries.</changelog>
  <changelog author="jengelh@inai.de" date="1504612801">- Trim description for size (like was already done for HepMC
  1st Generation).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 2.06.11:
  * HepMC/HepMCDefs.h: Add a HEPMC_HAS_ORDERED_WEIGHTS #define.
  * HepMC/WeightContainer.h: Add weights() and weight_names()
    public methods.
  * src/WeightContainer.cc: Fix print() to use canonical weight
    ordering.
  * src/GenEventStreamIO.cc: Fix the I/O streaming to preserve the
    weight ordering.
  * Fixed the tests.
- Use %license for COPYING file.
- Minor updates to spec file.
- Update URL and Source Url to new upstream website.</changelog>
</package>
<package pkgid="0a49e15715e15cb75cf4c3ec274d46d79ddc79f105e80c5d34c13d229db4fbef" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="2263a4efecbd957a7293531809273547cca1303443226ef148a183afb452e95e" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="b07af068a83f2904d1b121556b2f95dc5e7925c1fc0c55230fcba240fb150b90" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="623063bd7ba820df6363adce182762f96e147dd1135ff4b81383f3b842076aaf" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="824c923f7a16c2857c57d4fb5fd7776e101dcf471b5a6ec15fcce7ecd89d936f" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="b46b73910a5d51420df280ddfda6f62a0b319c006b24b573b10ec0ad815c5567" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="d630e95c20e55ee378ac71aae10caf7d78e889b116155d492ed59fddbd5c2cc9" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="03e450c64fa95100d409a26bb3bad07050d39eb8564145f09051b995268c3e68" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="1b72488814600289635b53b43c1cb37d6bd260e63392e051afcd63b47537a0c8" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="44002d504147ae6eb748b8c374d5fbb82bc6d13e6236f51d6d7b5edd2f49b4fc" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="ccee13e2afe3181f9042a5d21ed6b344120fa7fd9bedd2648578e9196c6e49f1" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="b2dde6ab942bba7afb7fca507374138c83b9d6c865225e3e7dbd868f5ce9d180" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="ffd3fe3e871258aeed5784a7f2f55e04359059ccfbb63c68d394d6ef949e12c3" name="ImageMagick" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="f587af8267b6dcdcba497e009da514e3fce436fb7a7693749a5ed133be717032" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="51f08243ef2e8aa43938995ea1b389351749151c3b8781d1511715c7ea4f0eb4" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="ffacf76b16ee9c57f0dd218be65588f0d21813490644efb80f26711c0b106c5d" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="d1232473707f855d5799989fdcef875a7ffd33c10fe2152a10a4a9e89d9d4635" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="8369bab78e86c29730efb8d2c06740e17bd378baf8fdc79926f5593620e2899e" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="f322ec9247b560dee6dfa9dd5467b0c3dc07c05dee3104d11ba179a72594c20b" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="100389dc1906fbe436c7b555dd557ae196ecf09045d1e5192c20107767153e67" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="d5637e0c4740d637183edbe552b839de8e6269d1fe7e343f97970703b6176ed0" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="a24f929cc156d85aebce021c7b50b65a5400493805047447e0c9d0bf033ca2bf" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="fa2639830bf90d099e88c967ad81ffecf119f5cb9b71bcf73db19508203de580" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="3d6a93c39c0c7385a69d5fd9e40f4e283513e64833614a43504d0b0aec2c7eae" name="ImageMagick-config-7-SUSE" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="aad287c5a0f88642ebb8a90681f03d6f1f1eb90be354c71abceb9cb42329b19c" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="ccb37e97eeaddfb999517bb7d7a1198a0452001c6eb97cc0f9ec02dede398038" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="af0620933893f66b599da7ac8f768f6a9d7e4be165ec8f1016cb879ab9071e64" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="b8cbb7135970f768e2c857de585342a50fc2f9fc234719f9c2eff479314139bb" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="d1abea147c548bed21501b30d776f27dda4d7c2293d6846f4d30eec23a813549" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="d3eb1903c6f2b8ce7bd36bc291ec00ef3b7c99b134af1fd6ed5c989500c0cd2c" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="fe9fa989d38982497610298794473f3b4152880cf10da8e9117fa44618ec82ad" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="ebe8b9480973eddc86323aa32bf080c39045cd236a69dc28a9672d101f191ab3" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="57b29e5c5eae91c0d4791fd46ba41e496c6d6371b8bd68dafd19163a57d5c765" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="ae4e520544c973f17e7b96a91bd2bf0f5ec0ee816260c865d83577b52bbfd833" name="ImageMagick-config-7-upstream" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="bf0d3c0d66c4a3906ad668ae390586a7e475a90d8359992962da56a91d20e57d" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="ffda0a15a12300fd5257a4ad5ff2f37f67031a66b614ac4e0a918ab528281141" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="f3ed9f3db9549a163fe8fdd1fb9b6752db7ccbee1ea9785f2edde9142e7e12ea" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="5a93e4bce681ad4efa45828edef31e54863e0fb2a4c3007089cf9e7790cd176b" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="9a245a647795f7e1b0927f936c82c42ed871268f626f12e1d78b917c715e12e8" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="e3297d013e1b03d87d941056d004fa14193101388dbed7ec37a20ccccbe677aa" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="1b31a25cc516145c62c7de7cf1aaec91187dba58944d7fbce4fbc4ce9649916f" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="d12dafe754df0818160b33f73388b809ff6808d8e6a1e6d3fae1c68774a61d0b" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="068ab45cba59884a4f441c6cedcd6d3761e055a1dc0a91080c23287044016f16" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="b19442d0830c3d00ea5aa5afcb0ea1ead378eaa5a5116582ceaf272ca1600830" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="304ab79f832b601eb50bb0c1d54063557f183ee1dfa70bea9f61e5411ec6097e" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="3bb7826e6869d75b7ee7c97a2a964c838ca3def55fd8496cffb450d56c2e3f8c" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="b5ffa9e28bd884d27fbb41c06db1ad806e74e0f8a65c6806460806a0c8c33089" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="cdffdb8693ece57a46d35aa1fed2976a4313b756a374a3d6736f6b545d68fd34" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="8b4c0b06b277115d267d4fcd57760811b145caccc032c7be2334018fde4440e8" name="ImageMagick-devel" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="5f36db731e4660a5293c9e9b4a75e0cc4ea3c799c90f41c2f01647089a930bb8" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="50fa1f02207e175b20d03e193439d582cdfdf77fb269c5631152aa319d13a975" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="112eda664faa8177c02afbcb60ef31be5d6a8f771e7868b1d1f3d3277d4d19b7" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="9bf4d23c664fec1afa37009351ed38efa7a4951b92f8a247cca89f6efcc1c121" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="4a237177b760c5f3b9854cc714d8d4c143a92e8007a3a1e8015e4d2bf1e959f4" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="3ece808367fc31819bfb4c3149bb964ffe2d94a52342c8f4fbeb6fd0a0463a00" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="23fbb754ceabd47b966f58fccf836926ae0d01bdddf6c30cf9528fde58f18119" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="f8cf1a1b96620581d51f006eb05b9253b5cc274924551080f89b204dd653654a" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="893c64380dfa3692013693ea2a81f5f62709026d021f4b0bae5bcde575666493" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="ba9bc1ea1fe613bc4e717fcdd02e6dfb206002b7efa95bfbfbfe2eda3959c08e" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="9aad9cbf1511472081128f85c7dc1351016798885045ea04be91cf010fd7272b" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="7f8d83efd6f6bbd3f2035aec44c1d71892b01afac3cb11d6820a851c7aae6788" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="14643388304a66f402c8cd0eda96407f1aa10c1f4fda3649de84c9689c4b705d" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="cdd4757ee22bfd074872a024310e0186b4f1a6e1e7ff2a8a59377fe07e684c85" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="84834c53474fc76d4f573e4b8d6dd81071963a08c074c72a21e9ac0010fe5532" name="ImageMagick-extra" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="66b5d26a0ad7cbe2f63cc3a0d6de1adb74a55d45b44fda8127bbdb4f49061381" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="aa81619b137387953aca3795aa9c8dcb37a85a36f3e847a07333b550530d87ab" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.10" rel="lp152.9.4.1"/>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update (bsc#1173477)
- added patches
  https://github.com/LibVNC/libvncserver/commit/aac95a9dcf4bbba87b76c72706c3221a842ca433
  + LibVNCServer-CVE-2017-18922.patch</changelog>
</package>
<package pkgid="2115f79af1066d0ee7479044a022a4c4fdab36d66f7129853ab5a4938316578d" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.10" rel="lp152.9.4.2"/>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
</package>
<package pkgid="5d9cd83db5a79dde644565884a081881bc10e1d0f787fedd7fdb1b07336d46ac" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.10" rel="lp152.9.8.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS
  + LibVNCServer-CVE-2020-25708.patch</changelog>
</package>
<package pkgid="5089516101a05747378056381d3147dc4e224222bf97655df6f572ae59661a2d" name="LibVNCServer-devel" arch="i586">
  <version epoch="0" ver="0.9.10" rel="lp152.9.4.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update (bsc#1173477)
- added patches
  https://github.com/LibVNC/libvncserver/commit/aac95a9dcf4bbba87b76c72706c3221a842ca433
  + LibVNCServer-CVE-2017-18922.patch</changelog>
</package>
<package pkgid="ce88e70ac2482a66fd2fd31af101503a6b20794ff7ff5147e56bd39bbbb3dd0e" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp152.9.4.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update (bsc#1173477)
- added patches
  https://github.com/LibVNC/libvncserver/commit/aac95a9dcf4bbba87b76c72706c3221a842ca433
  + LibVNCServer-CVE-2017-18922.patch</changelog>
</package>
<package pkgid="c381fc46424d3f30ba585e76066164a8578909beb3f309aac1dbe94dc49568ec" name="LibVNCServer-devel" arch="i586">
  <version epoch="0" ver="0.9.10" rel="lp152.9.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
</package>
<package pkgid="385eb7ea76d6f70dc6892f7dd587175caa2bc997819fa19081471fb3ad73f483" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp152.9.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
</package>
<package pkgid="0a38daea9ad18915ae1a7152864c70908f55a40454b2d8e71b21cd6b690d02c9" name="LibVNCServer-devel" arch="i586">
  <version epoch="0" ver="0.9.10" rel="lp152.9.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS
  + LibVNCServer-CVE-2020-25708.patch</changelog>
</package>
<package pkgid="e73471085771b5daa4667e395dc5cded57c42a3aa52f862d25b277753556865f" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp152.9.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS
  + LibVNCServer-CVE-2020-25708.patch</changelog>
</package>
<package pkgid="c67539a4effca97102e16feb467d6a4e475b1c9ca9c6b44ee9d01f57f56190d8" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.0.1" rel="lp152.2.5.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="9f31a877e35409e8e2483808f8c7be2ba3034de59747d397080fd4d9c6f99c76" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp152.2.5.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="55ba6047cb5efc8ed79563b4408954ae1ebc5f6f5090c80144cdbd2600756b59" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.0.2" rel="lp152.2.9.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="097e59784f6ed050a64ea34834328da72ab32b93295169aeefcba623f266a93e" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp152.2.9.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="3cffaee6b3f941213966b1f72f55816c6df9259da9fe1de081d943f11ac5c640" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.1.0" rel="lp152.2.12.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="13565b6ad4d4b08c4403a975983a30cc28784239be83caf5f1b5f0bb44c8646d" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.12.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="8f8d4c93e5a1ec8f901dcb68e678449afba16fd6f3b1dac3ab6252f651fe2257" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.1.0" rel="lp152.2.15.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="57cc3a99cf3e730f563aa8f2ff90bddb3f79a16069564e8a2dab542c3a3e9179" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.15.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="4c29f64c5e43406401ee7de70e2dae56c4c5a6180b99f9e64b42951d4dcdd274" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.10.0" rel="lp152.2.55.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
</package>
<package pkgid="aa6ad45ec59e8d3bd75a45eb62f8c3dde5cf1d908541ac3e5cf34fc61acae2f4" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.55.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
</package>
<package pkgid="2431e7fc047a34a445d42d341e0a9589fd6867e4c4fb22532bfea95640a85798" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.11.0" rel="lp152.2.58.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="a2c29d03c8b0e8a1fec8ebe454071acda243d0ead08a564c353a10817cc85161" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="lp152.2.58.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="ce44be3e66d9c4bec2dcb36c5d23eb9038a52ecbebfad16ea8b90e541452011c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.12.0" rel="lp152.2.61.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
</package>
<package pkgid="4ca8d2879ff524265e4b1738025b7c239696fcf60315b884cd074d5860b8dcf8" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.12.0" rel="lp152.2.61.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
</package>
<package pkgid="8c6d91f70b7c14ef454429c4f31f13c9776847a8d0e2ea635a5ae72c5dbe8b6d" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.13.0" rel="lp152.2.64.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
</package>
<package pkgid="990811dca9aefe1ac0185a941d9f5e9571c7eec89f146cef6bbbabe31520c8ae" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.13.0" rel="lp152.2.64.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
</package>
<package pkgid="658b29d0e8a50c6d068715048e664f5d44a90418e53e54ed96f3b061b5ad916f" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.2.0" rel="lp152.2.18.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="3d46679087bb375bc5b95d4d2e3989aea439116e81ed4d051f33b59a58f7781d" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp152.2.18.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="560d78ce2b172b0045e0c844b6b23cf67212771291392e23432488f91ee8e8f1" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.3.0" rel="lp152.2.21.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="f6bf1c2852b1d5f57c025ebdd84a3b9944dce605525dffacf2ec14df5b067965" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp152.2.21.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="f5fc6455f37425e284e8d0ed79db856cf299fd329f3eb1c029ddf4b25e792fdb" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.4.0" rel="lp152.2.24.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="33dfa6166cac65b3e2ddb9ec688240cb9fac0a77d2911f6f40b6f1bdbddc6cc2" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.24.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="a9a6e9b5d8dd79814eeb1574abef4a869a63ee5f1e606e431de2659d268e5902" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.4.1" rel="lp152.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="c556e5707416054b15c5a7bf6c51ec90385db9bee27571e19ea47e4a119ee180" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp152.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="b5dc1963eed0118e68be50aacd04de0b715fcdc3aaf0c1f44e543e337b146092" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.5.0" rel="lp152.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="9bfed64b7e15d90850eaa9ad61e0f430395640417d0c8a58209c8006e2b6d472" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="8c000e53f40775bc33fd693deb5dd79b6e17554311a52ed13a6071837de16fa2" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.5.0" rel="lp152.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="2edea54e1e160704f2bdaa87468d8e6b1869b9c62867a352c951b64bb62611b9" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="f044de3b4bb6b7ad7374869a9844d7f8dd6a06d8c88f173fc1a521e153ecf5c5" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.6.0" rel="lp152.2.34.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
</package>
<package pkgid="e091b9f02c9d95512c83106087f4e5756f071a9e05088e5090e7dfe01e730565" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.34.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
</package>
<package pkgid="c7b3ba082073d69a0d01459465e5c2ddabf93f4330e0e70abc6f854318d6f991" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.6.1" rel="lp152.2.40.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="55f58b85b7f70d6ccdd80824004a22da042c18ed2abfdc67ae8b6876a979f973" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.40.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="30d73956aba225f3b1f3221cfb0ff7dbdc1c60de29cfbbad69181dfc5e4fcdf4" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.7.0" rel="lp152.2.43.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
</package>
<package pkgid="a8f851e9bd128f62d190667302cca6efc16b683643f3d66df9c2b406f3138644" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.43.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
</package>
<package pkgid="1730c48eb427b6c1caf876db1a69df3566eeaed7431e2b2080668b6b5d62ae53" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.7.1" rel="lp152.2.46.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
</package>
<package pkgid="f35cba3a721eeb577cfe334f5243251463d48102bd0573bbbd38abd1af0ba05a" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.46.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
</package>
<package pkgid="87e817bd7649d4d3cc1ade080ccf46e5fcb06073be5e79df27bd116667de4b1c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.8.0" rel="lp152.2.49.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="83760635ae280275961f5c352cd06b9ff7d88a9be591c6f750bd7f29e31c0d59" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.49.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="1354818755de7f04b140d6a3826cc65fc3e2cf8030fc01e3549f95cc89138725" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.9.0" rel="lp152.2.52.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
</package>
<package pkgid="e69931bcb655c0d365ecca22011e4dd8a12e7be78b973aa3f238136e0400e5d8" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.9.0" rel="lp152.2.52.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
</package>
<package pkgid="edae13c17e1d77ccb3dea880c6d2a3bf3acd5de7905dbb4f36c6da433abb8b9f" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.2.0" rel="lp152.2.67.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1628683200">- Firefox Extended Support Release 91.0 ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded "just in time" if you decide to "Log in with Facebook"
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We?ve improved functionality and design for a number of
    Firefox search features:
  * Selecting a search engine at the bottom of the search
    panel now enters search mode for that engine, allowing you to
    see suggestions (if available) for your search terms. The old
    behavior (immediately performing a search) is available with
    a shift-click.
  * When Firefox autocompletes the URL of one of your search
    engines, you can now search with that engine directly in the
    address bar by selecting the shortcut in the address bar
    results.
  * We?ve added buttons at the bottom of the search panel to
    allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
  * Changed: Firefox no longer supports Adobe Flash. There is no
    setting available to re-enable Flash support.
  * Enterprise: Various bug fixes and new policies have been
    implemented in the latest version of Firefox. See more
    details in the Firefox for Enterprise 91 Release Notes.
  MFSA 2021-33 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29981 (bmo#1707774)
    Live range splitting could have led to conflicting
    assignments in the JIT
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29983 (bmo#1719088)
    Firefox for Android could get stuck in fullscreen mode
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29987 (bmo#1716129)
    Users could have been tricked into accepting unwanted
    permissions on Linux
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29982 (bmo#1715318)
    Single bit data leak due to incorrect JIT optimization and
    type confusion
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
    bmo#1719319, bmo#1722073)
    Memory safety bugs fixed in Firefox 91</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
</package>
<package pkgid="43b9a7433cfb58a683ff4a399caf9c70d515e8e24152f63573de02365a68d28a" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.2.0" rel="lp152.2.67.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1628683200">- Firefox Extended Support Release 91.0 ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded "just in time" if you decide to "Log in with Facebook"
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We?ve improved functionality and design for a number of
    Firefox search features:
  * Selecting a search engine at the bottom of the search
    panel now enters search mode for that engine, allowing you to
    see suggestions (if available) for your search terms. The old
    behavior (immediately performing a search) is available with
    a shift-click.
  * When Firefox autocompletes the URL of one of your search
    engines, you can now search with that engine directly in the
    address bar by selecting the shortcut in the address bar
    results.
  * We?ve added buttons at the bottom of the search panel to
    allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
  * Changed: Firefox no longer supports Adobe Flash. There is no
    setting available to re-enable Flash support.
  * Enterprise: Various bug fixes and new policies have been
    implemented in the latest version of Firefox. See more
    details in the Firefox for Enterprise 91 Release Notes.
  MFSA 2021-33 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29981 (bmo#1707774)
    Live range splitting could have led to conflicting
    assignments in the JIT
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29983 (bmo#1719088)
    Firefox for Android could get stuck in fullscreen mode
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29987 (bmo#1716129)
    Users could have been tricked into accepting unwanted
    permissions on Linux
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29982 (bmo#1715318)
    Single bit data leak due to incorrect JIT optimization and
    type confusion
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
    bmo#1719319, bmo#1722073)
    Memory safety bugs fixed in Firefox 91</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
</package>
<package pkgid="ddcaf141364f2db4f5de95cfa209e5f3bcfa7fdc694b240d1df97b5235843148" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.2.0" rel="lp152.2.70.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1628683200">- Firefox Extended Support Release 91.0 ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded "just in time" if you decide to "Log in with Facebook"
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We?ve improved functionality and design for a number of
    Firefox search features:
  * Selecting a search engine at the bottom of the search
    panel now enters search mode for that engine, allowing you to
    see suggestions (if available) for your search terms. The old
    behavior (immediately performing a search) is available with
    a shift-click.
  * When Firefox autocompletes the URL of one of your search
    engines, you can now search with that engine directly in the
    address bar by selecting the shortcut in the address bar
    results.
  * We?ve added buttons at the bottom of the search panel to
    allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
  * Changed: Firefox no longer supports Adobe Flash. There is no
    setting available to re-enable Flash support.
  * Enterprise: Various bug fixes and new policies have been
    implemented in the latest version of Firefox. See more
    details in the Firefox for Enterprise 91 Release Notes.
  MFSA 2021-33 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29981 (bmo#1707774)
    Live range splitting could have led to conflicting
    assignments in the JIT
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29983 (bmo#1719088)
    Firefox for Android could get stuck in fullscreen mode
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29987 (bmo#1716129)
    Users could have been tricked into accepting unwanted
    permissions on Linux
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29982 (bmo#1715318)
    Single bit data leak due to incorrect JIT optimization and
    type confusion
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
    bmo#1719319, bmo#1722073)
    Memory safety bugs fixed in Firefox 91</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
</package>
<package pkgid="d46d5ad56a0ca94907b56bd5bf62587f76b2289de59e7973bf5c291b587af20e" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.2.0" rel="lp152.2.70.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1628683200">- Firefox Extended Support Release 91.0 ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded "just in time" if you decide to "Log in with Facebook"
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We?ve improved functionality and design for a number of
    Firefox search features:
  * Selecting a search engine at the bottom of the search
    panel now enters search mode for that engine, allowing you to
    see suggestions (if available) for your search terms. The old
    behavior (immediately performing a search) is available with
    a shift-click.
  * When Firefox autocompletes the URL of one of your search
    engines, you can now search with that engine directly in the
    address bar by selecting the shortcut in the address bar
    results.
  * We?ve added buttons at the bottom of the search panel to
    allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
  * Changed: Firefox no longer supports Adobe Flash. There is no
    setting available to re-enable Flash support.
  * Enterprise: Various bug fixes and new policies have been
    implemented in the latest version of Firefox. See more
    details in the Firefox for Enterprise 91 Release Notes.
  MFSA 2021-33 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29981 (bmo#1707774)
    Live range splitting could have led to conflicting
    assignments in the JIT
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29983 (bmo#1719088)
    Firefox for Android could get stuck in fullscreen mode
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29987 (bmo#1716129)
    Users could have been tricked into accepting unwanted
    permissions on Linux
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29982 (bmo#1715318)
    Single bit data leak due to incorrect JIT optimization and
    type confusion
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
    bmo#1719319, bmo#1722073)
    Memory safety bugs fixed in Firefox 91</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
</package>
<package pkgid="fc1c87dfa4eced601df7e1d9e7d5622b418d1f857f32aea458f72f4c3f1f3fb8" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp152.2.5.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="a90e3e68c751ac3bf8ddfd0296d1fb743588cd93cb5e84329a4c5468467f4528" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp152.2.9.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="98094db66372a9b593fe81370b3659bb37b0cebc4caf99a1072802b991ea1ce8" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.12.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="1de83975977c8479311d343c66c5272a6f0bc2148434c83d451c6f51dbe84489" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.15.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="efe0916db9d035ebdf224239aa5ddd79f168e95bff2a939b2c561accd2c2b39c" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.55.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
</package>
<package pkgid="3000a49423667ff0e47c5433eb42099c4988d11b3963c1f5feed911e9c397283" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="lp152.2.58.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="e0e8bb7392366d3c25a94347feadccdf4ac5f84eb509080b030fa87d17a19ed2" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.12.0" rel="lp152.2.61.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
</package>
<package pkgid="447ce804537c9a244448ff5f23193048b982cc2b09a82fff42018c9dd64098be" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.13.0" rel="lp152.2.64.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
</package>
<package pkgid="0777ffcaec2a7fe1621f02f2711901f5f00ca66b44e69528be9295d67594345e" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp152.2.18.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="4136bed0eab5551af0651d6ece221d3261ee1fb28320a1881ab9e26aefe99255" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp152.2.21.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="60224e227fee8f3158efbdc5789287ae90c81c8f271110bc1647a085fb5df057" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.24.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="ca25f46be307b0c1803662bcce001b0400eec0851fa53197b0e3aa15fbbc26e4" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp152.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="3be53ceede7267c9c6f06fd325cabd44949ab9adbafbe729ee9504b178525bb6" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="a6d4adb81303d1f9faf3ed01d278daeac5caa46a22364513ec6a333edb2ec307" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="e1ce0f8108b1cd488daf70760dd63d3476f72229d1561fc08056ce518fb3abcd" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.34.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
</package>
<package pkgid="fa1626e1204661077a9125061016b0b48d9025e9749c89f63bc38db6ce035274" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.40.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="a94209a59779a28a18f21ec5c906912ca23ced1f7832a73bffb11ce2c8fb31e5" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.43.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
</package>
<package pkgid="2014db07b47d8dfbe890ab329864dddf920a19c904ff8ce7299cac6cb4d47da6" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.46.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
</package>
<package pkgid="3e0f1e43e1463513ec1c963b87fd3416e813aa356b48d29974c9493d50ecbaaf" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.49.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="974c5ab68716a5745e14ea08e3a2eccafc9ee2680711ced3759ce7b78fa06994" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.9.0" rel="lp152.2.52.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
</package>
<package pkgid="4d36fcd01228e7c73a32c68f5a51fc7e1c50266e19f21b09407b440b1e03461a" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.2.0" rel="lp152.2.67.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1628683200">- Firefox Extended Support Release 91.0 ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded "just in time" if you decide to "Log in with Facebook"
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We?ve improved functionality and design for a number of
    Firefox search features:
  * Selecting a search engine at the bottom of the search
    panel now enters search mode for that engine, allowing you to
    see suggestions (if available) for your search terms. The old
    behavior (immediately performing a search) is available with
    a shift-click.
  * When Firefox autocompletes the URL of one of your search
    engines, you can now search with that engine directly in the
    address bar by selecting the shortcut in the address bar
    results.
  * We?ve added buttons at the bottom of the search panel to
    allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
  * Changed: Firefox no longer supports Adobe Flash. There is no
    setting available to re-enable Flash support.
  * Enterprise: Various bug fixes and new policies have been
    implemented in the latest version of Firefox. See more
    details in the Firefox for Enterprise 91 Release Notes.
  MFSA 2021-33 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29981 (bmo#1707774)
    Live range splitting could have led to conflicting
    assignments in the JIT
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29983 (bmo#1719088)
    Firefox for Android could get stuck in fullscreen mode
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29987 (bmo#1716129)
    Users could have been tricked into accepting unwanted
    permissions on Linux
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29982 (bmo#1715318)
    Single bit data leak due to incorrect JIT optimization and
    type confusion
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
    bmo#1719319, bmo#1722073)
    Memory safety bugs fixed in Firefox 91</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
</package>
<package pkgid="59c155b4ce663f611a8d4721045d7be020afb2f351af6f023544b6d8de241dc5" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.2.0" rel="lp152.2.70.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1628683200">- Firefox Extended Support Release 91.0 ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded "just in time" if you decide to "Log in with Facebook"
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We?ve improved functionality and design for a number of
    Firefox search features:
  * Selecting a search engine at the bottom of the search
    panel now enters search mode for that engine, allowing you to
    see suggestions (if available) for your search terms. The old
    behavior (immediately performing a search) is available with
    a shift-click.
  * When Firefox autocompletes the URL of one of your search
    engines, you can now search with that engine directly in the
    address bar by selecting the shortcut in the address bar
    results.
  * We?ve added buttons at the bottom of the search panel to
    allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
  * Changed: Firefox no longer supports Adobe Flash. There is no
    setting available to re-enable Flash support.
  * Enterprise: Various bug fixes and new policies have been
    implemented in the latest version of Firefox. See more
    details in the Firefox for Enterprise 91 Release Notes.
  MFSA 2021-33 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29981 (bmo#1707774)
    Live range splitting could have led to conflicting
    assignments in the JIT
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29983 (bmo#1719088)
    Firefox for Android could get stuck in fullscreen mode
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29987 (bmo#1716129)
    Users could have been tricked into accepting unwanted
    permissions on Linux
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29982 (bmo#1715318)
    Single bit data leak due to incorrect JIT optimization and
    type confusion
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
    bmo#1719319, bmo#1722073)
    Memory safety bugs fixed in Firefox 91</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
</package>
<package pkgid="97779ddb5f9f269014fe6521065a3ff6b11e6f5cefb07600f3ced7bfd0be79ca" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp152.2.5.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="a98e836d7aa6ef13cf8e5db4eb2ae95ffa02e8cd6b09f3f7f1ef6a1acbe02fef" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp152.2.9.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="de654f60e6e8c2e8694393c537c6533413ebeebfbb07fc48590e1d5c72595aed" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.12.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="fa8aafb69cb26d298691ca1164ef9727c6dd313b471ef51dce231b614582c1da" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.15.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="5980139ef426ab68260e5fd51d212501ef43c789676dfb76d5e2562e2b595a29" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.55.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
</package>
<package pkgid="8c4326e76c53cb3b50edeec28bbce74652eddf55f2b78a151c9b6ba94ce0f2ce" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="lp152.2.58.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="35ac71b496494f468e7b7d5ef44f2c923f6ba2c1ee186c4d5355d51294bf645b" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.12.0" rel="lp152.2.61.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
</package>
<package pkgid="2bb6a1729b794edb9200c7abc7f3ce49530955e016a9cce4e484d10d2833f97d" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.13.0" rel="lp152.2.64.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
</package>
<package pkgid="36ae26c98468dfde2cfaf107907a018bedd43c7d698c8c01b2ca9d3634c96a43" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp152.2.18.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="fcf4644ddf02803fe112c2397b6b64e0e96426cf3aba2e7abe8c906f004eec56" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp152.2.21.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="86c26f518f13a613faacdf30264a924e8d7f05268512911939f5388f7e432e22" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.24.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="180b26070685187ae9bbf16c23463186289ef53cc98a159b41228e131b1f2870" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp152.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="efbfa72e17e27489e41de73c73f756b3697b6fd1ae8d663949f9be8f24ba2ba8" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="66a34e9fae85a44b5494641fba6e612e7d347f3d71375268564993b870c969d5" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="439b26d83d387f425ce67e82c6ff44ee3ac2a70d3591b4ba3ef2e8a44e9ccc93" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.34.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
</package>
<package pkgid="cf725adc964651bff80e828c48aa2d8418ae1becaf272312c624994727f2cb88" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.40.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="9d503df76b8d05691e65287382da80fee794fed29c47746bb6020f7820771097" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.43.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
</package>
<package pkgid="7b48b1b3fe2799c9140786fab9046d0410f2670bb5703799b8a9d82a018bf1da" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.46.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
</package>
<package pkgid="b61eee349d86c5932e9776d01c478f0db3489ea3976b4255da6005af921b680e" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.49.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="306890084548d7e84c16aa1ba887dbf5226c605568fdbe4f00077bdaa04206bd" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.9.0" rel="lp152.2.52.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
</package>
<package pkgid="2835d6e4049a06d990aea4934e8a4f39cf703c5b96f50f797f9cd82c63c673ab" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp152.2.5.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="3475c74b4296e14741d8c873d0d066cb9ad93d860f5d106cbdf6b28907f54043" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp152.2.9.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="e7fb0d3edbaf182bce5cab757ecaa6571d8e7396a67d8b8d67e99610a1f3ab97" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.12.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="11033d5bfe65abf59578b0c2da8a8c617ed82eec906f696656439ed4b359e8af" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.15.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="4c61fa69efd1d97a142da9124576becd64b8f2752395fd9e81ace6b357a2e02b" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.55.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
</package>
<package pkgid="60d8e7e2910782bbefeff3f34e89352d70d76e26b899375972485349696e9437" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="lp152.2.58.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="42691d8cdadc42b2125f3f7cfc49026238003b96b5c75c4fa7a550331bcc0ff2" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.12.0" rel="lp152.2.61.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
</package>
<package pkgid="59f04ce019af278c2fc28bf50c2a76389f396b9c9bb19edf70112f18f1ad8531" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.13.0" rel="lp152.2.64.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
</package>
<package pkgid="d0cc1f1cf23759813642fc653cb316b4bd6926d3c8c37ab86c83162a7e589491" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp152.2.18.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="a28ff36ea0d605e494e95d9b6cdf036328ed2a209b544d9eb2fc80ce3e4d0015" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp152.2.21.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="0c9e4f1b7c0f7b1aa12ede28a9bdef46752cb564c0580127a620b6f050b2ea02" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.24.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="8c7208fcdd0a4cf28101f21f21c8f2000b71fac2de37beda456f80946a9be485" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp152.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="7f5b1d104dbe2317ef17cec6690dc6811c5727302fc6813fb4ecb7726b0c29bb" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="eb8be9ed32d41058b6f11ea31702b0f13440995479c0d710ac4cee830fd39515" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="0415da72186ce3c91cf2dd8b9559ef0fe02f13ab0b342612d2368f244b8ef1aa" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.34.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
</package>
<package pkgid="b8385b91002881f16d9a34aa744008fcc234340df1d0a9dca975bcc4bac5c29a" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.40.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="83178b6de3336053fc87263c6cdf971489788c79f5a080cca17f1cabdba9b7f4" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.43.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
</package>
<package pkgid="b07d0dbd697c5521467f0729a03774da4a8dc22bb8b67321cf0f168f8880417e" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.46.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
</package>
<package pkgid="9ff1dc8d339b5461a68880872420fb7387826b0bd5565b1d9ef9daae75082db1" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.49.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="2aaf041ef0d59927c5870d87c7e73e66d462b7d1c0204ee130d61374bdc3dada" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.9.0" rel="lp152.2.52.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
</package>
<package pkgid="d338a374a1be1b1feee143de34e4aa786c150d3caed98b15006aa05325588673" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.2.0" rel="lp152.2.67.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1628683200">- Firefox Extended Support Release 91.0 ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded "just in time" if you decide to "Log in with Facebook"
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We?ve improved functionality and design for a number of
    Firefox search features:
  * Selecting a search engine at the bottom of the search
    panel now enters search mode for that engine, allowing you to
    see suggestions (if available) for your search terms. The old
    behavior (immediately performing a search) is available with
    a shift-click.
  * When Firefox autocompletes the URL of one of your search
    engines, you can now search with that engine directly in the
    address bar by selecting the shortcut in the address bar
    results.
  * We?ve added buttons at the bottom of the search panel to
    allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
  * Changed: Firefox no longer supports Adobe Flash. There is no
    setting available to re-enable Flash support.
  * Enterprise: Various bug fixes and new policies have been
    implemented in the latest version of Firefox. See more
    details in the Firefox for Enterprise 91 Release Notes.
  MFSA 2021-33 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29981 (bmo#1707774)
    Live range splitting could have led to conflicting
    assignments in the JIT
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29983 (bmo#1719088)
    Firefox for Android could get stuck in fullscreen mode
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29987 (bmo#1716129)
    Users could have been tricked into accepting unwanted
    permissions on Linux
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29982 (bmo#1715318)
    Single bit data leak due to incorrect JIT optimization and
    type confusion
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
    bmo#1719319, bmo#1722073)
    Memory safety bugs fixed in Firefox 91</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
</package>
<package pkgid="6a3062e18f79735b1250810b8bee12efd54f453c931aaec8e290c9fa2beabc69" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.2.0" rel="lp152.2.70.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1628683200">- Firefox Extended Support Release 91.0 ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded "just in time" if you decide to "Log in with Facebook"
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We?ve improved functionality and design for a number of
    Firefox search features:
  * Selecting a search engine at the bottom of the search
    panel now enters search mode for that engine, allowing you to
    see suggestions (if available) for your search terms. The old
    behavior (immediately performing a search) is available with
    a shift-click.
  * When Firefox autocompletes the URL of one of your search
    engines, you can now search with that engine directly in the
    address bar by selecting the shortcut in the address bar
    results.
  * We?ve added buttons at the bottom of the search panel to
    allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
  * Changed: Firefox no longer supports Adobe Flash. There is no
    setting available to re-enable Flash support.
  * Enterprise: Various bug fixes and new policies have been
    implemented in the latest version of Firefox. See more
    details in the Firefox for Enterprise 91 Release Notes.
  MFSA 2021-33 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29981 (bmo#1707774)
    Live range splitting could have led to conflicting
    assignments in the JIT
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29983 (bmo#1719088)
    Firefox for Android could get stuck in fullscreen mode
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29987 (bmo#1716129)
    Users could have been tricked into accepting unwanted
    permissions on Linux
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29982 (bmo#1715318)
    Single bit data leak due to incorrect JIT optimization and
    type confusion
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
    bmo#1719319, bmo#1722073)
    Memory safety bugs fixed in Firefox 91</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
</package>
<package pkgid="aa659350155b44a88ac6b86d4013e475682c3afa479060ac9b358bfda924d75e" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp152.2.5.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="071f887eccb9f0e8ccd7904e2d20036fb31a22cc383c2a94a58cf6bd63cb7ccf" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp152.2.9.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="f810d3416094dd6bbf49aa71c9d526896ba1df98289121f3cad199afe9df8a4f" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.12.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="2b3e973213820ac67c127db02690f87d043565eb88d4f6f6eea968f51acdf14e" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.15.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="545a7ac2a90ccbf26430250d9e37eaaf37bea323014ecf845ae07361c1bbfad3" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.55.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
</package>
<package pkgid="6600c97de71aac5f6788adaa03b44af3b2d1f7919e1ca7e94741e09b8eb42067" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="lp152.2.58.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="9e19c1860c4dc4a62fb3d5fae797d6aeeb6f3ce4334d660acab8deca3744f145" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.12.0" rel="lp152.2.61.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
</package>
<package pkgid="3b16ceb316c457d5ab6fe0e2576be5f3c9428c9f618e6936321ac0ef2382bddd" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.13.0" rel="lp152.2.64.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
</package>
<package pkgid="ac0df5b2ec2e882e55d99af20f84437fbc63b1182b27846eb59421aaefc6ee40" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp152.2.18.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="5ffadbfd8985771fd82efb277449870879d0b8b33787e06a7dd2c4ea417e483a" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp152.2.21.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="d3ad908099e520b98e10c42ee2bb8e2e868b576e55dacf11c3f6190be270ad25" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.24.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="0036c27ef096e33e6ec90076a3cabf1b18ed8bafc65533a4edf85cd71f7fb3b0" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp152.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="ebd0fc1031182ff79d5cadbca64f210b38af3372527ceecd092c6f334e17128e" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="6a26f602bfa6491f6773d020621bc1d72a95a1e2c3ae671595f32580b86a8f83" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="058a97adc8aa14f0600e5f1b33f68c438f8bb9236f81c5058b3b7c9f660cd6e6" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.34.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
</package>
<package pkgid="0bc3c5e0845b477c8db418798d58e0b0a75213ebe3502791cde6118f9c074876" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.40.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="4d75dd5082d29edb53447e52433d00686f4ff582405850e74e30ef336ef1a7fd" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.43.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
</package>
<package pkgid="861539f7e7273afaa1e6813a54ef7ed1f635049327651199bd66219e49dd071a" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.46.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
</package>
<package pkgid="c41c49def242f1b39b9b11ba9838c92940c5faf5e1a5e228c86abb2dd80e4dc4" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.49.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="3316741994a7bfa08740871f7110e3de6919ed3435ab94fc18395d25c969b24a" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.9.0" rel="lp152.2.52.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
</package>
<package pkgid="07a5cd8c94981245c8532dacdb9e4b6d16fd780e396f182b333aab33d1b09004" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.2.0" rel="lp152.2.67.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1628683200">- Firefox Extended Support Release 91.0 ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded "just in time" if you decide to "Log in with Facebook"
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We?ve improved functionality and design for a number of
    Firefox search features:
  * Selecting a search engine at the bottom of the search
    panel now enters search mode for that engine, allowing you to
    see suggestions (if available) for your search terms. The old
    behavior (immediately performing a search) is available with
    a shift-click.
  * When Firefox autocompletes the URL of one of your search
    engines, you can now search with that engine directly in the
    address bar by selecting the shortcut in the address bar
    results.
  * We?ve added buttons at the bottom of the search panel to
    allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
  * Changed: Firefox no longer supports Adobe Flash. There is no
    setting available to re-enable Flash support.
  * Enterprise: Various bug fixes and new policies have been
    implemented in the latest version of Firefox. See more
    details in the Firefox for Enterprise 91 Release Notes.
  MFSA 2021-33 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29981 (bmo#1707774)
    Live range splitting could have led to conflicting
    assignments in the JIT
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29983 (bmo#1719088)
    Firefox for Android could get stuck in fullscreen mode
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29987 (bmo#1716129)
    Users could have been tricked into accepting unwanted
    permissions on Linux
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29982 (bmo#1715318)
    Single bit data leak due to incorrect JIT optimization and
    type confusion
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
    bmo#1719319, bmo#1722073)
    Memory safety bugs fixed in Firefox 91</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
</package>
<package pkgid="702ede6a95f15a1b20055c38d193f348f984294231aa1f2130e2c7c00756cc9e" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.2.0" rel="lp152.2.70.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1628683200">- Firefox Extended Support Release 91.0 ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded "just in time" if you decide to "Log in with Facebook"
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We?ve improved functionality and design for a number of
    Firefox search features:
  * Selecting a search engine at the bottom of the search
    panel now enters search mode for that engine, allowing you to
    see suggestions (if available) for your search terms. The old
    behavior (immediately performing a search) is available with
    a shift-click.
  * When Firefox autocompletes the URL of one of your search
    engines, you can now search with that engine directly in the
    address bar by selecting the shortcut in the address bar
    results.
  * We?ve added buttons at the bottom of the search panel to
    allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
  * Changed: Firefox no longer supports Adobe Flash. There is no
    setting available to re-enable Flash support.
  * Enterprise: Various bug fixes and new policies have been
    implemented in the latest version of Firefox. See more
    details in the Firefox for Enterprise 91 Release Notes.
  MFSA 2021-33 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29981 (bmo#1707774)
    Live range splitting could have led to conflicting
    assignments in the JIT
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29983 (bmo#1719088)
    Firefox for Android could get stuck in fullscreen mode
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29987 (bmo#1716129)
    Users could have been tricked into accepting unwanted
    permissions on Linux
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29982 (bmo#1715318)
    Single bit data leak due to incorrect JIT optimization and
    type confusion
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
    bmo#1719319, bmo#1722073)
    Memory safety bugs fixed in Firefox 91</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
</package>
<package pkgid="6b7ac9cd267b40d52cb51f290c10dcbf8696b04780cf002fe900123780445b2e" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp152.2.5.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="02abf235e53feb16b4d6bae46476a5a011ab2e131a34d2ab3fb8368ea34aafd6" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp152.2.9.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="7212154e6dd8474cb923ae25802d9244f804149647d8ab8b7262fafd1324986f" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.12.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="c1e8b9f323d35ad109704743d54dcc7dcb7e8a9e32531a9abbc80b3b3ac9ca67" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.15.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="e362a7e6d3fd89098e230221b86dc7cfc3fe552e18bbec81f34f8b7f8592dbb1" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.55.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
</package>
<package pkgid="89c708d536065be21f1d00b646f9b8f8476f2cf3b2133591be300c73fefd0e63" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="lp152.2.58.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="da532978df5c9bd2933b9863a40c554c29bd6f97ccaf89e039e8730dd4c256fa" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.12.0" rel="lp152.2.61.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
</package>
<package pkgid="b9d43cb97e61f01c1c9dc34da6c2669ca4423577cedf712748f93ce2daeda2e5" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.13.0" rel="lp152.2.64.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
</package>
<package pkgid="6c062508a591446d9cfe4447608326d91b1c1485eeeb3c46b2c743ea155197fd" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp152.2.18.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="ffbd0d4cc0454475dcda01cb4803f17cca58e986cb942d71bd479b0942ba90a5" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp152.2.21.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="b6310975c6f7fa9a0a5edc56c5a6a73429425a0659a650a486339e9ba2d3c34f" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.24.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="7ab73ae6d02435bc2a26013b78a0c3b5e43167cf7c191b1d7bec5bc7f20941da" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp152.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="b83fb0d7b2bc51364600cc3459bbd0c468e082795595ea34c91f2b0f561ab48e" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="4513b513b7ce7c8bb962238e35e76d6803da75705e5d5719a8e2cb793170b9f4" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="c70123f411f9136247980535f00a128e4c79e9672e1f1d613b76252fcf86ff8a" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.34.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
</package>
<package pkgid="d8c6da4e83ad9a575301dc79493fa410f37e27d12094105c5a68a4662748a029" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.40.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="0496695417086758da9322569b58dbd1e9435f768e65a2df7398bb04f3b524ff" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.43.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
</package>
<package pkgid="4662e045eccb758140ee46f0cd47c00b271f887e6ebd8e62f3525263ccdba501" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.46.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
</package>
<package pkgid="c1fba9c83c393622557e09efef9416f946e3ada9edc3762671b1bd07f3125b48" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.49.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="17581666c2896cf5dd03bffe505a2c58546b38a2d59bfc471aceb62ed83a51ca" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.9.0" rel="lp152.2.52.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
</package>
<package pkgid="c91e05266dcd8b1f10f6b6a7758b42755d4e06b37f296dd1c453dbff1cb9aabd" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.2.0" rel="lp152.2.67.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1628683200">- Firefox Extended Support Release 91.0 ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded "just in time" if you decide to "Log in with Facebook"
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We?ve improved functionality and design for a number of
    Firefox search features:
  * Selecting a search engine at the bottom of the search
    panel now enters search mode for that engine, allowing you to
    see suggestions (if available) for your search terms. The old
    behavior (immediately performing a search) is available with
    a shift-click.
  * When Firefox autocompletes the URL of one of your search
    engines, you can now search with that engine directly in the
    address bar by selecting the shortcut in the address bar
    results.
  * We?ve added buttons at the bottom of the search panel to
    allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
  * Changed: Firefox no longer supports Adobe Flash. There is no
    setting available to re-enable Flash support.
  * Enterprise: Various bug fixes and new policies have been
    implemented in the latest version of Firefox. See more
    details in the Firefox for Enterprise 91 Release Notes.
  MFSA 2021-33 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29981 (bmo#1707774)
    Live range splitting could have led to conflicting
    assignments in the JIT
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29983 (bmo#1719088)
    Firefox for Android could get stuck in fullscreen mode
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29987 (bmo#1716129)
    Users could have been tricked into accepting unwanted
    permissions on Linux
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29982 (bmo#1715318)
    Single bit data leak due to incorrect JIT optimization and
    type confusion
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
    bmo#1719319, bmo#1722073)
    Memory safety bugs fixed in Firefox 91</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
</package>
<package pkgid="ed570e933daf9bec837fe9710858752deae6a724878a4b20e354d6ed66602eab" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.2.0" rel="lp152.2.70.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626177600">- Firefox Extended Support Release 78.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-29 (bsc#1188275)
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1626350400">- jsc#SLE-18626 - Migrate rust to parallel versioned packages allowing
  more flexible build requirements to be expressed.
- Update Firefox to use the 1.43 version of Rust.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628596800">- Firefox Extended Support Release 78.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-34 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1628683200">- Firefox Extended Support Release 91.0 ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded "just in time" if you decide to "Log in with Facebook"
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We?ve improved functionality and design for a number of
    Firefox search features:
  * Selecting a search engine at the bottom of the search
    panel now enters search mode for that engine, allowing you to
    see suggestions (if available) for your search terms. The old
    behavior (immediately performing a search) is available with
    a shift-click.
  * When Firefox autocompletes the URL of one of your search
    engines, you can now search with that engine directly in the
    address bar by selecting the shortcut in the address bar
    results.
  * We?ve added buttons at the bottom of the search panel to
    allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
  * Changed: Firefox no longer supports Adobe Flash. There is no
    setting available to re-enable Flash support.
  * Enterprise: Various bug fixes and new policies have been
    implemented in the latest version of Firefox. See more
    details in the Firefox for Enterprise 91 Release Notes.
  MFSA 2021-33 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29981 (bmo#1707774)
    Live range splitting could have led to conflicting
    assignments in the JIT
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29983 (bmo#1719088)
    Firefox for Android could get stuck in fullscreen mode
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29987 (bmo#1716129)
    Users could have been tricked into accepting unwanted
    permissions on Linux
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29982 (bmo#1715318)
    Single bit data leak due to incorrect JIT optimization and
    type confusion
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
  * CVE-2021-29990 (bmo#1544190, bmo#1716481, bmo#1717778,
    bmo#1719319, bmo#1722073)
    Memory safety bugs fixed in Firefox 91</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
</package>
<package pkgid="34b41ee63d217d3e984d0e03e2a703f582cd8dc9a76929fc57f0ab664f6b405c" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.10.0" rel="lp152.2.4.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
</package>
<package pkgid="174b2b6b6af87908cd5057206956fdfebfd435aa08c414be2106b1d86c510a9e" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.10.0" rel="lp152.2.4.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
</package>
<package pkgid="fcb135a73987ed09785107a4d28a360e802a142c0f633530f43133b9da4dd030" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.11.0" rel="lp152.2.7.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
</package>
<package pkgid="59693a9acb72d54f733e7fdcbaba29c72d19ad11933c7363bb7a3b67bf750bcb" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.11.0" rel="lp152.2.7.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
</package>
<package pkgid="9562b5528f201e086a9ba9ce8eff8989d7b3c9912523a292e28e851460f2b827" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.12.0" rel="lp152.2.10.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
</package>
<package pkgid="2c06d4af8af2345194bbc6825955ff3fe4614d31fe72371a0a3e55d1ac03d9da" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.12.0" rel="lp152.2.10.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
</package>
<package pkgid="41b18547de49a363ba39a505d55bade8b6a13b2270c8d0ce9bc9744d8d4aa6ff" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.10.0" rel="lp152.2.41.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
</package>
<package pkgid="e92b2bfb9b6040cbf80d778ea3b022caed0beed0a8b88f20a026c6a1d410521f" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.41.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
</package>
<package pkgid="a0a418c89a6d8385dfec4e2a11ebd20afa750323a06702c5e614679627d028f3" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.11.0" rel="lp152.2.45.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="324785fd987323f6cc311f6d2f6048310f8a8f2d88cfb1f693ca5896ded7383d" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="lp152.2.45.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="c25597bb790d12384dacc2f2553f4e93e91495e8df7413eb5634e9ffc7aa66a2" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.12.0" rel="lp152.2.48.2"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
</package>
<package pkgid="ee3e5ba9fd502f77335c637c01a216643317fc3a6e2df63634f1bf5eda56f4f6" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.12.0" rel="lp152.2.48.2"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
</package>
<package pkgid="47b94b217dd604aa214bbcf36619d76091ce94d2260fbbad2527a65fea41cf6e" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.4.0" rel="lp152.2.13.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="4789b6b375c25ea72829e132f474488385934ce8125642f48977583611a24a8e" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.13.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="a8b153ab6ea09eb3c975400fae8dbb3d930214027b1676d559ada5bfe332c18a" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.4.2" rel="lp152.2.16.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
</package>
<package pkgid="c700d01267367229f40aecba25fed17d57072863b67de8be48c97ea980bbd05c" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.4.2" rel="lp152.2.16.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
</package>
<package pkgid="4656f6f5c3949fa891afb0bb66d862154b697efa44942de06c2a2cd66f89ec7c" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.5.0" rel="lp152.2.19.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
</package>
<package pkgid="718418f6537aafec27c738b16867646b6236066ab0befb193487b18ed21f087d" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.19.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
</package>
<package pkgid="037c42618c52dd833e32eeaa0568759ec611456daeea868f15bca9c96ab2c9cc" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.6.0" rel="lp152.2.23.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
</package>
<package pkgid="6d1974fd466ad93692e60cd7e7fbd669251250580cb393a2ccccd467da3442d2" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.23.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
</package>
<package pkgid="a2eee67ace5da21395ed659c2d8825b8fae13310fb3db591756dfd4452d7f415" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.6.1" rel="lp152.2.26.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="a1195c9f0637d7eef0e8a143fe0e73bfdde33ff7fe08eee2d040de9aebf713aa" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.26.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="d11bfd7c3c898b9a4620ef8b141a6ca6c5d68e0e6c9d4d0b381d76dd978103d5" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.7.0" rel="lp152.2.29.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
</package>
<package pkgid="e79927a00322e5cb5d2886dca02e74fb220b5bbed3c4f1e3783f9ae62b1e27fd" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.29.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
</package>
<package pkgid="b58dd8b0feef07ce9d6eb9c71d65185a38612aeec723c58e819fa2934cdedb7c" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.7.1" rel="lp152.2.32.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
</package>
<package pkgid="a6448743a146a18a997c0e7418b04b6fe9276b02fd229ae0029e68919eb5382e" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.32.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
</package>
<package pkgid="b5c214d8655f4fcd94f7d199c0abc63d1e37d0a03e8d09e4d0f70065aec40626" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.8.0" rel="lp152.2.35.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="cbe02745772cb12d7f087113043f8a7c096ed71f123d3dca5cedd0b457a14e5e" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.35.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="4d63cd7e29319cc076f9ff937a7d548aac0143c781ad5f8b3720c5c569603a4d" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.9.1" rel="lp152.2.38.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
</package>
<package pkgid="01422c6a7f309d89a4e4e3cea60fdd8cd04b2714f6046562541f66b2790c1bed" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.9.1" rel="lp152.2.38.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
</package>
<package pkgid="8bcd9e1803cfebfc6e8e4bfdb2ccccd54e3fb7227347005de32d902783ba75fe" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.10.0" rel="lp152.2.4.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
</package>
<package pkgid="e67c42ef266f436913e77cc0192c290a8e8ab4957e6c132f1f162b887686cecf" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.11.0" rel="lp152.2.7.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
</package>
<package pkgid="5d42580d9f1105b476048d8e0f62c18846ae8301c6b74d5f58c8bf2d6830ff51" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.12.0" rel="lp152.2.10.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
</package>
<package pkgid="fede6054b4c67bba0778ee5fc649d481bcae3605b42116714a549b61cc155143" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.41.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
</package>
<package pkgid="4124bbfb0ca30d8e4d3d00f0e422bff7ad95bd72b317d0a9d18d90fa2464974a" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="lp152.2.45.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="d0d8f3416937c2d88f31ee0c2ec3c994a502c4d383d6a9177c2d2381b5dd9c2e" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.12.0" rel="lp152.2.48.2"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
</package>
<package pkgid="f3428d8b6ebb2d234e3fa4a357328ef0cfc509efa67fbf6c86b1566588cbaa67" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.13.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="700815b0fdc294dd6165ff7feda4d9193e4af248de1f4d69da95b2b4d1da9da1" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.4.2" rel="lp152.2.16.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
</package>
<package pkgid="815c05b784ea835a70f4aa72caadbe6784b909eb7dd34fdaae8ad3c3e871b6c5" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.19.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
</package>
<package pkgid="965d244c0aaa387398ae69f43c1dc0ba6cc66a7d811993f1b2265b45ba85bddb" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.23.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
</package>
<package pkgid="468504ff267cc7ce4a667e90d264d3b084b9c5432b158ae938e99f9dd10635b5" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.26.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="69c640503d79f68263741efb64461cd7f05288c17140d0c8f1e97cd3022aa963" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.29.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
</package>
<package pkgid="36a9049407b3a2e2bc85173656e099e6da26a7f4ad8f12ed2540141a7085e729" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.32.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
</package>
<package pkgid="782dedb5918c67ad5656f3b7b0798eb27cba2127e141e70cf35bee6861171cd9" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.35.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="085d4a7cb6247c07d761697a1c49870dd385fc1f911a1427b8bbebee5c2023c5" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.9.1" rel="lp152.2.38.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
</package>
<package pkgid="118f7588830e322a5ece57ab7df5f3c88a54e98f97d673a797a92b48022374ff" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.10.0" rel="lp152.2.4.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
</package>
<package pkgid="20a8edfdd083ca85e6018c9bdcb01915f3756cbd1e062f60da16745072cd27c6" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.11.0" rel="lp152.2.7.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
</package>
<package pkgid="ebfeacbf9f435a2a73bf3107648ef88085e5553d6a009140bfb47d53d16c6e87" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.12.0" rel="lp152.2.10.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
</package>
<package pkgid="d82485ed9fe5bd3951d3c16eb4fad27cf721d130c862fc4d3ecf093ddfab8d62" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.41.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
</package>
<package pkgid="26d1d013c403d0d0cc80be75aa5bd1737c1eb4c2a2f7c3cf71fb72343769ac5d" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="lp152.2.45.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="4f22481ae99bcbd565e4e58ad561a0594235efe9568aa07b7ce1ef940e4ae070" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.12.0" rel="lp152.2.48.2"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
</package>
<package pkgid="a6a3faf620ec017ec02e77da6c5b331db48f72444c862dc81c4a94bdc7c16ae8" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.13.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="a5457e2da24e050715e6b35da9db95d6494f8c2c6773f663348c9d75497daa2a" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.4.2" rel="lp152.2.16.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
</package>
<package pkgid="9f02791b8d9ca4eccd9928a3a582035381b18ca5912ee185648634c4256eb7c2" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.19.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
</package>
<package pkgid="75bb36f386f98a3b8eb5dc36a679d3d047733d18f6e08eac0fefcee2248a2cac" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.23.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
</package>
<package pkgid="3cfb642265f13769996db5db8d0681d51dd9a17adecd9c56fe71c9f381df7695" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.26.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="63052d3bdc4e70d4b244026697546e62220d31233a4aa3567d84b424ac3fd6a3" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.29.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
</package>
<package pkgid="0a1e317d7ee8c5d3f32f6f8b3426dba3d5c9aaac3eaa7348fa41307f5f24d5cd" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.32.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
</package>
<package pkgid="027acf0b6178b65441c95afdb8b7a23a61c7d898562fdc2f165aaab418750f1b" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.35.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="1145ce77ed0393c7045014f3d5b4d3bee8f60a92f7ded2ed5c28af0554c12b27" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.9.1" rel="lp152.2.38.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
</package>
<package pkgid="8c7e8c7a6df595657612e03bb1a53395cfdbe5837e0f26459eb7706fcdb508b5" name="NetworkManager" arch="i586">
  <version epoch="0" ver="1.22.10" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1564488000">- Update to version 1.18.2(bsc#1138213):
  + Add support for policy routing rules.
  + Add support for VLAN filtering for Linux bridge.
  + Support ieee-802-1 and ieee-802-3 LLDP TLVs.
  + Allow large MTU sizes for infiniband/IPoIB connection profiles.
  + Improve nmcli's handling of list options for connection properties.
  + Add compatibility with out-of-tree WireGuard module on 5.2 kernels
  + Fix parsing of BOOTIF= variables in initrd.
  + Accept numeric IPv4 prefix in place of a mask when parsing a command line
    in initrd.
  + Don't check connectivity of unconfigured devices.
  + Fix PKCS#12 handling in the ifcfg-rh plugin.
  + Avoid waiting for udev to see software devices created by NetworkManager.
  + Don't attempt to stop management daemon for Team devices created
    externally to NetworkManager.
  + Use FQDN for persistent hostname on Slackware.
  + Restore IPv6 configuration of a device when its link goes back up.
  + Fix management status of software devices on system suspend.
  + Make nmcli not print certificate blobs if --show-secrets is not used.
  + Fix MTU reapply.
- Drop 0001-Update-connectivity-value-on-device-removal.patch:
  Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.18.4:
  + Improve handling of externally added policy routing rules and
    for rules that are taken over after a restart of NetworkManager
    service.
  + Fix taking over OVS devices after restart of NetworkManager.
  + Bugfix reapplying IP configuration while activating.
  + Allow reapplying Wi-Fi profile when seen-bssids changes.
  + Various other bugfixes for minor issues and memory leaks.
  + Various build and test fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622404">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
</package>
<package pkgid="73840df877ccf711775e1b3d531883b1d55c4e4f9511ddacb4bf64033f03a8e2" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.22.10" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1564488000">- Update to version 1.18.2(bsc#1138213):
  + Add support for policy routing rules.
  + Add support for VLAN filtering for Linux bridge.
  + Support ieee-802-1 and ieee-802-3 LLDP TLVs.
  + Allow large MTU sizes for infiniband/IPoIB connection profiles.
  + Improve nmcli's handling of list options for connection properties.
  + Add compatibility with out-of-tree WireGuard module on 5.2 kernels
  + Fix parsing of BOOTIF= variables in initrd.
  + Accept numeric IPv4 prefix in place of a mask when parsing a command line
    in initrd.
  + Don't check connectivity of unconfigured devices.
  + Fix PKCS#12 handling in the ifcfg-rh plugin.
  + Avoid waiting for udev to see software devices created by NetworkManager.
  + Don't attempt to stop management daemon for Team devices created
    externally to NetworkManager.
  + Use FQDN for persistent hostname on Slackware.
  + Restore IPv6 configuration of a device when its link goes back up.
  + Fix management status of software devices on system suspend.
  + Make nmcli not print certificate blobs if --show-secrets is not used.
  + Fix MTU reapply.
- Drop 0001-Update-connectivity-value-on-device-removal.patch:
  Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.18.4:
  + Improve handling of externally added policy routing rules and
    for rules that are taken over after a restart of NetworkManager
    service.
  + Fix taking over OVS devices after restart of NetworkManager.
  + Bugfix reapplying IP configuration while activating.
  + Allow reapplying Wi-Fi profile when seen-bssids changes.
  + Various other bugfixes for minor issues and memory leaks.
  + Various build and test fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622404">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
</package>
<package pkgid="211babcc962ea3157c83cf626aec39722440a12ffc059939ae35257c9319280d" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1564488000">- Update to version 1.18.2(bsc#1138213):
  + Add support for policy routing rules.
  + Add support for VLAN filtering for Linux bridge.
  + Support ieee-802-1 and ieee-802-3 LLDP TLVs.
  + Allow large MTU sizes for infiniband/IPoIB connection profiles.
  + Improve nmcli's handling of list options for connection properties.
  + Add compatibility with out-of-tree WireGuard module on 5.2 kernels
  + Fix parsing of BOOTIF= variables in initrd.
  + Accept numeric IPv4 prefix in place of a mask when parsing a command line
    in initrd.
  + Don't check connectivity of unconfigured devices.
  + Fix PKCS#12 handling in the ifcfg-rh plugin.
  + Avoid waiting for udev to see software devices created by NetworkManager.
  + Don't attempt to stop management daemon for Team devices created
    externally to NetworkManager.
  + Use FQDN for persistent hostname on Slackware.
  + Restore IPv6 configuration of a device when its link goes back up.
  + Fix management status of software devices on system suspend.
  + Make nmcli not print certificate blobs if --show-secrets is not used.
  + Fix MTU reapply.
- Drop 0001-Update-connectivity-value-on-device-removal.patch:
  Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.18.4:
  + Improve handling of externally added policy routing rules and
    for rules that are taken over after a restart of NetworkManager
    service.
  + Fix taking over OVS devices after restart of NetworkManager.
  + Bugfix reapplying IP configuration while activating.
  + Allow reapplying Wi-Fi profile when seen-bssids changes.
  + Various other bugfixes for minor issues and memory leaks.
  + Various build and test fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622404">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
</package>
<package pkgid="0886696afa27d6dfc51c80288d335fd5f31fe3954bd63f68619e28cd08c2098b" name="NetworkManager" arch="i586">
  <version epoch="0" ver="1.22.10" rel="lp152.2.6.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
</package>
<package pkgid="40e1bd1ae7408d39041ed68f2d147c0d02fe74f66dc9fb0d9eb8d0d525c7fdf1" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.22.10" rel="lp152.2.6.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
</package>
<package pkgid="80585739204a0b10e4e598a759d2f4919735a874e4bfbb1e2e77a8eb5fd02566" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.6.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
</package>
<package pkgid="3b2af50d1cb14546359fb86feb0237f39c2b71309b03a5b6975592726c4b0da9" name="NetworkManager" arch="i586">
  <version epoch="0" ver="1.22.10" rel="lp152.2.9.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1604059200">- Exclude systemd.automount from nfs processing: fix boo#1116625
  as suggested from Neil Brown</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1621339200">- Add nm-add-CAP_CHOWN-capability.patch: Add CAP_CHOWN to
  CapabilityBoundingSet to make teamd work properly
  (glfo#NetworkManager/NetworkManager!860, bsc#1185424).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
</package>
<package pkgid="e0f597dde43fe2c0bf4f7fb4a60fe472042fbb155db3cd2a16fbf9bda10896c1" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.22.10" rel="lp152.2.9.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1604059200">- Exclude systemd.automount from nfs processing: fix boo#1116625
  as suggested from Neil Brown</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1621339200">- Add nm-add-CAP_CHOWN-capability.patch: Add CAP_CHOWN to
  CapabilityBoundingSet to make teamd work properly
  (glfo#NetworkManager/NetworkManager!860, bsc#1185424).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
</package>
<package pkgid="def77a6a5ffa0710c2a6564d9f3f7eba26c3c6d02bda0e6d2858cba58d411393" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.9.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1604059200">- Exclude systemd.automount from nfs processing: fix boo#1116625
  as suggested from Neil Brown</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1621339200">- Add nm-add-CAP_CHOWN-capability.patch: Add CAP_CHOWN to
  CapabilityBoundingSet to make teamd work properly
  (glfo#NetworkManager/NetworkManager!860, bsc#1185424).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
</package>
<package pkgid="6d78056e01c25b6f4a9611b394600890418c1590cc3ccdf5d2b0eee511b8ab6d" name="NetworkManager-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="42.1" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1457870400">- Initial package.</changelog>
  <changelog author="fcrozat@suse.com" date="1462363200">- SLE12 SP2 package, based on openSUSE version (FATE#320455).</changelog>
  <changelog author="sckang@suse.com" date="1504094400">- SLE15 SP0 package, based on openSUSE version (bsc#1055200).</changelog>
  <changelog author="fezhang@suse.com" date="1504699200">- Add a SLE flavor.
- Clean up specfile.</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Apply %{branding_name} also to summary and description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec file by running spec-cleaner</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574769600">- Switch package to _multibuild.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593086400">- Fix summary variable expansion: use %rpm style instead of $shell
  style (boo#1172773).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593345600">- Also fix variable expansion in %description (boo#1172773).</changelog>
</package>
<package pkgid="6c6e0535864d06d9a2380038e0b8f61bb125384533e9c5e90c11bab1c9400b3e" name="NetworkManager-branding-openSUSE" arch="src">
  <version epoch="0" ver="42.1" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1457870400">- Initial package.</changelog>
  <changelog author="fcrozat@suse.com" date="1462363200">- SLE12 SP2 package, based on openSUSE version (FATE#320455).</changelog>
  <changelog author="sckang@suse.com" date="1504094400">- SLE15 SP0 package, based on openSUSE version (bsc#1055200).</changelog>
  <changelog author="fezhang@suse.com" date="1504699200">- Add a SLE flavor.
- Clean up specfile.</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Apply %{branding_name} also to summary and description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec file by running spec-cleaner</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574769600">- Switch package to _multibuild.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593086400">- Fix summary variable expansion: use %rpm style instead of $shell
  style (boo#1172773).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593345600">- Also fix variable expansion in %description (boo#1172773).</changelog>
</package>
<package pkgid="17e342cb50ef95e8de9ac9e629f57c7aca064058bcd246f6e914583486e47b8e" name="NetworkManager-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="42.1" rel="lp152.2.6.1"/>
  <changelog author="badshah400@gmail.com" date="1457870400">- Initial package.</changelog>
  <changelog author="fcrozat@suse.com" date="1462363200">- SLE12 SP2 package, based on openSUSE version (FATE#320455).</changelog>
  <changelog author="sckang@suse.com" date="1504094400">- SLE15 SP0 package, based on openSUSE version (bsc#1055200).</changelog>
  <changelog author="fezhang@suse.com" date="1504699200">- Add a SLE flavor.
- Clean up specfile.</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Apply %{branding_name} also to summary and description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec file by running spec-cleaner</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574769600">- Switch package to _multibuild.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593086400">- Fix summary variable expansion: use %rpm style instead of $shell
  style (boo#1172773).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593345600">- Also fix variable expansion in %description (boo#1172773).</changelog>
</package>
<package pkgid="06933c662467adfa4ba408fb3e97ee6a2cdf05179d3ed53457c41a0a67fc449c" name="NetworkManager-branding-openSUSE" arch="src">
  <version epoch="0" ver="42.1" rel="lp152.2.6.1"/>
  <changelog author="badshah400@gmail.com" date="1457870400">- Initial package.</changelog>
  <changelog author="fcrozat@suse.com" date="1462363200">- SLE12 SP2 package, based on openSUSE version (FATE#320455).</changelog>
  <changelog author="sckang@suse.com" date="1504094400">- SLE15 SP0 package, based on openSUSE version (bsc#1055200).</changelog>
  <changelog author="fezhang@suse.com" date="1504699200">- Add a SLE flavor.
- Clean up specfile.</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Apply %{branding_name} also to summary and description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec file by running spec-cleaner</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574769600">- Switch package to _multibuild.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593086400">- Fix summary variable expansion: use %rpm style instead of $shell
  style (boo#1172773).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593345600">- Also fix variable expansion in %description (boo#1172773).</changelog>
</package>
<package pkgid="2e172417dcb660273fba4221738ffbe13343597d74f3f355c0e8771d8bc68585" name="NetworkManager-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.22.10" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1564488000">- Update to version 1.18.2(bsc#1138213):
  + Add support for policy routing rules.
  + Add support for VLAN filtering for Linux bridge.
  + Support ieee-802-1 and ieee-802-3 LLDP TLVs.
  + Allow large MTU sizes for infiniband/IPoIB connection profiles.
  + Improve nmcli's handling of list options for connection properties.
  + Add compatibility with out-of-tree WireGuard module on 5.2 kernels
  + Fix parsing of BOOTIF= variables in initrd.
  + Accept numeric IPv4 prefix in place of a mask when parsing a command line
    in initrd.
  + Don't check connectivity of unconfigured devices.
  + Fix PKCS#12 handling in the ifcfg-rh plugin.
  + Avoid waiting for udev to see software devices created by NetworkManager.
  + Don't attempt to stop management daemon for Team devices created
    externally to NetworkManager.
  + Use FQDN for persistent hostname on Slackware.
  + Restore IPv6 configuration of a device when its link goes back up.
  + Fix management status of software devices on system suspend.
  + Make nmcli not print certificate blobs if --show-secrets is not used.
  + Fix MTU reapply.
- Drop 0001-Update-connectivity-value-on-device-removal.patch:
  Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.18.4:
  + Improve handling of externally added policy routing rules and
    for rules that are taken over after a restart of NetworkManager
    service.
  + Fix taking over OVS devices after restart of NetworkManager.
  + Bugfix reapplying IP configuration while activating.
  + Allow reapplying Wi-Fi profile when seen-bssids changes.
  + Various other bugfixes for minor issues and memory leaks.
  + Various build and test fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622404">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
</package>
<package pkgid="eb689f46cfac096c351e6ed7bd7267a086efce0e61baab11a2bca419ce4da9a1" name="NetworkManager-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.22.10" rel="lp152.2.6.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
</package>
<package pkgid="6c698b3c40c205f7de4eaf307b8ac5d3791de97f0f1f613739e109076e99fd0f" name="NetworkManager-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.22.10" rel="lp152.2.9.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1604059200">- Exclude systemd.automount from nfs processing: fix boo#1116625
  as suggested from Neil Brown</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1621339200">- Add nm-add-CAP_CHOWN-capability.patch: Add CAP_CHOWN to
  CapabilityBoundingSet to make teamd work properly
  (glfo#NetworkManager/NetworkManager!860, bsc#1185424).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
</package>
<package pkgid="f987ae8fe25d35cc7e51163fd254dcc63ff96b1c771129e1bf6d45946c1d21cd" name="NetworkManager-devel" arch="i586">
  <version epoch="0" ver="1.22.10" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1564488000">- Update to version 1.18.2(bsc#1138213):
  + Add support for policy routing rules.
  + Add support for VLAN filtering for Linux bridge.
  + Support ieee-802-1 and ieee-802-3 LLDP TLVs.
  + Allow large MTU sizes for infiniband/IPoIB connection profiles.
  + Improve nmcli's handling of list options for connection properties.
  + Add compatibility with out-of-tree WireGuard module on 5.2 kernels
  + Fix parsing of BOOTIF= variables in initrd.
  + Accept numeric IPv4 prefix in place of a mask when parsing a command line
    in initrd.
  + Don't check connectivity of unconfigured devices.
  + Fix PKCS#12 handling in the ifcfg-rh plugin.
  + Avoid waiting for udev to see software devices created by NetworkManager.
  + Don't attempt to stop management daemon for Team devices created
    externally to NetworkManager.
  + Use FQDN for persistent hostname on Slackware.
  + Restore IPv6 configuration of a device when its link goes back up.
  + Fix management status of software devices on system suspend.
  + Make nmcli not print certificate blobs if --show-secrets is not used.
  + Fix MTU reapply.
- Drop 0001-Update-connectivity-value-on-device-removal.patch:
  Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.18.4:
  + Improve handling of externally added policy routing rules and
    for rules that are taken over after a restart of NetworkManager
    service.
  + Fix taking over OVS devices after restart of NetworkManager.
  + Bugfix reapplying IP configuration while activating.
  + Allow reapplying Wi-Fi profile when seen-bssids changes.
  + Various other bugfixes for minor issues and memory leaks.
  + Various build and test fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622404">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
</package>
<package pkgid="459ba7b77f1dc921f6fbd99bcb6cdf42e36fb53fecf85fce853e5f1916251665" name="NetworkManager-devel" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1564488000">- Update to version 1.18.2(bsc#1138213):
  + Add support for policy routing rules.
  + Add support for VLAN filtering for Linux bridge.
  + Support ieee-802-1 and ieee-802-3 LLDP TLVs.
  + Allow large MTU sizes for infiniband/IPoIB connection profiles.
  + Improve nmcli's handling of list options for connection properties.
  + Add compatibility with out-of-tree WireGuard module on 5.2 kernels
  + Fix parsing of BOOTIF= variables in initrd.
  + Accept numeric IPv4 prefix in place of a mask when parsing a command line
    in initrd.
  + Don't check connectivity of unconfigured devices.
  + Fix PKCS#12 handling in the ifcfg-rh plugin.
  + Avoid waiting for udev to see software devices created by NetworkManager.
  + Don't attempt to stop management daemon for Team devices created
    externally to NetworkManager.
  + Use FQDN for persistent hostname on Slackware.
  + Restore IPv6 configuration of a device when its link goes back up.
  + Fix management status of software devices on system suspend.
  + Make nmcli not print certificate blobs if --show-secrets is not used.
  + Fix MTU reapply.
- Drop 0001-Update-connectivity-value-on-device-removal.patch:
  Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.18.4:
  + Improve handling of externally added policy routing rules and
    for rules that are taken over after a restart of NetworkManager
    service.
  + Fix taking over OVS devices after restart of NetworkManager.
  + Bugfix reapplying IP configuration while activating.
  + Allow reapplying Wi-Fi profile when seen-bssids changes.
  + Various other bugfixes for minor issues and memory leaks.
  + Various build and test fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622404">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
</package>
<package pkgid="b2dca22e22a5c8bffed22a3de932ebf0197a7d1b610bccc51b01210e6448166c" name="NetworkManager-devel" arch="i586">
  <version epoch="0" ver="1.22.10" rel="lp152.2.6.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
</package>
<package pkgid="c49b0570823ff830b7249e4f2dc738642830634402a47f84ce5348af8ac1a1ab" name="NetworkManager-devel" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.6.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
</package>
<package pkgid="6445b000103634f3a9a76e8e59cf5f5304aed899fb912b5c315f46ce9072c452" name="NetworkManager-devel" arch="i586">
  <version epoch="0" ver="1.22.10" rel="lp152.2.9.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1604059200">- Exclude systemd.automount from nfs processing: fix boo#1116625
  as suggested from Neil Brown</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1621339200">- Add nm-add-CAP_CHOWN-capability.patch: Add CAP_CHOWN to
  CapabilityBoundingSet to make teamd work properly
  (glfo#NetworkManager/NetworkManager!860, bsc#1185424).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
</package>
<package pkgid="38a09b1111656972c413f3e4d9945ffdf545a70491a770c8590bad443e92f140" name="NetworkManager-devel" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.9.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1604059200">- Exclude systemd.automount from nfs processing: fix boo#1116625
  as suggested from Neil Brown</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1621339200">- Add nm-add-CAP_CHOWN-capability.patch: Add CAP_CHOWN to
  CapabilityBoundingSet to make teamd work properly
  (glfo#NetworkManager/NetworkManager!860, bsc#1185424).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
</package>
<package pkgid="7da69e578a8e3ba9ea4da1fb54d5bec14d99ce72fef573321b25abfc3f9904d6" name="NetworkManager-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1564488000">- Update to version 1.18.2(bsc#1138213):
  + Add support for policy routing rules.
  + Add support for VLAN filtering for Linux bridge.
  + Support ieee-802-1 and ieee-802-3 LLDP TLVs.
  + Allow large MTU sizes for infiniband/IPoIB connection profiles.
  + Improve nmcli's handling of list options for connection properties.
  + Add compatibility with out-of-tree WireGuard module on 5.2 kernels
  + Fix parsing of BOOTIF= variables in initrd.
  + Accept numeric IPv4 prefix in place of a mask when parsing a command line
    in initrd.
  + Don't check connectivity of unconfigured devices.
  + Fix PKCS#12 handling in the ifcfg-rh plugin.
  + Avoid waiting for udev to see software devices created by NetworkManager.
  + Don't attempt to stop management daemon for Team devices created
    externally to NetworkManager.
  + Use FQDN for persistent hostname on Slackware.
  + Restore IPv6 configuration of a device when its link goes back up.
  + Fix management status of software devices on system suspend.
  + Make nmcli not print certificate blobs if --show-secrets is not used.
  + Fix MTU reapply.
- Drop 0001-Update-connectivity-value-on-device-removal.patch:
  Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.18.4:
  + Improve handling of externally added policy routing rules and
    for rules that are taken over after a restart of NetworkManager
    service.
  + Fix taking over OVS devices after restart of NetworkManager.
  + Bugfix reapplying IP configuration while activating.
  + Allow reapplying Wi-Fi profile when seen-bssids changes.
  + Various other bugfixes for minor issues and memory leaks.
  + Various build and test fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622404">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
</package>
<package pkgid="511442cbc6369bdf5346f168f9322c21fb7e0aa6e2b4d5ab630ee7aaa147cc41" name="NetworkManager-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.6.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
</package>
<package pkgid="2d33977bc03c18fc25c9e5bce954d766d3fcc708f265185f39d42b085851e5c9" name="NetworkManager-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.9.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1604059200">- Exclude systemd.automount from nfs processing: fix boo#1116625
  as suggested from Neil Brown</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1621339200">- Add nm-add-CAP_CHOWN-capability.patch: Add CAP_CHOWN to
  CapabilityBoundingSet to make teamd work properly
  (glfo#NetworkManager/NetworkManager!860, bsc#1185424).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
</package>
<package pkgid="8b7c0fc0797f9bbe7c7a6312de75d66582d7310da846d0ad23eef957e15e4f7a" name="NetworkManager-lang" arch="noarch">
  <version epoch="0" ver="1.22.10" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1564488000">- Update to version 1.18.2(bsc#1138213):
  + Add support for policy routing rules.
  + Add support for VLAN filtering for Linux bridge.
  + Support ieee-802-1 and ieee-802-3 LLDP TLVs.
  + Allow large MTU sizes for infiniband/IPoIB connection profiles.
  + Improve nmcli's handling of list options for connection properties.
  + Add compatibility with out-of-tree WireGuard module on 5.2 kernels
  + Fix parsing of BOOTIF= variables in initrd.
  + Accept numeric IPv4 prefix in place of a mask when parsing a command line
    in initrd.
  + Don't check connectivity of unconfigured devices.
  + Fix PKCS#12 handling in the ifcfg-rh plugin.
  + Avoid waiting for udev to see software devices created by NetworkManager.
  + Don't attempt to stop management daemon for Team devices created
    externally to NetworkManager.
  + Use FQDN for persistent hostname on Slackware.
  + Restore IPv6 configuration of a device when its link goes back up.
  + Fix management status of software devices on system suspend.
  + Make nmcli not print certificate blobs if --show-secrets is not used.
  + Fix MTU reapply.
- Drop 0001-Update-connectivity-value-on-device-removal.patch:
  Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.18.4:
  + Improve handling of externally added policy routing rules and
    for rules that are taken over after a restart of NetworkManager
    service.
  + Fix taking over OVS devices after restart of NetworkManager.
  + Bugfix reapplying IP configuration while activating.
  + Allow reapplying Wi-Fi profile when seen-bssids changes.
  + Various other bugfixes for minor issues and memory leaks.
  + Various build and test fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622404">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
</package>
<package pkgid="5f1ce0504fb48eaf4903415d054a29b19d60bc4339b6d8773e31a9f3c78c2876" name="NetworkManager-lang" arch="noarch">
  <version epoch="0" ver="1.22.10" rel="lp152.2.6.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
</package>
<package pkgid="61988b8ede8974811dc1cfa2f52666dd2d499d8893378a5268420bd7901e6b9f" name="NetworkManager-lang" arch="noarch">
  <version epoch="0" ver="1.22.10" rel="lp152.2.9.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1604059200">- Exclude systemd.automount from nfs processing: fix boo#1116625
  as suggested from Neil Brown</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1621339200">- Add nm-add-CAP_CHOWN-capability.patch: Add CAP_CHOWN to
  CapabilityBoundingSet to make teamd work properly
  (glfo#NetworkManager/NetworkManager!860, bsc#1185424).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
</package>
<package pkgid="17fc21b51c20882a0e32ec7613d916249f2cbc18a0baaf45f2a9018ab3494277" name="OpenIPMI" arch="i586">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="5320249428b35147406d3e16d7ce894ad69c29ea6dc0f0c5b42284146ae77cff" name="OpenIPMI" arch="src">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="kkaempf@suse.com" date="1380888000">- Fix SLE 11 build</changelog>
  <changelog author="trenn@suse.de" date="1389268800">- Cleanup patches:
  Drop: fix-devel-deps.patch
  Add changelog to most of the patches and submitted them mainline.
  Add: bug-854693_segv_sol.patch
  bnc#854693</changelog>
  <changelog author="kkaempf@suse.com" date="1392292800">- Update to 2.0.21
  Bugfix release
  - marvell: Add a command to directly set the duty cycle of the fans.
  - The IANA numbers are supposed to be in bytes 2-4 off responses to
    IANA commands, but they were not being put there.  Fix this in the
    main IANA handling to do this automatically, and modify the
    command handling to strip the IANA from the command and add it to
    a message field.  This makes handling of IANA commands more
    natural and allows standard message response generation to work.
  - Drop upstreamed patches:
    tcl-includes-moved.patch, new-names-for-new-variables,
    OpenIPMI-popt.patch, OpenIPMI-2.0.16-larger-ipmibuf.patch,
    do-fclose.patch, bug-854693_segv_sol.patch</changelog>
  <changelog author="trenn@suse.de" date="1404993600">- Split OpenIPMI into base package and OpenIPMI-python
  OpenIPMI-python gets OpenIPMI python library and openipmigui which is
  a python based gui.
  Like above the OpenIPMI base package does not need python-tk and tix
  packages any more.</changelog>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="dbdfb7726060c167d43355811f045a3176a7d9077f34a603cf20f24b7fbfad4b" name="OpenIPMI" arch="x86_64">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="0205c7ef4e77a1cc3f1cd9755b8740a07f3ae98a239afd0887ae7f1fae3cf7d4" name="OpenIPMI-devel" arch="i586">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="082b20e41d805e75c0794433f696f53f0ca3740827c5d5ed99612b9e84472b4d" name="OpenIPMI-devel" arch="x86_64">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="365cc603a65eff69c2042750a82b5715eda0e5d3e62f7e9c20ab26b09d8f2a61" name="OpenIPMI-python" arch="i586">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="b8d92516efd2eb56aa614c365a84305f410d76a0b0d1041d3a2c5bafcf3c0926" name="OpenIPMI-python" arch="x86_64">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="d0b50a20c6019ae3599747464f872f16d37c2324cdadf70bc931bfa8674876e6" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="692472dbdf6d823968f82af12452e92817c3fd4b043f6d8304138afa8f659567" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="cb7a45faab5fd8008140ac5e4c00338da53e82e014feab084c70573e9236fd53" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="f6314b8d765c9084926d025f96dd2cccf6f2081c4e4010b746879b61071e3c0a" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="44397bb4925b7945550e474de33aed14b6124ac0aad1fb40943efdaf6efecc4f" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="ff609e902ec92f87af6fd4540056ab469df0d793bbb5d825a3f983c11d504d4f" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="f8eeb1ae97fa51f143ebab89c89a2a79628767146cf76564e8308ecc7fb5e9d4" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="06ab259fc92dec03a8003cde5e22f659c438cc6cd2e2945ab99ed77f615c2507" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="e35f4fd6d04c2e3a3d38d9d600a297868719bb363ddf14aaa961ddd84d5904d6" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="e96dde872603cdfa33273145868356b8d06dcdecbc89a2265b2990da7969e81f" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="ab0270290b8bc6f07f7f8975337b19d2fe70c7502b65aa3752eebf6292f5c0ab" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="d71b4c0e461ddc5a1a5052aee7f3397be3b7d44b556e4d70055f46b2f278195e" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="0b737e026b58b0031cc24dadb399393e203f3c31f9d74af0bdaa0be518ef0bd2" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="900f72512243baa88e0672beb32a834eb8ccc1e791e81f00415dcd994f775190" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="da66036198d00d96de6b756fe6e9af60bfc83af8922ff9c3d5957f00185eec48" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="83c345c5d6fde7ee622e752357ae7dfb35128e5e381555735ad5f7820570ef3d" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="e113dfee20ab5ed8fc6913ab61ef37460e4d6a5da3d4af96ca52eaee2987bbcf" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="2b7a21eaeb926ec2f20c74b93f917cb78fc99f480c7277288f5e6e8b265baeb9" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="fcc68a84e235c1fc25a513865d724989253d937df136e6f8721ce026d155a9ed" name="PackageKit" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="efe388d09e88016e2e8a577dd7d14e4aed71a7892a130924b9da49c6112293bf" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="e571326ae6797bee816dc8892b2684306ad3e540e88d247a3ac08892a2da7c78" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="30d6cc34be151b49f48cdfeb32482de942af899fa0be38eb416a0d5024979f1a" name="PackageKit-backend-dnf" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="acbbdcda9808e5ed2b070921391c29fc15f6661fe7589cdf5c91d78661ec2aa5" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="a26939586c6c29bf5d8095cb3695e2d2359bc6800568a5521b890f282b2b6d6a" name="PackageKit-backend-dnf" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="bb7b23420c6a91d43015aafbbba443c8ebebe8e27db858201a75cd9874cf14c6" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="eb0a1893d214987fdfdc6affae652eb1dae275fd38ff42308c5b5bf9970c8771" name="PackageKit-backend-dnf" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="2bc0703f82057afff02698c6c274ba4fd19e92bbaa240d6d518ce95e2a1d428f" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="2b85412e56d57ede28faa84c3311d9ac8501ae38f238e6b15f89ab9f26d958f9" name="PackageKit-backend-dnf" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="8d58c19ba63ee86a1a609c7632c05e836c0ed6b268113266621ed774de252c5e" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="e843993320db903d6244987debe9ee0eb2961a80cb547a7914b8971c128c6dcc" name="PackageKit-backend-dnf" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="148abfa1ed57d180df2b3d58ff362f88afc8482df93d7d80348c3f1da256a766" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="82d65babcd380910004869387ce43430846fb67b65cb5504f879d7945014cb7c" name="PackageKit-backend-dnf" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="67b19c85596022cf35ee40743ec4f6bcfb22b63daa8c90595ee7e5f5fcb810f1" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="060c7a468ca4b0a214179118853be0e5940d0122e88009f6be14b37bfbb8b8f7" name="PackageKit-backend-dnf" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="7cd2e975780c721a29beb1013955049deaa7dbc8da47245557e5c00fb1929834" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="349d0eea0d85668fc1986cfe5b8f9611a0623346a6e0e822801ff588916b9d1d" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="991be4427e07f6d0fd8af5f3444859db52d62f669e11206e1a65dd64e3b10a95" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="e768504d4e46f12f7c1329b6c66a0469c7dc218d56deebe97c0aeebc3fa9ce74" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="f44ac3e7a69aca3768f3e420dd83a381203dd53987ec72735c821f39f2b68945" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="a98b9d575656d3a9a0f4f14a729e5e1986e250420ac7bfcf4e9aa1c0ca4f6928" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="37e873d85dfa4285b1ff6d82f00b590654ac0dd0b51d5192d3ad44400b4bd444" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="6e9d98ccf99d5eff348be6db204682e4d9f2cf02e163c6b2be9482e01ca07238" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="7051a185817e774797ac52e5b57e845dd75e36c578423580c8f454b693659d29" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="5b6e476fd4519a819c4c634a8a09736393477887ba898d02214d0505767dbf3b" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="b7494887ce3513e5bb7af8162f98779a22d35b29ee23171c34e7f978cac8839c" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="d225c7950a06ab70044677ea6b4dcecf9b374e55edfe57806784b936bdd514fc" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="40e182da259fed8ead0a94c435d8132cc79828132597df4326b10118442d0566" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="d41913d253b026df7b431b4b8b5c069942b2230c887db9b13f459d0d704458cf" name="PackageKit-backend-zypp" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="7dea6f6e61161cbd69bbf30f34c424888a8bc6e5d004e463747dd79f9efa88a7" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="bf4166e417619df4651b6b5bc348df9dfca6c36f46ec9cde2526f3b3368275f4" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="66d4e801973335609751546d321ed0241443ef088598aecd6767cf88629af28c" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="8a515b7f80472511cff62dca76a26d190410d084e3b25d306c1dd2994e29b2c3" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="a4dace86979aa57d9d6c2b745f9263a6c2903c72a86217107e38eccf10113228" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="4a6039f2bf412fcc879a222454aa1198d05fcec97671191139bd5d55af05033d" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="944e9cf26d2cfa8ec7360205c3151581672259d9c263048a8d69364ae923c733" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="2b617eb1004e70b7461cdb6d593c6a11998676d85a2ef2b280c1f4625ee89301" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="3f91453709cf64f8ab69f068e34dd5cb2d97ee1c84c34dd1bf922bc5879d804d" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="94c96683fe980bdeef0bc667f484d0c457796c779d45411c4a09513aa45dd928" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="869029ec0dc80a767d05e4f8e0fc72d07bd313cea948c38d50fa3364d6d96409" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="295a0a4ea808da1c494213f0b7e9978fbe74e1c712d62c82b2434cfbfac4029c" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="a92f431bec1416da079be4134118d3fadf0aff3bd0a463c284eac329eb3de6e5" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="f60a4f3800e1173b6aa061a547e52176a4d240eba9d380cd8106b5f50879b829" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="d4040bab4a5b53aa504c96cc53794832eb63349b679063c6c77c442521ce6202" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="de0345a845aabe05997b7ddf1f49bc8abfba14c6d0e03c22e978f0e17c443b82" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="814358a932e64e29c320d165267cd8ee8e2d5a82dc8c10bfae2a936f801ed828" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="289bbd088272df9e146f37aff6e7ee0d900e55a8a4e6c0e60a266458e8023837" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="d01eef39e8ed7a72827cf7d52e0d4894fdc1329003816a1abc72f9f1bb604243" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="a6b56f81db604364f461472c5f6c815ab9d2b05adc34a058c4a6bb87806c88a8" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="6e11e7baa2d429e4b94ab47e34cd4f79fd78359f9b6f8b1f99485317c5e0d814" name="PackageKit-devel" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="11ad13527526a389010a790906fea4c84459520f8f0364da84e934b0a331ac2d" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="3eba3ee4cd8bff3a4cd0d6b96101e54c27ab52665f6c27bc1f78db1f3f3870fd" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="88e0a8b0afa97eb72a83be3c485b406b3f8884dc8ac389a5e011c4fbe1dd080e" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="64817bbf7ad2088ba8a978a27094557663d84b0f6356f9f14f6ab58c1116f054" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="ec049f6f46beaf1379f1e279bbc6ccc88ce8c4fc667715433149c616bf003bdc" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="4093db3b053fb9b892267242a919e7a7db12bdfcaa9fbd392c9b1ddfe3579b6b" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="7d81a3337dab8525b06e20b0a1c604eb68b6dbbfaee977406c8e6f11d818ec69" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="f2433a6e29971f23eee6c172f46b6e3e5946c038ba81006296a2eb5a9b914362" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="751d411e3c9d02d603ef881402959ddce546f7a32797a056a12cb244ea2e88ab" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="b70562bda56a02030ea8e6ceba1e1c8d088d9d72cbe36267bb6d047f7b70ae46" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="9c56ece549bb8e72c2d838ef02e5317e9f86102e12046ed6d531896619c9a2c0" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="e43fd2d947286def5e50534d3847142d8d486759bb2f671f06742d1e4fd5d4e7" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="1c17314601b54d4554930f3ae6b0d6601f20e153a211f00852f2b48bf0b885e1" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="5128745f761e34fe269a6e7f28c66d8d0431dba899db76d649a3638756c7ae76" name="PackageKit-gstreamer-plugin" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="be6ec3b6f46cbf2f757448a4d799834dc8b5c0b77fef968c3e44fd3f0aae30a2" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="73c20b1488cceb976851fa07b794d502233c311f195479687912763ee5c2f1f9" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="99839ef278bbcc372bb2702cf8fd3ca33c47b67970bb3df3cf093fbb8adb0389" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="37f61b83606e83861889aa151b2d4d43548a7f19f23c9bcdaa66c783efcd4b05" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="24aefd155a50850b5672800a21bd473aa0874bb726e2af7bd55e1663439240a4" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="77fb1d3b3c6004a5743895c589dfc07779993462d412927b0ce8368ebbb617b6" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="264dfda29119caa64f26c8ddc7098802a552d4268cd9c3c4a1271f0fe5f1674e" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="74aa07b867a0e4d36206e06dd02530bf1f6706ec9240e1e64dc5335fc066664a" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="4433e7a7c3f5879d7327186319a78d6a80139450d51122603f0c7ddac2885319" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="b535c7351d839252dc48fd48bd4ffeca3046ca3f11899c6ed983a704c6d31528" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="11d5122bff6a7f62b616691ce9e94eca7064257d518afa9de9d54a272c4802a7" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="a73a226f6ac5586a381412ae6761d02138567bc4ef9ab5ba6fcffbdeb4ca944b" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="c02865d987ff2b5e62558b98753836399ab01e46f1c45bbdfbfa82880ed0ff73" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="1bc35589f9750187af47b23d82662da694f06dab9605dc0bf4e1c49fef8b331e" name="PackageKit-gtk3-module" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="c1bdade1471a04a9b72bcf84c6e16053f00b28bc3e4ebc2dc5e2c93011afb69a" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="f0fab5fa6a14f7d9c32fd890f3be8d4dec4f666277f418f5b5953151651b93c0" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="f7e46fb659c28eb7ff69280a1a38b73ff821f08c08e8053f315fbe1605e835a4" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="e502dcea72bb2d4c3770a934ff522b3aa0876d6d636060f73e8832e11e759918" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="655fe87c2a7d3bc135f47d3ded868253bf2ac100b2483370ea534f2518dac695" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="6c6a2b7aa851c4ed3146c9ab6fc167c5ec178300b8f9b7ba10dffec86ffffa8b" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.27.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
</package>
<package pkgid="3e05c05452166143d71685f24551b89e8c72b5125b2adbfea916a207bc3f2874" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="6dad5075d991dddf8e9f027f48ef5033a8a2356157d8a7e01a61eede72843764" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="4a3cba1a733aecd03188faf24fc1bfbd4b6c15ea2f89a29e9782c759d0438c9c" name="Rivet" arch="src">
  <version epoch="0" ver="3.1.2" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1386676800">- Initial version.</changelog>
  <changelog author="badshah400@gmail.com" date="1403352000">- Update to version 2.1.2:
  + Lots of changes since previous version (2.0.0), see
    ChangeLog file in /usr/share/doc/packages/Rivet-devel/ for a
    full list
- Packaging changes:
  + Add Rivet-compatibility-with-old-boost.patch: fix foreach
    compatibility with boost &lt; 1.50 and make Rivet build with
    openSUSE 12.3 again
  + Now requires YODA-devel &gt;= 1.0.6 for building
  + Package new pkgconfig file (.pc file manually stripped of
    rpaths to avoid linking issues, and an rpmlint warning)
  + Also strip rpath from rivet-config script.</changelog>
  <changelog author="sfalken@opensuse.org" date="1411646400">- Added 0001-fix_YODA_Histo1D_includes.patch
  fixed buildfailure due to YODA/Histo1D changing function names
  Additionally fixed buildfailure from MAXINT being defined but not used
  See https://www.hepforge.org/lists-archive/rivet/2014-September/005167.html</changelog>
  <changelog author="badshah400@gmail.com" date="1414324800">- Update to version 2.2.0:
  + Mark Jet::containsBottom and Jet::containsCharm as deprecated
    methods: use the new methods. Analyses updated.
  + Add Jet::bTagged(), Jet::cTagged() and Jet::tauTagged() as
    ghost-assoc-based replacements for the 'contains' tagging methods.
  + Adding support for 1D and 3D YODA scatters, and helper methods
    for calling the efficiency, asymm and 2D histo divide functions.
  + Adding 5 new ATLAS analyses:
  - ATLAS_2011_I921594: Inclusive isolated prompt photon
    analysis with full 2010 LHC data
  - ATLAS_2013_I1263495: Inclusive isolated prompt photon
    analysis with 2011 LHC data
  - ATLAS_2014_I1279489: Measurements of electroweak production
    of dijets + $Z$ boson, and distributions sensitive to vector
    boson fusion
  - ATLAS_2014_I1282441: The differential production cross
    section of the $\phi(1020)$ meson in $\sqrt{s}=7$ TeV $pp$
    collisions measured with the ATLAS detector
  - ATLAS_2014_I1298811: Leading jet underlying event at 7 TeV
    in ATLAS
  + Adding a median(vector&lt;NUM&gt;) function and fixing the other stats
    functions to operate on vector&lt;NUM&gt; rather than vector&lt;int&gt;.
  + Fix wrong behaviour of LorentzTransform with a null boost
    vector
  + Add calc() methods to Hemispheres as requested, to allow it to
    be used with Jet or FourMomentum inputs outside the normal
    projection system.
  + Improvements to the particles methods on
    ParticleFinder/FinalState, in particular adding the range of
    cuts arguments cf. JetAlg (and tweaking the sorted jets
    equivalent) and returning as a copy rather than a reference if
    cut/sorted to avoid accidentally messing up the cached copy.
  + Creating ParticleFinder projection base class, and moving
    Particles-accessing methods from FinalState into it.
  + Adding basic forms of MC_ELECTRONS, MC_MUONS, and MC_TAUS
    analyses.
- Changes from 2.2.0Beta:
  + See /usr/share/doc/packages/Rivet-devel/ChangeLog for full
    list.
- Packaging changes:
  + Rebase patch 0001-fix_YODA_Histo1D_includes.patch for current
    version; includes dropping the 2nd hunk since it is already
    incorporated upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1435233600">- Add Rivet-boost-configure-for-GCC5.patch to fix autoconf
  boost macros lookup with GCC5; patch taken from boost.m4
  upstream [https://github.com/tsuna/boost.m4].</changelog>
  <changelog author="badshah400@gmail.com" date="1478779200">- Update to version 2.5.2:
  * Add a requirement to DressedLeptons that the FinalState passed
    as 'bareleptons' will be filtered to only contain charged
    leptons, if that is not already the case. Thanks to Markus
    Seidel for the suggestion.
  * Add Simone Amoroso's plugin for hadron spectra
    (ALEPH_1995_I382179)
  * Add Simone Amoroso's plugin for hadron spectra
    (OPAL_1993_I342766)
  * Add CMS ttbar analysis from contrib, mark validated
    (CMS_2016_I1473674)
  * Extend rivet-mkhtml --booklet to also work with pdfmerge
  * Fix make-plots automatic YMax calculation, which had a typo
    from code cleaning (mea culpa!).
  * Fix ChargedLeptons projection, which failed to exclude
    neutrinos!!! Thanks to Markus Seidel.
  * Add templated FN filtering arg versions of the Jet::*Tags()
    and Jet::*Tagged() functions.
  * Add CMS partonic top analysis (CMS_2015_I1397174)
  * Add L3 xp analysis of eta mesons, thanks Simone
    (L3_1992_I336180)
  * Add D0 1.8 TeV jet shapes analysis, thanks Simone
    (D0_1995_I398175)
  * Add has{Ancestor,Parent,Child,Descendant}With functions and
    HasParticle{Ancestor,Parent,Child,Descendant}With functors.
  * Add ATLAS 8TeV ttbar analysis from contrib
    (ATLAS_2015_I1404878)
  * Add particles(GenParticlePtr) to RivetHepMC.hh
  * Add hasParent, hasParentWith, and hasAncestorWith to Particle.
  * Add ATLAS 8TeV dijet analysis from contrib
    (ATLAS_2015_I1393758)
  * Add ATLAS 8TeV 'number of tracks in jets' analysis from
    contrib (ATLAS_2016_I1419070)
  * Add ATLAS 8TeV g-&gt;H-&gt;WW-&gt;enumunu analysis from contrib
    (ATLAS_2016_I1444991)
  * Explicit std::toupper and std::tolower to make clang happy
  * Add ATLAS Run 2 0-lepton SUSY and monojet search papers
    (ATLAS_2016_I1452559, ATLAS_2016_I1458270)
  * Add experimental Cutflow and Cutflows objects for BSM cut
    tracking.
  * Add 'direct' versions of any, all, none to Utils.hh, with an
    implicity bool() transforming function.
  * Add and mark validated B+ to omega analysis
    (BABAR_2013_I1116411)
  * Add and mark validated D0 to pi- analysis
    (BABAR_2015_I1334693)
  * Add a few more particle names and use PID names in recently
    added analyses
  * Add Simone's OPAL b-frag analysis (OPAL_2003_I599181) after
    some cleanup and heavy usage of new features
  * Restructured DELPHI_2011_I890503 in the same manner --- picks
    up a few more B-hadrons now (e.g. 20523 and such)
  * Clean up and add ATLAS 8TeV MinBias (from contrib
    ATLAS_2016_I1426695)
  * Add a static constexpr DBL_NAN to Utils.hh for convenience,
    and move some utils stuff out of MathHeader.hh
  * Add count function to Tools/Utils.h
  * Add and mark validated B0bar and Bminus-decay to pi analysis
    (BELLE_2013_I1238273)
  * Add and mark validated B0-decay analysis (BELLE_2011_I878990)
  * Add and mark validated B to D decay analysis
    (BELLE_2011_I878990)
  * Add C-array version of multi-target Analysis::scale() and
    normalize(), and fix (semantic) constness.
  * Add == and != operators for cuts applied to integers.
  * Add missing delta{Phi,Eta,Rap}{Gtr,Less} functors to
    ParticleBaseUtils.hh
  * Add templated functor filtering args to the Particle
    parent/child/descendent methods.
  * Add ATLAS Run 1 medium and tight electron ID efficiency
    functions.
  * Update configure scripts to use newer (Py3-safe) Python
    testing macros.
  * Add isFirstWith(out), isLastWith(out) functions, and functor
    wrappers, using Cut and templated function/functor args.
  * Add Particle::parent() method.
  * Add using import/typedef of HepMC *Ptr types (useful step for
    HepMC 2.07 and 3.00).
  * Various typo fixes (and canonical renaming) in
    ParticleBaseUtils functor collection.
  * Add ATLAS MV2c10 and MV2c20 b-tagging effs to
    SmearingFunctions.hh collection.
  * Add a PartonicTops projection.
  * Add overloaded versions of the Event::allParticles() method
    with selection Cut or templated selection function arguments.
  * Add rapidity scheme arg to DeltaR functor constructors.
  * Provide an Analysis::bookCounter(d,x,y, title) function, for
    convenience and making the mkanalysis template valid.
  * Improve container utils functions, and provide combined
    remove_if+erase filter_* functions for both select- and
    discard-type selector functions.
  * Bugfix in rivet-mkhtml (NoneType: ana.spiresID() --&gt; spiresid)
  * Added &lt;numeric&gt; include to Rivet/Tools/Utils.h to make gcc6
    happy
  * Add efffilt() functions and Particle/JetEffFilt functors to
    SmearingFunctions.hh
  * Adding filterBy methods for Particle and Jet which accept
    generic boolean functions as well as the Cut specialisation.
  * Add a Jet::particles(Cut&amp;) method, for inline filtering of jet
    constituents.
  * Add 'conjugate' behaviours to container head and tail functions
    via negative length arg values.
  * Add convenience headers for including all final-state and
    smearing projections, to save user typing.
  * Add standard MET functions for ATLAS R1 (and currently copies
    for R2 and CMS).
  * Add lots of vector/container helpers for e.g. container slicing,
    summing, and min/max calculation.
  * Adapt SmearedMET to take *two* arguments, since SET is typically
    used to calculate MET resolution.
  * Adding functors for computing vector &amp; ParticleBase differences
    w.r.t. another vector.
  * Implemented a few more cuts in prompt photon analysis
    (CDF_1993_S2742446) but to no avail, the rise of the data towards
    larger costheta values cannot be reproduced --- maybe this is a
    candidate for more scrutiny and using the boosting machinery such that
    the c.m. cuts can be done in a non-approximate way
  * Rename CDF_2009_S8383952 to CDF_2009_I856131 due to invalid Spires
    entry.
  * Add InspireID to all analysis known by their Spires key
- Even longer list of changes for version 2.2.1 through 2.5.1; see
  ChangeLog file.
- Drop upstream incorporated or otherwise fixed patches:
  * Rivet-compatibility-with-old-boost.patch.
  * 0001-fix_YODA_Histo1D_includes.patch.
  * Rivet-boost-configure-for-GCC5.patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Correct RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Add sover.diff, enforce versioning as per guidelines</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 2.5.4:
  * Fix 8 TeV DY (ATLAS_2016_I1467454), EL/MU bits were bissing.
  * Add 13 TeV DY (ATLAS_2017_I1514251) and mark
    ATLAS_2015_CONF_2015_041 obsolete.
  * Add missing install statement for
    ATLAS_2016_I1448301.yoda/plot/info leading to segfault.
  * Slight improvements to Particle constructors.
  * Improvement to Beam projection: before falling back to
    barcodes 1 &amp; 2, try a manual search for status=4 particles.
    Based on a patch from Andrii Verbytskyi.
  * Add CMS_2016_I1430892: dilepton channel ttbar charge asymmetry
    analysis.
  * Add CMS_2016_I1413748: dilepton channel ttbar spin
    correlations and polarisation analysis.
  * Add CMS_2017_I1518399: leading jet mass for boosted top
    quarks at 8 TeV.
  * Add convenience constructors for ChargedLeptons projection.
  * Add FinalState and Cut (optional) constructor arguments and
    usage to DISFinalState. Thanks to Andrii Verbytskyi for the
    idea and initial patch.
  * Add ATLAS_2016_I1448301, Z/gamma cross section measurement at
    8 TeV.
  * Add ATLAS_2016_I1426515, WW production at 8 TeV.
  * Add BELLE measurement of semileptonic B0bar -&gt; D*+ ell nu
    decays. I took the liberty to correct the data in the sense
    that I take the bin widths into account in the normalisation.
    BELLE_2017_I1512299.
    This is a nice analysis as it probes the hadronic and the
    leptonic side of the decay so very valuable for model building
    and of course it is rare as it is an unfolded B measurement.
  * Add ALEPH measurement of hadronic tau decays,
    ALEPH_2014_I1267648.
  * Add ALEPH dimuon invariant mass (OS and SS) analysis,
    ALEPH_2016_I1492968.
  * The latter needed GENKTEE FastJet algorithm so I added that
    FastJets.
  * Protection against logspace exception in histobooking of
    MC_JetAnalysis.
  * Fix compiler complaints about uninitialised variable in
    OPAL_2004.
  * Tidy ALEPH_1999 charm fragmentation analysis and normalise to
    data integral. Added DSTARPLUS and DSTARMINUS to PID.
  * Add ATLAS_2016_CONF_2016_092, inclusive jet cross sections
    using early 13 TeV data.
  * Add ATLAS_2017_I1591327, isolated diphoton + X differential
    cross-sections.
  * Add ATLAS_2017_I1589844, ATLAS_2017_I1589844_EL,
    ATLAS_2017_I1589844_MU:  kT splittings in Z events at 8 TeV.
  * Add ATLAS_2017_I1509919, track-based underlying event at 13
    TeV in ATLAS.
  * Add ATLAS_2016_I1492320_2l2j and ATLAS_2016_I1492320_3l, the
    WWW cross-section at 8 TeV.
  * Add ATLAS_2016_I1449082, charge asymmetry in top quark pair
    production in dilepton channel.
  * Add ATLAS_2015_I1394865, inclusive 4-lepton/ZZ lineshape.
  * Add ATLAS_2013_I1234228, high-mass Drell-Yan at 7 TeV.
  * Add CMS_2017_I1519995, search for new physics with dijet
    angular distributions in proton-proton collisions at
    sqrt{(s) = 13 TeV.
  * Add CMS_2017_I1511284, inclusive energy spectrum in the very
    forward direction in proton-proton collisions at 13 TeV.
  * Add CMS_2016_I1486238, studies of 2 b-jet + 2 jet production
    in proton-proton collisions at 7 TeV.
  * Add CMS_2016_I1454211, boosted ttbar in pp collisions at
    sqrtS = 8 TeV.
  * Add CMS_2016_I1421646, CMS azimuthal decorrelations at 8 TeV.
  * Add CMS_2015_I1380605, per-event yield of the highest
    transverse momentum charged particle and charged-particle jet.
  * Add CMS_2015_I1370682_PARTON, a partonic-top version of the CMS
    7 TeV pseudotop ttbar differential cross-section analysis.
  * Adding EHS_1988_I265504 from Felix Riehn: charged-particle
    production in K+ p, pi+ p and pp interactions at 250 GeV/c.
  * Fix ALICE_2012_I1116147 for pi0 and Lambda feed-down.
  * Add protection against leptons from QED FSR photon conversions
    in assigning PartonicTop decay modes. Thanks to Markus Seidel
    for the report and suggested fix.
  * Reimplement FastJets methods in terms of new static helper
    functions.
  * Add new mkClusterInputs, mkJet and mkJets static methods to
    FastJets, to help with direct calls to FastJet where particle
    lookup for constituents and ghost tags are required.
  * Fix Doxygen config and Makefile target to allow working with
    out-of-source builds. Thanks to Christian Holm Christensen.
  * Improve DISLepton for HERA analyses: thanks to Andrii
    Verbytskyi for the patch!
  * Replace non-template Analysis::refData functions with C++11
    default T=Scatter2D.
  * Allow yes/no and true/false values for LogX, etc. plot options.
  * Add --errs as an alias for --mc-errs to rivet-mkhtml and
    rivet-cmphistos.
  * Added 6 analyses AMY_1990_I295160, HRS_1986_I18502,
    JADE_1983_I190818, PLUTO_1980_I154270, TASSO_1989_I277658,
    TPC_1987_I235694 for charged multiplicity in e+e- at CMS
    energies below the Z pole.
  * Added 2 analyses for charged multiplicity at the Z pole
    DELPHI_1991_I301657, OPAL_1992_I321190.
  * Updated ALEPH_1991_S2435284 to plot the average charged
    multiplicity.
  * Added analyses OPAL_2004_I631361, OPAL_2004_I631361_qq,
    OPAL_2004_I648738 for gluon jets in e+e-, most need fictitious
    e+e- &gt; g g process.
  * Add Cut and functor selection args to HeavyHadrons accessor
    methods.
  * bin/rivet-mkanalysis: Add FastJets.hh include by default --
    it's almost always used.
  * src/Analyses/CMS_2016_I1473674.cc: Patch from CMS to use
    partonic tops.
  * src/Analyses/CMS_2015_I1370682.cc: Patch to inline jet finding
    from CMS.
  * Convert DressedLeptons use of fromDecay to instead veto photons
    that match fromHadron() || fromHadronicTau() -- meaning that
    electrons and muons from leptonic taus will now be dressed.
  * Move Particle and Jet std::function aliases to .fhh files, and
    replace many uses of templates for functor arguments with
    ParticleSelector meta-types instead.
  * Move the canonical implementations of hasAncestorWith, etc. and
    isLastWith, etc. from ParticleUtils.hh into Particle.
  * Disable the event-to-event beam consistency check if the
    ignore-beams mode is active.
  * Add BoolParticleAND, BoolJetOR, etc. functor combiners to
    Tools/ParticleUtils.hh and Tools/JetUtils.hh.
  * Mark ATLAS_2016_CONF_2016_078 and CMS_2016_PAS_SUS_16_14
    analyses as validated, since their cutflows match the
    documentation.
  * Add aggregate signal regions to CMS_2016_PAS_SUS_16_14.
  * Add getEnvParam function, for neater use of environment
    variable parameters with a required default.
  * Add HasBTag and HasCTag jet functors, with lower-case aliases.
  * Use std::function in functor-expanded method signatures on
    JetAlg.
  * Convert FinalState particles() accessors to use std::function
    rather than a template arg for sorting, and add filtering
    functor support -- including a mix of filtering and sorting
    functors. Yay for C++11!
  * Add ParticleEffFilter and JetEffFilter constructors from a
    double (encoding constant efficiency).
  * Add Vector3::abseta().
- Changes from version 2.5.3:
  * Add cut in BZ calculation in OPAL 4 jet analysis. Paper is not
    clear about treatment of parallel vectors, leads to division by
    zero and nan-fill and subsequent YODA RangeError
    (OPAL_2001_S4553896).
  * Fix bugs in SmearedJets treatment of b &amp; c tagging rates.
  * Adding ATLAS_2016_I1467454 analysis (high-mass Drell-Yan at 8
    TeV).
  * Tweak to 'convert' call to improve the thumbnail quality from
    rivet-mkhtml/make-plots.
  * Require Cython 0.24 or later.
  * Adding L3_2004_I652683 (LEP 1 &amp; 2 event shapes) and
    LHCB_2014_I1262703 (Z+jet at 7 TeV).
  * Adding leading dijet mass plots to MC_JetAnalysis (and all
    derived classes). Thanks to Chris Gutschow!
  * Adding CMS_2012_I1298807 (ZZ cross-section at 8 TeV),
    CMS_2016_I1459051 (inclusive jet cross-sections at 13 TeV) and
    CMS_PAS_FSQ_12_020 (preliminary 7 TeV leading-track underlying
    event).
  * Adding CDF_2015_1388868 (ppbar underlying event at 300, 900,
    and 1960 GeV).
  * Adding ATLAS_2016_I1467230 (13 TeV min bias),
    ATLAS_2016_I1468167 (13 TeV inelastic pp cross-section), and
    ATLAS_2016_I1479760 (7 TeV pp double-parton scattering with 4
    jets).
  * Adding ALICE_2012_I1116147 (eta and pi0 pTs and ratio) and
    ATLAS_2011_I929691 (7 TeV jet frag).
  * Fix bash bugs in rivet-buildplugin, including fixing the --cmd
    mode.
  * Add LHC Run 2 BSM analyses ATLAS_2016_CONF_2016_037 (3-lepton
    and same-sign 2-lepton), ATLAS_2016_CONF_2016_054 (1-lepton +
    jets), ATLAS_2016_CONF_2016_078 (ICHEP jets + MET),
    ATLAS_2016_CONF_2016_094 (1-lepton + many jets),
    CMS_2013_I1223519 (alphaT + b-jets), and CMS_2016_PAS_SUS_16_14
    (jets + MET).
  * Provide convenience reversed-argument versions of apply and
    declare methods, to allow presentational choice of declare
    syntax in situations where the projection argument is very
    long, and reduce requirements on the user's memory since this
    is one situation in Rivet where there is no 'most natural'
    ordering choice.
  * Adding pTvec() function to 4-vectors and ParticleBase.
  * Fix --pwd option of the rivet script
  * Add weights and scaling to Cutflow/s.
  * Add Et(const ParticleBase&amp;) unbound function.
  * Fix missing YAML quote mark in rivet-mkanalysis.
  * Fix constness requirements on ifilter_select() and
    Particle/JetEffFilter::operator().
  * src/Analyses/ATLAS_2016_I1458270.cc: Fix inverted particle
    efficiency filtering.
  * Add rough ATLAS and CMS photon reco efficiency functions from
    Delphes (ATLAS and CMS versions are identical, hmmm).
  * Tidying/fixing make-plots custom z-ticks code. Thanks to Dmitry
    Kalinkin.
  * Fix SpiresID -&gt; InspireID in some analyses (show-analysis
    pointed to non-existing web page).
  * Add Luminosity_fb to AnalysisInfo.
  * Added some keywords and Lumi to ATLAS_2016_I1458270.
  * Merge the ATLAS and CMS from-Delphes electron and muon tracking
    efficiency functions into generic trkeff functions -- this is
    how it should be.
  * Fix return type typo in Jet::bTagged(FN) templated method.
  * Add eta and pT cuts to ATLAS truth b-jet definition.
  * Use rounding rather than truncation in Cutflow percentage
    efficiency printing.
  * make-plots bugfix in y-axis labels for RatioPlotMode=deviation.
  * Add vector and scalar pT (rather than Et) to MissingMomentum.
  * Analysis keyword machinery.
  * rivet -a @semileptonic.
  * rivet -a @semileptonic@^bdecays -a @semileptonic@^ddecays.
- Rebase sover.diff.
- This update actually fixes build with GCC 7 (boo#1041183).</changelog>
  <changelog author="badshah400@gmail.com" date="1504180800">- Build with HepMC2-devel, since Rivet does not compile with
  HepMC-devel &gt;= 3 yet.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521806400">- Add _constraints file to avoid OOM build failures</changelog>
  <changelog author="badshah400@gmail.com" date="1528545600">- Update to version 2.6.0:
  * Long long list of changes: see
    %{_docdir}/%{name}-devel/ChangeLog.
- Rebase sover.diff for updated version.
- Fix package groups.
- Add a plugins package containing all the different analysis
  packages:
  * Plugins are unversioned; the need to depend on the version of
    the devel package.
  * Move plugins to %{_libdir}/Rivet-plugins directory
  * Install an ld.so.conf file so that the plugins are found when
    compiling against them.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1566388800">- Update to version 2.7.2
  * Fixes to CMS_2016_I1487288 jet selection and normalisation.
  * Improve Vector3::azimuthalAngle() (also used by FourMomentum
    and FourVector) to use exact rather than fuzzy is-zero check,
    to only check the perpendicular components, and to note that
    IEEE floating point implementations of atan2 should already be
    'safe' unless we decide that this function should throw or
    return NaN in case of null or along-z vectors.
  * Tools/Utils.h: Add isum() functions, and mark other container
    functions as wanting a conversion to use std::function.
  * Add super-generic (i)discardIfAny(particlebases,
    particlebases, bool(pb,pb)) functions.
  * Introduce TTMODE options for MC_TTBAR to pick the decay mode
- Changes from versions 2.7.1 and 2.7.0: See
  %{_docdir}/%{name}-devel/ChangeLog.
- Add Rivet-fix-ambiguous-namespace.patch: Fixed Et -&gt; Kin::Et to
  avoid ambiguous namespace; patch taken from upstream commit
- YODA &gt;= 1.7.4 required for building.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578484800">- Update to version 3.1.0 (new upstream recommended version):
  * Projections/EventMixingFinalState.hh: Replace use of
    std::random_shuffle (deprecated in C++14, removed in C++17)
    with std::shuffle and direct access to our thread-safe random
    number generator.
  * Significant revisions to tau jet efficiency functions.
  * Add JET_EFF_ONE/ZERO aliases, cf. the Particle versions.
  * Give precedence to user-supplied cross-section
  * Switch required compiler dialect to C++14, to ensure that
    compiler definitely (?) supports required C++11. C++14 or 17
    is the current standard LCG build dialect.
  * Add decay angle to ARGUS_1989_I268577
  * Add polarization to OPAL_1997_S3608263
  * Fixes to headers and brefi descriptions in various analyses
  * Add CMD3_2019_I1770428 K0S K0S pi+ pi- cross section
  * Fix histogram ids in BELLE_2009_I809630
  * Add TMP to histogram labels in ARGUS_1993_S2669951
  * Formally require YODA &gt;= 1.8.0 in configure.
  * Add new ALEPH analyses
  * Fixes for pointers, booking in TASSO_1990_I284251 and
    TASSO_1982_I177174
  * Added MARKI_1976_I109792, DASP_1979_I132045 particle spectra
    at low energies
  * Added DASP_1979_I132410 eta production at low energies
  * Added BABAR_2006_I719111 particle specta in B decays
  * Added OPAL_2001_I536266 flavour separate charge particle
    multiplicites
  * Added new CLEO and CUSB analyses
  * Added new BELLE lambda polarization and ARGUS D spectra
  * Fix issues with ARGUS_1992_I319102, CLEO_2000_I537236
  * Added new DELPHI analyses
  * Added L3_1995_I381046, B*/B ratio
  * Added new OPAL analyses
  * Added new BES analyses
  * Added new CMD3 analyses
  * Added ARGUS_1988_I261672 for sigmac production
  * Added LHCB_2013_I1243156, ARGUS_1989_I280943,
    BABAR_2010_I867611 helicity angles for excited D meson decays
  * Added TPC_1991_I316132, HRS_1987_I250823 D* polarization at 29
    GeV
  * Added VENUS_1998_I453613, TOPAZ_1997_I454183 charged particles
    at 58 GeV
  * ATLAS_2011_S9128077 ensure all bins outputted in d02,
    otherwise problems with yodamerge
  * ATLAS_2015_I1393758 and ATLAS_2016_I1419070,
  * CMS_2012_I1111014, change numEntries -&gt; effNumEntries to avoid
    issues in NLO runs
  * Change ratio plot label, was wrong way up, in
  * ATLAS_2012_I1203852, ATLAS_2013_I1190187
  * Use rivet normalize not yoda in ATLAS_2018_I1711114 to avoid
    issues if histos empty
  * Avoid crash in ATLAS_2016_I1426523 if host not found
  * Add omega hist in BABAR_2017_I1621593
  * EHS_1988_I265504 fix rapidity calc so in CMS not lab
  * A2_2017_I1486671 fix omega PDG number
  * Re-enable custom Particles and Jets vectors, with moms() and
    other conversion functions.
  * Add default ANY decay mode to TauFinder.
  * Pass HepMC3 path info through to the rivet-config script.
  * Refine testing and printing of UNVALIDATED status in analysis
    listing.
  * Add INF to the list of predefined constants, and rename the
    internal constants header.
  * Improve normalization guidance and fix energy specification in
    mkanalysis .info file template.
- Changes from version 3.0.0 through 3.0.2: See
  https://gitlab.com/hepcedar/rivet/blob/release-3-0-x/ChangeLog.
- Switch to python3:
  * Requires and BuildRequires switched to python3 versions
  * Rename python package to python3-%{name} and provide
    python-%{name} from it; this makes the py3 switch clear to
    users.
  * Explicitly pass PYTHON_VERSION as py3 version to make it build
    against python3
- Build against HepMC3 instead of HepMC2:
  * Adapt BuildRequires for HepMC3.
  * Pass HepMC3 specific parameters to configure.
  * Add Rivet-plugins-use-HepMC3.patch: Port an analysis plugin to
    HepMC3 from HepMC2
- Refresh sover.diff for updated version.
- Drop Rivet-fix-ambiguous-namespace.patch: incorporated upstream
- New BuildRequires: rsync, fastjet-contrib-devel
- Update required version of YODA-devel to 1.8.0.
- Drop conditionals for outdated openSUSE versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1579262400">- Add Obsoletes: python-Rivet to python3-Rivet to help migration.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587643200">- Fix python version in hashbangs. #!%{_bindir}/python introduces
  wrong for python3 package dependency on python-base.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1589630400">- Update to version 3.1.1: Long list of changes, see ChangeLog
  file installed in /usr/share/doc/packages/Rivet-devel.
- Drop Rivet-plugins-use-HepMC3.patch: fixed upstream.
- Install COPYING file for all subpkgs.
- Use properly versioned Provides and Obsoletes for python
  subpackage.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 3.1.2:
  * Submission of ATLAS_2019_I1744201, ATLAS_2019_I1764342.
  * Add a very horrible preprocessor hack to allow use of a
    private method on the HepMC2 WeightContainer, for robust and
    correctly ordered weight name acquisition before HepMC
    2.06.11.
  * Allow several AnalysisHandler objects to run in different
    threads. This is a temporary fix. A permanent fix involves
    changing the Analysis handler to own its own projections.
    Currently each AnalysisHandler need sto be created and run
    completely within the same separate thread.
  * Allow + and - in AO paths.
  * Always skip weights that have "AUX" or "DEBUG" in the name.
  * Add computation of Python versions and passing them to Cython
    as command-line flags.
  * Fix small bug in rivet-cmphistos.
  * Add ATLAS_2018_I163527 (W+jets at 8 TeV).
  * Add InvisibleFinalState projection.
  * HTML sectioning and float/overflow/scrollbar improvements in
    rivet-mkhtml output.</changelog>
</package>
<package pkgid="c5a3e5416336d1d33d3696800b2cf7e116d0877c6913c6120b8c8cb35afe39a6" name="Rivet-devel" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414324800">- Update to version 2.2.0:
  + Mark Jet::containsBottom and Jet::containsCharm as deprecated
    methods: use the new methods. Analyses updated.
  + Add Jet::bTagged(), Jet::cTagged() and Jet::tauTagged() as
    ghost-assoc-based replacements for the 'contains' tagging methods.
  + Adding support for 1D and 3D YODA scatters, and helper methods
    for calling the efficiency, asymm and 2D histo divide functions.
  + Adding 5 new ATLAS analyses:
  - ATLAS_2011_I921594: Inclusive isolated prompt photon
    analysis with full 2010 LHC data
  - ATLAS_2013_I1263495: Inclusive isolated prompt photon
    analysis with 2011 LHC data
  - ATLAS_2014_I1279489: Measurements of electroweak production
    of dijets + $Z$ boson, and distributions sensitive to vector
    boson fusion
  - ATLAS_2014_I1282441: The differential production cross
    section of the $\phi(1020)$ meson in $\sqrt{s}=7$ TeV $pp$
    collisions measured with the ATLAS detector
  - ATLAS_2014_I1298811: Leading jet underlying event at 7 TeV
    in ATLAS
  + Adding a median(vector&lt;NUM&gt;) function and fixing the other stats
    functions to operate on vector&lt;NUM&gt; rather than vector&lt;int&gt;.
  + Fix wrong behaviour of LorentzTransform with a null boost
    vector
  + Add calc() methods to Hemispheres as requested, to allow it to
    be used with Jet or FourMomentum inputs outside the normal
    projection system.
  + Improvements to the particles methods on
    ParticleFinder/FinalState, in particular adding the range of
    cuts arguments cf. JetAlg (and tweaking the sorted jets
    equivalent) and returning as a copy rather than a reference if
    cut/sorted to avoid accidentally messing up the cached copy.
  + Creating ParticleFinder projection base class, and moving
    Particles-accessing methods from FinalState into it.
  + Adding basic forms of MC_ELECTRONS, MC_MUONS, and MC_TAUS
    analyses.
- Changes from 2.2.0Beta:
  + See /usr/share/doc/packages/Rivet-devel/ChangeLog for full
    list.
- Packaging changes:
  + Rebase patch 0001-fix_YODA_Histo1D_includes.patch for current
    version; includes dropping the 2nd hunk since it is already
    incorporated upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1435233600">- Add Rivet-boost-configure-for-GCC5.patch to fix autoconf
  boost macros lookup with GCC5; patch taken from boost.m4
  upstream [https://github.com/tsuna/boost.m4].</changelog>
  <changelog author="badshah400@gmail.com" date="1478779200">- Update to version 2.5.2:
  * Add a requirement to DressedLeptons that the FinalState passed
    as 'bareleptons' will be filtered to only contain charged
    leptons, if that is not already the case. Thanks to Markus
    Seidel for the suggestion.
  * Add Simone Amoroso's plugin for hadron spectra
    (ALEPH_1995_I382179)
  * Add Simone Amoroso's plugin for hadron spectra
    (OPAL_1993_I342766)
  * Add CMS ttbar analysis from contrib, mark validated
    (CMS_2016_I1473674)
  * Extend rivet-mkhtml --booklet to also work with pdfmerge
  * Fix make-plots automatic YMax calculation, which had a typo
    from code cleaning (mea culpa!).
  * Fix ChargedLeptons projection, which failed to exclude
    neutrinos!!! Thanks to Markus Seidel.
  * Add templated FN filtering arg versions of the Jet::*Tags()
    and Jet::*Tagged() functions.
  * Add CMS partonic top analysis (CMS_2015_I1397174)
  * Add L3 xp analysis of eta mesons, thanks Simone
    (L3_1992_I336180)
  * Add D0 1.8 TeV jet shapes analysis, thanks Simone
    (D0_1995_I398175)
  * Add has{Ancestor,Parent,Child,Descendant}With functions and
    HasParticle{Ancestor,Parent,Child,Descendant}With functors.
  * Add ATLAS 8TeV ttbar analysis from contrib
    (ATLAS_2015_I1404878)
  * Add particles(GenParticlePtr) to RivetHepMC.hh
  * Add hasParent, hasParentWith, and hasAncestorWith to Particle.
  * Add ATLAS 8TeV dijet analysis from contrib
    (ATLAS_2015_I1393758)
  * Add ATLAS 8TeV 'number of tracks in jets' analysis from
    contrib (ATLAS_2016_I1419070)
  * Add ATLAS 8TeV g-&gt;H-&gt;WW-&gt;enumunu analysis from contrib
    (ATLAS_2016_I1444991)
  * Explicit std::toupper and std::tolower to make clang happy
  * Add ATLAS Run 2 0-lepton SUSY and monojet search papers
    (ATLAS_2016_I1452559, ATLAS_2016_I1458270)
  * Add experimental Cutflow and Cutflows objects for BSM cut
    tracking.
  * Add 'direct' versions of any, all, none to Utils.hh, with an
    implicity bool() transforming function.
  * Add and mark validated B+ to omega analysis
    (BABAR_2013_I1116411)
  * Add and mark validated D0 to pi- analysis
    (BABAR_2015_I1334693)
  * Add a few more particle names and use PID names in recently
    added analyses
  * Add Simone's OPAL b-frag analysis (OPAL_2003_I599181) after
    some cleanup and heavy usage of new features
  * Restructured DELPHI_2011_I890503 in the same manner --- picks
    up a few more B-hadrons now (e.g. 20523 and such)
  * Clean up and add ATLAS 8TeV MinBias (from contrib
    ATLAS_2016_I1426695)
  * Add a static constexpr DBL_NAN to Utils.hh for convenience,
    and move some utils stuff out of MathHeader.hh
  * Add count function to Tools/Utils.h
  * Add and mark validated B0bar and Bminus-decay to pi analysis
    (BELLE_2013_I1238273)
  * Add and mark validated B0-decay analysis (BELLE_2011_I878990)
  * Add and mark validated B to D decay analysis
    (BELLE_2011_I878990)
  * Add C-array version of multi-target Analysis::scale() and
    normalize(), and fix (semantic) constness.
  * Add == and != operators for cuts applied to integers.
  * Add missing delta{Phi,Eta,Rap}{Gtr,Less} functors to
    ParticleBaseUtils.hh
  * Add templated functor filtering args to the Particle
    parent/child/descendent methods.
  * Add ATLAS Run 1 medium and tight electron ID efficiency
    functions.
  * Update configure scripts to use newer (Py3-safe) Python
    testing macros.
  * Add isFirstWith(out), isLastWith(out) functions, and functor
    wrappers, using Cut and templated function/functor args.
  * Add Particle::parent() method.
  * Add using import/typedef of HepMC *Ptr types (useful step for
    HepMC 2.07 and 3.00).
  * Various typo fixes (and canonical renaming) in
    ParticleBaseUtils functor collection.
  * Add ATLAS MV2c10 and MV2c20 b-tagging effs to
    SmearingFunctions.hh collection.
  * Add a PartonicTops projection.
  * Add overloaded versions of the Event::allParticles() method
    with selection Cut or templated selection function arguments.
  * Add rapidity scheme arg to DeltaR functor constructors.
  * Provide an Analysis::bookCounter(d,x,y, title) function, for
    convenience and making the mkanalysis template valid.
  * Improve container utils functions, and provide combined
    remove_if+erase filter_* functions for both select- and
    discard-type selector functions.
  * Bugfix in rivet-mkhtml (NoneType: ana.spiresID() --&gt; spiresid)
  * Added &lt;numeric&gt; include to Rivet/Tools/Utils.h to make gcc6
    happy
  * Add efffilt() functions and Particle/JetEffFilt functors to
    SmearingFunctions.hh
  * Adding filterBy methods for Particle and Jet which accept
    generic boolean functions as well as the Cut specialisation.
  * Add a Jet::particles(Cut&amp;) method, for inline filtering of jet
    constituents.
  * Add 'conjugate' behaviours to container head and tail functions
    via negative length arg values.
  * Add convenience headers for including all final-state and
    smearing projections, to save user typing.
  * Add standard MET functions for ATLAS R1 (and currently copies
    for R2 and CMS).
  * Add lots of vector/container helpers for e.g. container slicing,
    summing, and min/max calculation.
  * Adapt SmearedMET to take *two* arguments, since SET is typically
    used to calculate MET resolution.
  * Adding functors for computing vector &amp; ParticleBase differences
    w.r.t. another vector.
  * Implemented a few more cuts in prompt photon analysis
    (CDF_1993_S2742446) but to no avail, the rise of the data towards
    larger costheta values cannot be reproduced --- maybe this is a
    candidate for more scrutiny and using the boosting machinery such that
    the c.m. cuts can be done in a non-approximate way
  * Rename CDF_2009_S8383952 to CDF_2009_I856131 due to invalid Spires
    entry.
  * Add InspireID to all analysis known by their Spires key
- Even longer list of changes for version 2.2.1 through 2.5.1; see
  ChangeLog file.
- Drop upstream incorporated or otherwise fixed patches:
  * Rivet-compatibility-with-old-boost.patch.
  * 0001-fix_YODA_Histo1D_includes.patch.
  * Rivet-boost-configure-for-GCC5.patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Correct RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Add sover.diff, enforce versioning as per guidelines</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 2.5.4:
  * Fix 8 TeV DY (ATLAS_2016_I1467454), EL/MU bits were bissing.
  * Add 13 TeV DY (ATLAS_2017_I1514251) and mark
    ATLAS_2015_CONF_2015_041 obsolete.
  * Add missing install statement for
    ATLAS_2016_I1448301.yoda/plot/info leading to segfault.
  * Slight improvements to Particle constructors.
  * Improvement to Beam projection: before falling back to
    barcodes 1 &amp; 2, try a manual search for status=4 particles.
    Based on a patch from Andrii Verbytskyi.
  * Add CMS_2016_I1430892: dilepton channel ttbar charge asymmetry
    analysis.
  * Add CMS_2016_I1413748: dilepton channel ttbar spin
    correlations and polarisation analysis.
  * Add CMS_2017_I1518399: leading jet mass for boosted top
    quarks at 8 TeV.
  * Add convenience constructors for ChargedLeptons projection.
  * Add FinalState and Cut (optional) constructor arguments and
    usage to DISFinalState. Thanks to Andrii Verbytskyi for the
    idea and initial patch.
  * Add ATLAS_2016_I1448301, Z/gamma cross section measurement at
    8 TeV.
  * Add ATLAS_2016_I1426515, WW production at 8 TeV.
  * Add BELLE measurement of semileptonic B0bar -&gt; D*+ ell nu
    decays. I took the liberty to correct the data in the sense
    that I take the bin widths into account in the normalisation.
    BELLE_2017_I1512299.
    This is a nice analysis as it probes the hadronic and the
    leptonic side of the decay so very valuable for model building
    and of course it is rare as it is an unfolded B measurement.
  * Add ALEPH measurement of hadronic tau decays,
    ALEPH_2014_I1267648.
  * Add ALEPH dimuon invariant mass (OS and SS) analysis,
    ALEPH_2016_I1492968.
  * The latter needed GENKTEE FastJet algorithm so I added that
    FastJets.
  * Protection against logspace exception in histobooking of
    MC_JetAnalysis.
  * Fix compiler complaints about uninitialised variable in
    OPAL_2004.
  * Tidy ALEPH_1999 charm fragmentation analysis and normalise to
    data integral. Added DSTARPLUS and DSTARMINUS to PID.
  * Add ATLAS_2016_CONF_2016_092, inclusive jet cross sections
    using early 13 TeV data.
  * Add ATLAS_2017_I1591327, isolated diphoton + X differential
    cross-sections.
  * Add ATLAS_2017_I1589844, ATLAS_2017_I1589844_EL,
    ATLAS_2017_I1589844_MU:  kT splittings in Z events at 8 TeV.
  * Add ATLAS_2017_I1509919, track-based underlying event at 13
    TeV in ATLAS.
  * Add ATLAS_2016_I1492320_2l2j and ATLAS_2016_I1492320_3l, the
    WWW cross-section at 8 TeV.
  * Add ATLAS_2016_I1449082, charge asymmetry in top quark pair
    production in dilepton channel.
  * Add ATLAS_2015_I1394865, inclusive 4-lepton/ZZ lineshape.
  * Add ATLAS_2013_I1234228, high-mass Drell-Yan at 7 TeV.
  * Add CMS_2017_I1519995, search for new physics with dijet
    angular distributions in proton-proton collisions at
    sqrt{(s) = 13 TeV.
  * Add CMS_2017_I1511284, inclusive energy spectrum in the very
    forward direction in proton-proton collisions at 13 TeV.
  * Add CMS_2016_I1486238, studies of 2 b-jet + 2 jet production
    in proton-proton collisions at 7 TeV.
  * Add CMS_2016_I1454211, boosted ttbar in pp collisions at
    sqrtS = 8 TeV.
  * Add CMS_2016_I1421646, CMS azimuthal decorrelations at 8 TeV.
  * Add CMS_2015_I1380605, per-event yield of the highest
    transverse momentum charged particle and charged-particle jet.
  * Add CMS_2015_I1370682_PARTON, a partonic-top version of the CMS
    7 TeV pseudotop ttbar differential cross-section analysis.
  * Adding EHS_1988_I265504 from Felix Riehn: charged-particle
    production in K+ p, pi+ p and pp interactions at 250 GeV/c.
  * Fix ALICE_2012_I1116147 for pi0 and Lambda feed-down.
  * Add protection against leptons from QED FSR photon conversions
    in assigning PartonicTop decay modes. Thanks to Markus Seidel
    for the report and suggested fix.
  * Reimplement FastJets methods in terms of new static helper
    functions.
  * Add new mkClusterInputs, mkJet and mkJets static methods to
    FastJets, to help with direct calls to FastJet where particle
    lookup for constituents and ghost tags are required.
  * Fix Doxygen config and Makefile target to allow working with
    out-of-source builds. Thanks to Christian Holm Christensen.
  * Improve DISLepton for HERA analyses: thanks to Andrii
    Verbytskyi for the patch!
  * Replace non-template Analysis::refData functions with C++11
    default T=Scatter2D.
  * Allow yes/no and true/false values for LogX, etc. plot options.
  * Add --errs as an alias for --mc-errs to rivet-mkhtml and
    rivet-cmphistos.
  * Added 6 analyses AMY_1990_I295160, HRS_1986_I18502,
    JADE_1983_I190818, PLUTO_1980_I154270, TASSO_1989_I277658,
    TPC_1987_I235694 for charged multiplicity in e+e- at CMS
    energies below the Z pole.
  * Added 2 analyses for charged multiplicity at the Z pole
    DELPHI_1991_I301657, OPAL_1992_I321190.
  * Updated ALEPH_1991_S2435284 to plot the average charged
    multiplicity.
  * Added analyses OPAL_2004_I631361, OPAL_2004_I631361_qq,
    OPAL_2004_I648738 for gluon jets in e+e-, most need fictitious
    e+e- &gt; g g process.
  * Add Cut and functor selection args to HeavyHadrons accessor
    methods.
  * bin/rivet-mkanalysis: Add FastJets.hh include by default --
    it's almost always used.
  * src/Analyses/CMS_2016_I1473674.cc: Patch from CMS to use
    partonic tops.
  * src/Analyses/CMS_2015_I1370682.cc: Patch to inline jet finding
    from CMS.
  * Convert DressedLeptons use of fromDecay to instead veto photons
    that match fromHadron() || fromHadronicTau() -- meaning that
    electrons and muons from leptonic taus will now be dressed.
  * Move Particle and Jet std::function aliases to .fhh files, and
    replace many uses of templates for functor arguments with
    ParticleSelector meta-types instead.
  * Move the canonical implementations of hasAncestorWith, etc. and
    isLastWith, etc. from ParticleUtils.hh into Particle.
  * Disable the event-to-event beam consistency check if the
    ignore-beams mode is active.
  * Add BoolParticleAND, BoolJetOR, etc. functor combiners to
    Tools/ParticleUtils.hh and Tools/JetUtils.hh.
  * Mark ATLAS_2016_CONF_2016_078 and CMS_2016_PAS_SUS_16_14
    analyses as validated, since their cutflows match the
    documentation.
  * Add aggregate signal regions to CMS_2016_PAS_SUS_16_14.
  * Add getEnvParam function, for neater use of environment
    variable parameters with a required default.
  * Add HasBTag and HasCTag jet functors, with lower-case aliases.
  * Use std::function in functor-expanded method signatures on
    JetAlg.
  * Convert FinalState particles() accessors to use std::function
    rather than a template arg for sorting, and add filtering
    functor support -- including a mix of filtering and sorting
    functors. Yay for C++11!
  * Add ParticleEffFilter and JetEffFilter constructors from a
    double (encoding constant efficiency).
  * Add Vector3::abseta().
- Changes from version 2.5.3:
  * Add cut in BZ calculation in OPAL 4 jet analysis. Paper is not
    clear about treatment of parallel vectors, leads to division by
    zero and nan-fill and subsequent YODA RangeError
    (OPAL_2001_S4553896).
  * Fix bugs in SmearedJets treatment of b &amp; c tagging rates.
  * Adding ATLAS_2016_I1467454 analysis (high-mass Drell-Yan at 8
    TeV).
  * Tweak to 'convert' call to improve the thumbnail quality from
    rivet-mkhtml/make-plots.
  * Require Cython 0.24 or later.
  * Adding L3_2004_I652683 (LEP 1 &amp; 2 event shapes) and
    LHCB_2014_I1262703 (Z+jet at 7 TeV).
  * Adding leading dijet mass plots to MC_JetAnalysis (and all
    derived classes). Thanks to Chris Gutschow!
  * Adding CMS_2012_I1298807 (ZZ cross-section at 8 TeV),
    CMS_2016_I1459051 (inclusive jet cross-sections at 13 TeV) and
    CMS_PAS_FSQ_12_020 (preliminary 7 TeV leading-track underlying
    event).
  * Adding CDF_2015_1388868 (ppbar underlying event at 300, 900,
    and 1960 GeV).
  * Adding ATLAS_2016_I1467230 (13 TeV min bias),
    ATLAS_2016_I1468167 (13 TeV inelastic pp cross-section), and
    ATLAS_2016_I1479760 (7 TeV pp double-parton scattering with 4
    jets).
  * Adding ALICE_2012_I1116147 (eta and pi0 pTs and ratio) and
    ATLAS_2011_I929691 (7 TeV jet frag).
  * Fix bash bugs in rivet-buildplugin, including fixing the --cmd
    mode.
  * Add LHC Run 2 BSM analyses ATLAS_2016_CONF_2016_037 (3-lepton
    and same-sign 2-lepton), ATLAS_2016_CONF_2016_054 (1-lepton +
    jets), ATLAS_2016_CONF_2016_078 (ICHEP jets + MET),
    ATLAS_2016_CONF_2016_094 (1-lepton + many jets),
    CMS_2013_I1223519 (alphaT + b-jets), and CMS_2016_PAS_SUS_16_14
    (jets + MET).
  * Provide convenience reversed-argument versions of apply and
    declare methods, to allow presentational choice of declare
    syntax in situations where the projection argument is very
    long, and reduce requirements on the user's memory since this
    is one situation in Rivet where there is no 'most natural'
    ordering choice.
  * Adding pTvec() function to 4-vectors and ParticleBase.
  * Fix --pwd option of the rivet script
  * Add weights and scaling to Cutflow/s.
  * Add Et(const ParticleBase&amp;) unbound function.
  * Fix missing YAML quote mark in rivet-mkanalysis.
  * Fix constness requirements on ifilter_select() and
    Particle/JetEffFilter::operator().
  * src/Analyses/ATLAS_2016_I1458270.cc: Fix inverted particle
    efficiency filtering.
  * Add rough ATLAS and CMS photon reco efficiency functions from
    Delphes (ATLAS and CMS versions are identical, hmmm).
  * Tidying/fixing make-plots custom z-ticks code. Thanks to Dmitry
    Kalinkin.
  * Fix SpiresID -&gt; InspireID in some analyses (show-analysis
    pointed to non-existing web page).
  * Add Luminosity_fb to AnalysisInfo.
  * Added some keywords and Lumi to ATLAS_2016_I1458270.
  * Merge the ATLAS and CMS from-Delphes electron and muon tracking
    efficiency functions into generic trkeff functions -- this is
    how it should be.
  * Fix return type typo in Jet::bTagged(FN) templated method.
  * Add eta and pT cuts to ATLAS truth b-jet definition.
  * Use rounding rather than truncation in Cutflow percentage
    efficiency printing.
  * make-plots bugfix in y-axis labels for RatioPlotMode=deviation.
  * Add vector and scalar pT (rather than Et) to MissingMomentum.
  * Analysis keyword machinery.
  * rivet -a @semileptonic.
  * rivet -a @semileptonic@^bdecays -a @semileptonic@^ddecays.
- Rebase sover.diff.
- This update actually fixes build with GCC 7 (boo#1041183).</changelog>
  <changelog author="badshah400@gmail.com" date="1504180800">- Build with HepMC2-devel, since Rivet does not compile with
  HepMC-devel &gt;= 3 yet.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521806400">- Add _constraints file to avoid OOM build failures</changelog>
  <changelog author="badshah400@gmail.com" date="1528545600">- Update to version 2.6.0:
  * Long long list of changes: see
    %{_docdir}/%{name}-devel/ChangeLog.
- Rebase sover.diff for updated version.
- Fix package groups.
- Add a plugins package containing all the different analysis
  packages:
  * Plugins are unversioned; the need to depend on the version of
    the devel package.
  * Move plugins to %{_libdir}/Rivet-plugins directory
  * Install an ld.so.conf file so that the plugins are found when
    compiling against them.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1566388800">- Update to version 2.7.2
  * Fixes to CMS_2016_I1487288 jet selection and normalisation.
  * Improve Vector3::azimuthalAngle() (also used by FourMomentum
    and FourVector) to use exact rather than fuzzy is-zero check,
    to only check the perpendicular components, and to note that
    IEEE floating point implementations of atan2 should already be
    'safe' unless we decide that this function should throw or
    return NaN in case of null or along-z vectors.
  * Tools/Utils.h: Add isum() functions, and mark other container
    functions as wanting a conversion to use std::function.
  * Add super-generic (i)discardIfAny(particlebases,
    particlebases, bool(pb,pb)) functions.
  * Introduce TTMODE options for MC_TTBAR to pick the decay mode
- Changes from versions 2.7.1 and 2.7.0: See
  %{_docdir}/%{name}-devel/ChangeLog.
- Add Rivet-fix-ambiguous-namespace.patch: Fixed Et -&gt; Kin::Et to
  avoid ambiguous namespace; patch taken from upstream commit
- YODA &gt;= 1.7.4 required for building.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578484800">- Update to version 3.1.0 (new upstream recommended version):
  * Projections/EventMixingFinalState.hh: Replace use of
    std::random_shuffle (deprecated in C++14, removed in C++17)
    with std::shuffle and direct access to our thread-safe random
    number generator.
  * Significant revisions to tau jet efficiency functions.
  * Add JET_EFF_ONE/ZERO aliases, cf. the Particle versions.
  * Give precedence to user-supplied cross-section
  * Switch required compiler dialect to C++14, to ensure that
    compiler definitely (?) supports required C++11. C++14 or 17
    is the current standard LCG build dialect.
  * Add decay angle to ARGUS_1989_I268577
  * Add polarization to OPAL_1997_S3608263
  * Fixes to headers and brefi descriptions in various analyses
  * Add CMD3_2019_I1770428 K0S K0S pi+ pi- cross section
  * Fix histogram ids in BELLE_2009_I809630
  * Add TMP to histogram labels in ARGUS_1993_S2669951
  * Formally require YODA &gt;= 1.8.0 in configure.
  * Add new ALEPH analyses
  * Fixes for pointers, booking in TASSO_1990_I284251 and
    TASSO_1982_I177174
  * Added MARKI_1976_I109792, DASP_1979_I132045 particle spectra
    at low energies
  * Added DASP_1979_I132410 eta production at low energies
  * Added BABAR_2006_I719111 particle specta in B decays
  * Added OPAL_2001_I536266 flavour separate charge particle
    multiplicites
  * Added new CLEO and CUSB analyses
  * Added new BELLE lambda polarization and ARGUS D spectra
  * Fix issues with ARGUS_1992_I319102, CLEO_2000_I537236
  * Added new DELPHI analyses
  * Added L3_1995_I381046, B*/B ratio
  * Added new OPAL analyses
  * Added new BES analyses
  * Added new CMD3 analyses
  * Added ARGUS_1988_I261672 for sigmac production
  * Added LHCB_2013_I1243156, ARGUS_1989_I280943,
    BABAR_2010_I867611 helicity angles for excited D meson decays
  * Added TPC_1991_I316132, HRS_1987_I250823 D* polarization at 29
    GeV
  * Added VENUS_1998_I453613, TOPAZ_1997_I454183 charged particles
    at 58 GeV
  * ATLAS_2011_S9128077 ensure all bins outputted in d02,
    otherwise problems with yodamerge
  * ATLAS_2015_I1393758 and ATLAS_2016_I1419070,
  * CMS_2012_I1111014, change numEntries -&gt; effNumEntries to avoid
    issues in NLO runs
  * Change ratio plot label, was wrong way up, in
  * ATLAS_2012_I1203852, ATLAS_2013_I1190187
  * Use rivet normalize not yoda in ATLAS_2018_I1711114 to avoid
    issues if histos empty
  * Avoid crash in ATLAS_2016_I1426523 if host not found
  * Add omega hist in BABAR_2017_I1621593
  * EHS_1988_I265504 fix rapidity calc so in CMS not lab
  * A2_2017_I1486671 fix omega PDG number
  * Re-enable custom Particles and Jets vectors, with moms() and
    other conversion functions.
  * Add default ANY decay mode to TauFinder.
  * Pass HepMC3 path info through to the rivet-config script.
  * Refine testing and printing of UNVALIDATED status in analysis
    listing.
  * Add INF to the list of predefined constants, and rename the
    internal constants header.
  * Improve normalization guidance and fix energy specification in
    mkanalysis .info file template.
- Changes from version 3.0.0 through 3.0.2: See
  https://gitlab.com/hepcedar/rivet/blob/release-3-0-x/ChangeLog.
- Switch to python3:
  * Requires and BuildRequires switched to python3 versions
  * Rename python package to python3-%{name} and provide
    python-%{name} from it; this makes the py3 switch clear to
    users.
  * Explicitly pass PYTHON_VERSION as py3 version to make it build
    against python3
- Build against HepMC3 instead of HepMC2:
  * Adapt BuildRequires for HepMC3.
  * Pass HepMC3 specific parameters to configure.
  * Add Rivet-plugins-use-HepMC3.patch: Port an analysis plugin to
    HepMC3 from HepMC2
- Refresh sover.diff for updated version.
- Drop Rivet-fix-ambiguous-namespace.patch: incorporated upstream
- New BuildRequires: rsync, fastjet-contrib-devel
- Update required version of YODA-devel to 1.8.0.
- Drop conditionals for outdated openSUSE versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1579262400">- Add Obsoletes: python-Rivet to python3-Rivet to help migration.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587643200">- Fix python version in hashbangs. #!%{_bindir}/python introduces
  wrong for python3 package dependency on python-base.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1589630400">- Update to version 3.1.1: Long list of changes, see ChangeLog
  file installed in /usr/share/doc/packages/Rivet-devel.
- Drop Rivet-plugins-use-HepMC3.patch: fixed upstream.
- Install COPYING file for all subpkgs.
- Use properly versioned Provides and Obsoletes for python
  subpackage.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 3.1.2:
  * Submission of ATLAS_2019_I1744201, ATLAS_2019_I1764342.
  * Add a very horrible preprocessor hack to allow use of a
    private method on the HepMC2 WeightContainer, for robust and
    correctly ordered weight name acquisition before HepMC
    2.06.11.
  * Allow several AnalysisHandler objects to run in different
    threads. This is a temporary fix. A permanent fix involves
    changing the Analysis handler to own its own projections.
    Currently each AnalysisHandler need sto be created and run
    completely within the same separate thread.
  * Allow + and - in AO paths.
  * Always skip weights that have "AUX" or "DEBUG" in the name.
  * Add computation of Python versions and passing them to Cython
    as command-line flags.
  * Fix small bug in rivet-cmphistos.
  * Add ATLAS_2018_I163527 (W+jets at 8 TeV).
  * Add InvisibleFinalState projection.
  * HTML sectioning and float/overflow/scrollbar improvements in
    rivet-mkhtml output.</changelog>
</package>
<package pkgid="85ca481451ac4ce6d5dddf20c6f76fecdf3e261f10cc6ecfa3dbad932b11c8ed" name="Rivet-plugins" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414324800">- Update to version 2.2.0:
  + Mark Jet::containsBottom and Jet::containsCharm as deprecated
    methods: use the new methods. Analyses updated.
  + Add Jet::bTagged(), Jet::cTagged() and Jet::tauTagged() as
    ghost-assoc-based replacements for the 'contains' tagging methods.
  + Adding support for 1D and 3D YODA scatters, and helper methods
    for calling the efficiency, asymm and 2D histo divide functions.
  + Adding 5 new ATLAS analyses:
  - ATLAS_2011_I921594: Inclusive isolated prompt photon
    analysis with full 2010 LHC data
  - ATLAS_2013_I1263495: Inclusive isolated prompt photon
    analysis with 2011 LHC data
  - ATLAS_2014_I1279489: Measurements of electroweak production
    of dijets + $Z$ boson, and distributions sensitive to vector
    boson fusion
  - ATLAS_2014_I1282441: The differential production cross
    section of the $\phi(1020)$ meson in $\sqrt{s}=7$ TeV $pp$
    collisions measured with the ATLAS detector
  - ATLAS_2014_I1298811: Leading jet underlying event at 7 TeV
    in ATLAS
  + Adding a median(vector&lt;NUM&gt;) function and fixing the other stats
    functions to operate on vector&lt;NUM&gt; rather than vector&lt;int&gt;.
  + Fix wrong behaviour of LorentzTransform with a null boost
    vector
  + Add calc() methods to Hemispheres as requested, to allow it to
    be used with Jet or FourMomentum inputs outside the normal
    projection system.
  + Improvements to the particles methods on
    ParticleFinder/FinalState, in particular adding the range of
    cuts arguments cf. JetAlg (and tweaking the sorted jets
    equivalent) and returning as a copy rather than a reference if
    cut/sorted to avoid accidentally messing up the cached copy.
  + Creating ParticleFinder projection base class, and moving
    Particles-accessing methods from FinalState into it.
  + Adding basic forms of MC_ELECTRONS, MC_MUONS, and MC_TAUS
    analyses.
- Changes from 2.2.0Beta:
  + See /usr/share/doc/packages/Rivet-devel/ChangeLog for full
    list.
- Packaging changes:
  + Rebase patch 0001-fix_YODA_Histo1D_includes.patch for current
    version; includes dropping the 2nd hunk since it is already
    incorporated upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1435233600">- Add Rivet-boost-configure-for-GCC5.patch to fix autoconf
  boost macros lookup with GCC5; patch taken from boost.m4
  upstream [https://github.com/tsuna/boost.m4].</changelog>
  <changelog author="badshah400@gmail.com" date="1478779200">- Update to version 2.5.2:
  * Add a requirement to DressedLeptons that the FinalState passed
    as 'bareleptons' will be filtered to only contain charged
    leptons, if that is not already the case. Thanks to Markus
    Seidel for the suggestion.
  * Add Simone Amoroso's plugin for hadron spectra
    (ALEPH_1995_I382179)
  * Add Simone Amoroso's plugin for hadron spectra
    (OPAL_1993_I342766)
  * Add CMS ttbar analysis from contrib, mark validated
    (CMS_2016_I1473674)
  * Extend rivet-mkhtml --booklet to also work with pdfmerge
  * Fix make-plots automatic YMax calculation, which had a typo
    from code cleaning (mea culpa!).
  * Fix ChargedLeptons projection, which failed to exclude
    neutrinos!!! Thanks to Markus Seidel.
  * Add templated FN filtering arg versions of the Jet::*Tags()
    and Jet::*Tagged() functions.
  * Add CMS partonic top analysis (CMS_2015_I1397174)
  * Add L3 xp analysis of eta mesons, thanks Simone
    (L3_1992_I336180)
  * Add D0 1.8 TeV jet shapes analysis, thanks Simone
    (D0_1995_I398175)
  * Add has{Ancestor,Parent,Child,Descendant}With functions and
    HasParticle{Ancestor,Parent,Child,Descendant}With functors.
  * Add ATLAS 8TeV ttbar analysis from contrib
    (ATLAS_2015_I1404878)
  * Add particles(GenParticlePtr) to RivetHepMC.hh
  * Add hasParent, hasParentWith, and hasAncestorWith to Particle.
  * Add ATLAS 8TeV dijet analysis from contrib
    (ATLAS_2015_I1393758)
  * Add ATLAS 8TeV 'number of tracks in jets' analysis from
    contrib (ATLAS_2016_I1419070)
  * Add ATLAS 8TeV g-&gt;H-&gt;WW-&gt;enumunu analysis from contrib
    (ATLAS_2016_I1444991)
  * Explicit std::toupper and std::tolower to make clang happy
  * Add ATLAS Run 2 0-lepton SUSY and monojet search papers
    (ATLAS_2016_I1452559, ATLAS_2016_I1458270)
  * Add experimental Cutflow and Cutflows objects for BSM cut
    tracking.
  * Add 'direct' versions of any, all, none to Utils.hh, with an
    implicity bool() transforming function.
  * Add and mark validated B+ to omega analysis
    (BABAR_2013_I1116411)
  * Add and mark validated D0 to pi- analysis
    (BABAR_2015_I1334693)
  * Add a few more particle names and use PID names in recently
    added analyses
  * Add Simone's OPAL b-frag analysis (OPAL_2003_I599181) after
    some cleanup and heavy usage of new features
  * Restructured DELPHI_2011_I890503 in the same manner --- picks
    up a few more B-hadrons now (e.g. 20523 and such)
  * Clean up and add ATLAS 8TeV MinBias (from contrib
    ATLAS_2016_I1426695)
  * Add a static constexpr DBL_NAN to Utils.hh for convenience,
    and move some utils stuff out of MathHeader.hh
  * Add count function to Tools/Utils.h
  * Add and mark validated B0bar and Bminus-decay to pi analysis
    (BELLE_2013_I1238273)
  * Add and mark validated B0-decay analysis (BELLE_2011_I878990)
  * Add and mark validated B to D decay analysis
    (BELLE_2011_I878990)
  * Add C-array version of multi-target Analysis::scale() and
    normalize(), and fix (semantic) constness.
  * Add == and != operators for cuts applied to integers.
  * Add missing delta{Phi,Eta,Rap}{Gtr,Less} functors to
    ParticleBaseUtils.hh
  * Add templated functor filtering args to the Particle
    parent/child/descendent methods.
  * Add ATLAS Run 1 medium and tight electron ID efficiency
    functions.
  * Update configure scripts to use newer (Py3-safe) Python
    testing macros.
  * Add isFirstWith(out), isLastWith(out) functions, and functor
    wrappers, using Cut and templated function/functor args.
  * Add Particle::parent() method.
  * Add using import/typedef of HepMC *Ptr types (useful step for
    HepMC 2.07 and 3.00).
  * Various typo fixes (and canonical renaming) in
    ParticleBaseUtils functor collection.
  * Add ATLAS MV2c10 and MV2c20 b-tagging effs to
    SmearingFunctions.hh collection.
  * Add a PartonicTops projection.
  * Add overloaded versions of the Event::allParticles() method
    with selection Cut or templated selection function arguments.
  * Add rapidity scheme arg to DeltaR functor constructors.
  * Provide an Analysis::bookCounter(d,x,y, title) function, for
    convenience and making the mkanalysis template valid.
  * Improve container utils functions, and provide combined
    remove_if+erase filter_* functions for both select- and
    discard-type selector functions.
  * Bugfix in rivet-mkhtml (NoneType: ana.spiresID() --&gt; spiresid)
  * Added &lt;numeric&gt; include to Rivet/Tools/Utils.h to make gcc6
    happy
  * Add efffilt() functions and Particle/JetEffFilt functors to
    SmearingFunctions.hh
  * Adding filterBy methods for Particle and Jet which accept
    generic boolean functions as well as the Cut specialisation.
  * Add a Jet::particles(Cut&amp;) method, for inline filtering of jet
    constituents.
  * Add 'conjugate' behaviours to container head and tail functions
    via negative length arg values.
  * Add convenience headers for including all final-state and
    smearing projections, to save user typing.
  * Add standard MET functions for ATLAS R1 (and currently copies
    for R2 and CMS).
  * Add lots of vector/container helpers for e.g. container slicing,
    summing, and min/max calculation.
  * Adapt SmearedMET to take *two* arguments, since SET is typically
    used to calculate MET resolution.
  * Adding functors for computing vector &amp; ParticleBase differences
    w.r.t. another vector.
  * Implemented a few more cuts in prompt photon analysis
    (CDF_1993_S2742446) but to no avail, the rise of the data towards
    larger costheta values cannot be reproduced --- maybe this is a
    candidate for more scrutiny and using the boosting machinery such that
    the c.m. cuts can be done in a non-approximate way
  * Rename CDF_2009_S8383952 to CDF_2009_I856131 due to invalid Spires
    entry.
  * Add InspireID to all analysis known by their Spires key
- Even longer list of changes for version 2.2.1 through 2.5.1; see
  ChangeLog file.
- Drop upstream incorporated or otherwise fixed patches:
  * Rivet-compatibility-with-old-boost.patch.
  * 0001-fix_YODA_Histo1D_includes.patch.
  * Rivet-boost-configure-for-GCC5.patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Correct RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Add sover.diff, enforce versioning as per guidelines</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 2.5.4:
  * Fix 8 TeV DY (ATLAS_2016_I1467454), EL/MU bits were bissing.
  * Add 13 TeV DY (ATLAS_2017_I1514251) and mark
    ATLAS_2015_CONF_2015_041 obsolete.
  * Add missing install statement for
    ATLAS_2016_I1448301.yoda/plot/info leading to segfault.
  * Slight improvements to Particle constructors.
  * Improvement to Beam projection: before falling back to
    barcodes 1 &amp; 2, try a manual search for status=4 particles.
    Based on a patch from Andrii Verbytskyi.
  * Add CMS_2016_I1430892: dilepton channel ttbar charge asymmetry
    analysis.
  * Add CMS_2016_I1413748: dilepton channel ttbar spin
    correlations and polarisation analysis.
  * Add CMS_2017_I1518399: leading jet mass for boosted top
    quarks at 8 TeV.
  * Add convenience constructors for ChargedLeptons projection.
  * Add FinalState and Cut (optional) constructor arguments and
    usage to DISFinalState. Thanks to Andrii Verbytskyi for the
    idea and initial patch.
  * Add ATLAS_2016_I1448301, Z/gamma cross section measurement at
    8 TeV.
  * Add ATLAS_2016_I1426515, WW production at 8 TeV.
  * Add BELLE measurement of semileptonic B0bar -&gt; D*+ ell nu
    decays. I took the liberty to correct the data in the sense
    that I take the bin widths into account in the normalisation.
    BELLE_2017_I1512299.
    This is a nice analysis as it probes the hadronic and the
    leptonic side of the decay so very valuable for model building
    and of course it is rare as it is an unfolded B measurement.
  * Add ALEPH measurement of hadronic tau decays,
    ALEPH_2014_I1267648.
  * Add ALEPH dimuon invariant mass (OS and SS) analysis,
    ALEPH_2016_I1492968.
  * The latter needed GENKTEE FastJet algorithm so I added that
    FastJets.
  * Protection against logspace exception in histobooking of
    MC_JetAnalysis.
  * Fix compiler complaints about uninitialised variable in
    OPAL_2004.
  * Tidy ALEPH_1999 charm fragmentation analysis and normalise to
    data integral. Added DSTARPLUS and DSTARMINUS to PID.
  * Add ATLAS_2016_CONF_2016_092, inclusive jet cross sections
    using early 13 TeV data.
  * Add ATLAS_2017_I1591327, isolated diphoton + X differential
    cross-sections.
  * Add ATLAS_2017_I1589844, ATLAS_2017_I1589844_EL,
    ATLAS_2017_I1589844_MU:  kT splittings in Z events at 8 TeV.
  * Add ATLAS_2017_I1509919, track-based underlying event at 13
    TeV in ATLAS.
  * Add ATLAS_2016_I1492320_2l2j and ATLAS_2016_I1492320_3l, the
    WWW cross-section at 8 TeV.
  * Add ATLAS_2016_I1449082, charge asymmetry in top quark pair
    production in dilepton channel.
  * Add ATLAS_2015_I1394865, inclusive 4-lepton/ZZ lineshape.
  * Add ATLAS_2013_I1234228, high-mass Drell-Yan at 7 TeV.
  * Add CMS_2017_I1519995, search for new physics with dijet
    angular distributions in proton-proton collisions at
    sqrt{(s) = 13 TeV.
  * Add CMS_2017_I1511284, inclusive energy spectrum in the very
    forward direction in proton-proton collisions at 13 TeV.
  * Add CMS_2016_I1486238, studies of 2 b-jet + 2 jet production
    in proton-proton collisions at 7 TeV.
  * Add CMS_2016_I1454211, boosted ttbar in pp collisions at
    sqrtS = 8 TeV.
  * Add CMS_2016_I1421646, CMS azimuthal decorrelations at 8 TeV.
  * Add CMS_2015_I1380605, per-event yield of the highest
    transverse momentum charged particle and charged-particle jet.
  * Add CMS_2015_I1370682_PARTON, a partonic-top version of the CMS
    7 TeV pseudotop ttbar differential cross-section analysis.
  * Adding EHS_1988_I265504 from Felix Riehn: charged-particle
    production in K+ p, pi+ p and pp interactions at 250 GeV/c.
  * Fix ALICE_2012_I1116147 for pi0 and Lambda feed-down.
  * Add protection against leptons from QED FSR photon conversions
    in assigning PartonicTop decay modes. Thanks to Markus Seidel
    for the report and suggested fix.
  * Reimplement FastJets methods in terms of new static helper
    functions.
  * Add new mkClusterInputs, mkJet and mkJets static methods to
    FastJets, to help with direct calls to FastJet where particle
    lookup for constituents and ghost tags are required.
  * Fix Doxygen config and Makefile target to allow working with
    out-of-source builds. Thanks to Christian Holm Christensen.
  * Improve DISLepton for HERA analyses: thanks to Andrii
    Verbytskyi for the patch!
  * Replace non-template Analysis::refData functions with C++11
    default T=Scatter2D.
  * Allow yes/no and true/false values for LogX, etc. plot options.
  * Add --errs as an alias for --mc-errs to rivet-mkhtml and
    rivet-cmphistos.
  * Added 6 analyses AMY_1990_I295160, HRS_1986_I18502,
    JADE_1983_I190818, PLUTO_1980_I154270, TASSO_1989_I277658,
    TPC_1987_I235694 for charged multiplicity in e+e- at CMS
    energies below the Z pole.
  * Added 2 analyses for charged multiplicity at the Z pole
    DELPHI_1991_I301657, OPAL_1992_I321190.
  * Updated ALEPH_1991_S2435284 to plot the average charged
    multiplicity.
  * Added analyses OPAL_2004_I631361, OPAL_2004_I631361_qq,
    OPAL_2004_I648738 for gluon jets in e+e-, most need fictitious
    e+e- &gt; g g process.
  * Add Cut and functor selection args to HeavyHadrons accessor
    methods.
  * bin/rivet-mkanalysis: Add FastJets.hh include by default --
    it's almost always used.
  * src/Analyses/CMS_2016_I1473674.cc: Patch from CMS to use
    partonic tops.
  * src/Analyses/CMS_2015_I1370682.cc: Patch to inline jet finding
    from CMS.
  * Convert DressedLeptons use of fromDecay to instead veto photons
    that match fromHadron() || fromHadronicTau() -- meaning that
    electrons and muons from leptonic taus will now be dressed.
  * Move Particle and Jet std::function aliases to .fhh files, and
    replace many uses of templates for functor arguments with
    ParticleSelector meta-types instead.
  * Move the canonical implementations of hasAncestorWith, etc. and
    isLastWith, etc. from ParticleUtils.hh into Particle.
  * Disable the event-to-event beam consistency check if the
    ignore-beams mode is active.
  * Add BoolParticleAND, BoolJetOR, etc. functor combiners to
    Tools/ParticleUtils.hh and Tools/JetUtils.hh.
  * Mark ATLAS_2016_CONF_2016_078 and CMS_2016_PAS_SUS_16_14
    analyses as validated, since their cutflows match the
    documentation.
  * Add aggregate signal regions to CMS_2016_PAS_SUS_16_14.
  * Add getEnvParam function, for neater use of environment
    variable parameters with a required default.
  * Add HasBTag and HasCTag jet functors, with lower-case aliases.
  * Use std::function in functor-expanded method signatures on
    JetAlg.
  * Convert FinalState particles() accessors to use std::function
    rather than a template arg for sorting, and add filtering
    functor support -- including a mix of filtering and sorting
    functors. Yay for C++11!
  * Add ParticleEffFilter and JetEffFilter constructors from a
    double (encoding constant efficiency).
  * Add Vector3::abseta().
- Changes from version 2.5.3:
  * Add cut in BZ calculation in OPAL 4 jet analysis. Paper is not
    clear about treatment of parallel vectors, leads to division by
    zero and nan-fill and subsequent YODA RangeError
    (OPAL_2001_S4553896).
  * Fix bugs in SmearedJets treatment of b &amp; c tagging rates.
  * Adding ATLAS_2016_I1467454 analysis (high-mass Drell-Yan at 8
    TeV).
  * Tweak to 'convert' call to improve the thumbnail quality from
    rivet-mkhtml/make-plots.
  * Require Cython 0.24 or later.
  * Adding L3_2004_I652683 (LEP 1 &amp; 2 event shapes) and
    LHCB_2014_I1262703 (Z+jet at 7 TeV).
  * Adding leading dijet mass plots to MC_JetAnalysis (and all
    derived classes). Thanks to Chris Gutschow!
  * Adding CMS_2012_I1298807 (ZZ cross-section at 8 TeV),
    CMS_2016_I1459051 (inclusive jet cross-sections at 13 TeV) and
    CMS_PAS_FSQ_12_020 (preliminary 7 TeV leading-track underlying
    event).
  * Adding CDF_2015_1388868 (ppbar underlying event at 300, 900,
    and 1960 GeV).
  * Adding ATLAS_2016_I1467230 (13 TeV min bias),
    ATLAS_2016_I1468167 (13 TeV inelastic pp cross-section), and
    ATLAS_2016_I1479760 (7 TeV pp double-parton scattering with 4
    jets).
  * Adding ALICE_2012_I1116147 (eta and pi0 pTs and ratio) and
    ATLAS_2011_I929691 (7 TeV jet frag).
  * Fix bash bugs in rivet-buildplugin, including fixing the --cmd
    mode.
  * Add LHC Run 2 BSM analyses ATLAS_2016_CONF_2016_037 (3-lepton
    and same-sign 2-lepton), ATLAS_2016_CONF_2016_054 (1-lepton +
    jets), ATLAS_2016_CONF_2016_078 (ICHEP jets + MET),
    ATLAS_2016_CONF_2016_094 (1-lepton + many jets),
    CMS_2013_I1223519 (alphaT + b-jets), and CMS_2016_PAS_SUS_16_14
    (jets + MET).
  * Provide convenience reversed-argument versions of apply and
    declare methods, to allow presentational choice of declare
    syntax in situations where the projection argument is very
    long, and reduce requirements on the user's memory since this
    is one situation in Rivet where there is no 'most natural'
    ordering choice.
  * Adding pTvec() function to 4-vectors and ParticleBase.
  * Fix --pwd option of the rivet script
  * Add weights and scaling to Cutflow/s.
  * Add Et(const ParticleBase&amp;) unbound function.
  * Fix missing YAML quote mark in rivet-mkanalysis.
  * Fix constness requirements on ifilter_select() and
    Particle/JetEffFilter::operator().
  * src/Analyses/ATLAS_2016_I1458270.cc: Fix inverted particle
    efficiency filtering.
  * Add rough ATLAS and CMS photon reco efficiency functions from
    Delphes (ATLAS and CMS versions are identical, hmmm).
  * Tidying/fixing make-plots custom z-ticks code. Thanks to Dmitry
    Kalinkin.
  * Fix SpiresID -&gt; InspireID in some analyses (show-analysis
    pointed to non-existing web page).
  * Add Luminosity_fb to AnalysisInfo.
  * Added some keywords and Lumi to ATLAS_2016_I1458270.
  * Merge the ATLAS and CMS from-Delphes electron and muon tracking
    efficiency functions into generic trkeff functions -- this is
    how it should be.
  * Fix return type typo in Jet::bTagged(FN) templated method.
  * Add eta and pT cuts to ATLAS truth b-jet definition.
  * Use rounding rather than truncation in Cutflow percentage
    efficiency printing.
  * make-plots bugfix in y-axis labels for RatioPlotMode=deviation.
  * Add vector and scalar pT (rather than Et) to MissingMomentum.
  * Analysis keyword machinery.
  * rivet -a @semileptonic.
  * rivet -a @semileptonic@^bdecays -a @semileptonic@^ddecays.
- Rebase sover.diff.
- This update actually fixes build with GCC 7 (boo#1041183).</changelog>
  <changelog author="badshah400@gmail.com" date="1504180800">- Build with HepMC2-devel, since Rivet does not compile with
  HepMC-devel &gt;= 3 yet.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521806400">- Add _constraints file to avoid OOM build failures</changelog>
  <changelog author="badshah400@gmail.com" date="1528545600">- Update to version 2.6.0:
  * Long long list of changes: see
    %{_docdir}/%{name}-devel/ChangeLog.
- Rebase sover.diff for updated version.
- Fix package groups.
- Add a plugins package containing all the different analysis
  packages:
  * Plugins are unversioned; the need to depend on the version of
    the devel package.
  * Move plugins to %{_libdir}/Rivet-plugins directory
  * Install an ld.so.conf file so that the plugins are found when
    compiling against them.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1566388800">- Update to version 2.7.2
  * Fixes to CMS_2016_I1487288 jet selection and normalisation.
  * Improve Vector3::azimuthalAngle() (also used by FourMomentum
    and FourVector) to use exact rather than fuzzy is-zero check,
    to only check the perpendicular components, and to note that
    IEEE floating point implementations of atan2 should already be
    'safe' unless we decide that this function should throw or
    return NaN in case of null or along-z vectors.
  * Tools/Utils.h: Add isum() functions, and mark other container
    functions as wanting a conversion to use std::function.
  * Add super-generic (i)discardIfAny(particlebases,
    particlebases, bool(pb,pb)) functions.
  * Introduce TTMODE options for MC_TTBAR to pick the decay mode
- Changes from versions 2.7.1 and 2.7.0: See
  %{_docdir}/%{name}-devel/ChangeLog.
- Add Rivet-fix-ambiguous-namespace.patch: Fixed Et -&gt; Kin::Et to
  avoid ambiguous namespace; patch taken from upstream commit
- YODA &gt;= 1.7.4 required for building.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578484800">- Update to version 3.1.0 (new upstream recommended version):
  * Projections/EventMixingFinalState.hh: Replace use of
    std::random_shuffle (deprecated in C++14, removed in C++17)
    with std::shuffle and direct access to our thread-safe random
    number generator.
  * Significant revisions to tau jet efficiency functions.
  * Add JET_EFF_ONE/ZERO aliases, cf. the Particle versions.
  * Give precedence to user-supplied cross-section
  * Switch required compiler dialect to C++14, to ensure that
    compiler definitely (?) supports required C++11. C++14 or 17
    is the current standard LCG build dialect.
  * Add decay angle to ARGUS_1989_I268577
  * Add polarization to OPAL_1997_S3608263
  * Fixes to headers and brefi descriptions in various analyses
  * Add CMD3_2019_I1770428 K0S K0S pi+ pi- cross section
  * Fix histogram ids in BELLE_2009_I809630
  * Add TMP to histogram labels in ARGUS_1993_S2669951
  * Formally require YODA &gt;= 1.8.0 in configure.
  * Add new ALEPH analyses
  * Fixes for pointers, booking in TASSO_1990_I284251 and
    TASSO_1982_I177174
  * Added MARKI_1976_I109792, DASP_1979_I132045 particle spectra
    at low energies
  * Added DASP_1979_I132410 eta production at low energies
  * Added BABAR_2006_I719111 particle specta in B decays
  * Added OPAL_2001_I536266 flavour separate charge particle
    multiplicites
  * Added new CLEO and CUSB analyses
  * Added new BELLE lambda polarization and ARGUS D spectra
  * Fix issues with ARGUS_1992_I319102, CLEO_2000_I537236
  * Added new DELPHI analyses
  * Added L3_1995_I381046, B*/B ratio
  * Added new OPAL analyses
  * Added new BES analyses
  * Added new CMD3 analyses
  * Added ARGUS_1988_I261672 for sigmac production
  * Added LHCB_2013_I1243156, ARGUS_1989_I280943,
    BABAR_2010_I867611 helicity angles for excited D meson decays
  * Added TPC_1991_I316132, HRS_1987_I250823 D* polarization at 29
    GeV
  * Added VENUS_1998_I453613, TOPAZ_1997_I454183 charged particles
    at 58 GeV
  * ATLAS_2011_S9128077 ensure all bins outputted in d02,
    otherwise problems with yodamerge
  * ATLAS_2015_I1393758 and ATLAS_2016_I1419070,
  * CMS_2012_I1111014, change numEntries -&gt; effNumEntries to avoid
    issues in NLO runs
  * Change ratio plot label, was wrong way up, in
  * ATLAS_2012_I1203852, ATLAS_2013_I1190187
  * Use rivet normalize not yoda in ATLAS_2018_I1711114 to avoid
    issues if histos empty
  * Avoid crash in ATLAS_2016_I1426523 if host not found
  * Add omega hist in BABAR_2017_I1621593
  * EHS_1988_I265504 fix rapidity calc so in CMS not lab
  * A2_2017_I1486671 fix omega PDG number
  * Re-enable custom Particles and Jets vectors, with moms() and
    other conversion functions.
  * Add default ANY decay mode to TauFinder.
  * Pass HepMC3 path info through to the rivet-config script.
  * Refine testing and printing of UNVALIDATED status in analysis
    listing.
  * Add INF to the list of predefined constants, and rename the
    internal constants header.
  * Improve normalization guidance and fix energy specification in
    mkanalysis .info file template.
- Changes from version 3.0.0 through 3.0.2: See
  https://gitlab.com/hepcedar/rivet/blob/release-3-0-x/ChangeLog.
- Switch to python3:
  * Requires and BuildRequires switched to python3 versions
  * Rename python package to python3-%{name} and provide
    python-%{name} from it; this makes the py3 switch clear to
    users.
  * Explicitly pass PYTHON_VERSION as py3 version to make it build
    against python3
- Build against HepMC3 instead of HepMC2:
  * Adapt BuildRequires for HepMC3.
  * Pass HepMC3 specific parameters to configure.
  * Add Rivet-plugins-use-HepMC3.patch: Port an analysis plugin to
    HepMC3 from HepMC2
- Refresh sover.diff for updated version.
- Drop Rivet-fix-ambiguous-namespace.patch: incorporated upstream
- New BuildRequires: rsync, fastjet-contrib-devel
- Update required version of YODA-devel to 1.8.0.
- Drop conditionals for outdated openSUSE versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1579262400">- Add Obsoletes: python-Rivet to python3-Rivet to help migration.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587643200">- Fix python version in hashbangs. #!%{_bindir}/python introduces
  wrong for python3 package dependency on python-base.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1589630400">- Update to version 3.1.1: Long list of changes, see ChangeLog
  file installed in /usr/share/doc/packages/Rivet-devel.
- Drop Rivet-plugins-use-HepMC3.patch: fixed upstream.
- Install COPYING file for all subpkgs.
- Use properly versioned Provides and Obsoletes for python
  subpackage.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 3.1.2:
  * Submission of ATLAS_2019_I1744201, ATLAS_2019_I1764342.
  * Add a very horrible preprocessor hack to allow use of a
    private method on the HepMC2 WeightContainer, for robust and
    correctly ordered weight name acquisition before HepMC
    2.06.11.
  * Allow several AnalysisHandler objects to run in different
    threads. This is a temporary fix. A permanent fix involves
    changing the Analysis handler to own its own projections.
    Currently each AnalysisHandler need sto be created and run
    completely within the same separate thread.
  * Allow + and - in AO paths.
  * Always skip weights that have "AUX" or "DEBUG" in the name.
  * Add computation of Python versions and passing them to Cython
    as command-line flags.
  * Fix small bug in rivet-cmphistos.
  * Add ATLAS_2018_I163527 (W+jets at 8 TeV).
  * Add InvisibleFinalState projection.
  * HTML sectioning and float/overflow/scrollbar improvements in
    rivet-mkhtml output.</changelog>
</package>
<package pkgid="667d0c962df43f9f4f3d3a0aeb8dabe675464aae88164c7cdcbb13b9e1193096" name="SDL" arch="src">
  <version epoch="0" ver="1.2.15" rel="lp152.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- USe OS byteswapping macros that are optimized for all platforms
  directly by GCC.
  - DO not use dlopen to load libraries that otherwise can be linked
  at build-time, this is a _very_ bad idea, starting with the fact
  that rpm dependencies do not take account of dlopen and will
  break profiling/debugging etc..
- SDL-devel now has strict requires, so it will only pull what
  it really requires, as it no longer requires metapackages, it is
  very likely that some packages dont the chain will fail to build
  those must be fixed in the respective spec files (not here)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370692800">- sdl-lfs.patch: Ensure library is built with large file
  support/ 64bit off_t in 32bit systems</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call
- Optional signature verification in local builds</changelog>
  <changelog author="jengelh@inai.de" date="1387281600">- Add libsdl-1.2.15-resizing.patch: resolve an issue whereby window
  frame corner resizing emitted no resize events to applications
  (bnc#855639)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401019200">-  Update SDL-lfs.patch, after a recent verification I found
  that something is not including SDL_config.h (config.h)
  therefore not using large file offsets.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413115200">- Drop esound-devel BuildRequires: esd is really no longer the way
  to go.</changelog>
  <changelog author="jengelh@inai.de" date="1418904000">- Remove gpg-offline leftovers</changelog>
  <changelog author="jengelh@inai.de" date="1418990400">- Drop old soundserver support (also arts, after esound).
  Remove --with-pic, building defaults to PIC anyway.
  Use pkgconfig names to slurp in packages.</changelog>
  <changelog author="jengelh@inai.de" date="1420545600">- Avoid bs_sched computation failure by expanding %power64</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- libspe2 only exists for ppc and ppc64</changelog>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="375f468a5628dc619395822a623263e2b0b417b9b2233f26f8ea8cdc6871ac34" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.28" rel="lp152.2.3.1"/>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
</package>
<package pkgid="99d78e5ce87132c1c8de6d2534d47f1d0a0702afa475fc1b65cd410c3e6361ed" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="lp152.2.3.1"/>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
</package>
<package pkgid="142122525c607258e4e667ecc4f6284afbf675933d3458bea44835805548c4bc" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.29" rel="lp152.2.6.1"/>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="Tamara Schmitz &lt;tamara.schmitz@suse.com&gt;" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
</package>
<package pkgid="6ef90b65789e4676de9245648a14e687153745d0d5043c3ac23e4edacbe84ce5" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.29" rel="lp152.2.6.1"/>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="Tamara Schmitz &lt;tamara.schmitz@suse.com&gt;" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
</package>
<package pkgid="7fcbc87b42a3d3530cdd56f82b5dce8535042c1dcdfb2ee1adcb8e18e9bfe812" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.31" rel="lp152.2.9.1"/>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="Tamara Schmitz &lt;tamara.schmitz@suse.com&gt;" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1624190400">- Update to 0.3.30
- send payload of GET requests as part of the url,
  not in the body (see bsc#1185611)</changelog>
  <changelog author="Natnael Getahun &lt;ngetahun@suse.com&gt;" date="1626868800">- Update to 0.3.31
- Disallow registering via SUSEConnect if the system is managed by SUSE Manager.
- Add subscription name to output of 'SUSEConnect --status'</changelog>
</package>
<package pkgid="ec9f53720fd97a6252741c11caacc9ba1430b219fa0b0b9d30ac1065d381a5c6" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.31" rel="lp152.2.9.1"/>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="Tamara Schmitz &lt;tamara.schmitz@suse.com&gt;" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1624190400">- Update to 0.3.30
- send payload of GET requests as part of the url,
  not in the body (see bsc#1185611)</changelog>
  <changelog author="Natnael Getahun &lt;ngetahun@suse.com&gt;" date="1626868800">- Update to 0.3.31
- Disallow registering via SUSEConnect if the system is managed by SUSE Manager.
- Add subscription name to output of 'SUSEConnect --status'</changelog>
</package>
<package pkgid="b897b435379d2443fe2739f824df327aa9a2897aeadfe1f1a4ae1b224415adfe" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.32" rel="lp152.2.12.1"/>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="Tamara Schmitz &lt;tamara.schmitz@suse.com&gt;" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1624190400">- Update to 0.3.30
- send payload of GET requests as part of the url,
  not in the body (see bsc#1185611)</changelog>
  <changelog author="Natnael Getahun &lt;ngetahun@suse.com&gt;" date="1626868800">- Update to 0.3.31
- Disallow registering via SUSEConnect if the system is managed by SUSE Manager.
- Add subscription name to output of 'SUSEConnect --status'</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1635336000">- Update to 0.3.32
- Allow --regcode and --instance-data attributes at the same time (jsc#PCT-164)
- Document that 'debug' can also get set in the config file
- --status will also print the subscription name</changelog>
</package>
<package pkgid="716078293a672f43fc2ba750ca2064633006281ad418bd34ba0b542b67337bb7" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.32" rel="lp152.2.12.1"/>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="Thomas Muntaner &lt;tmuntaner@suse.com&gt;" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="Tamara Schmitz &lt;tamara.schmitz@suse.com&gt;" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1624190400">- Update to 0.3.30
- send payload of GET requests as part of the url,
  not in the body (see bsc#1185611)</changelog>
  <changelog author="Natnael Getahun &lt;ngetahun@suse.com&gt;" date="1626868800">- Update to 0.3.31
- Disallow registering via SUSEConnect if the system is managed by SUSE Manager.
- Add subscription name to output of 'SUSEConnect --status'</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1635336000">- Update to 0.3.32
- Allow --regcode and --instance-data attributes at the same time (jsc#PCT-164)
- Document that 'debug' can also get set in the config file
- --status will also print the subscription name</changelog>
</package>
<package pkgid="f0fd451d69095a029206c553bb183b59aa4689cf75ac4d80f0f0f4c8d23870df" name="ServiceReport" arch="noarch">
  <version epoch="0" ver="2.2.2+git10.1caca0630e36" rel="lp152.5.1"/>
  <changelog author="Sourabh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1573819200">Version 2.2.1
- First Open source release
- Initial Commit of Open Source release</changelog>
  <changelog author="Sourabh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1589457600">Update to version 2.2.2
- Update crashkernel memory reservation limit
- Remove rpm postscript
- Add servicereport.spec file
- Move systemd service file to a generic location
- Run service only once at boot time without repair action
- fix initrd repair function
- [fadump] No boolean return from check_* function
- [fadump] indent the code with spaces instead of tabs
- Fix the option_string for --plugin option
- [fadump] update the logic to extract the FADump mem reservation
- Add irqbalance daemon check
- Add irqbalance package check
- Fix the system platform string extraction from /proc/cpuinfo
- Fix powerpc-ibm-utils package name
- Fix typo in README.md</changelog>
  <changelog author="Sourbh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1589716800">- Move setup.cfg metadata to setup.py file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1599048000">- Run throuhg spec-cleaner and split off changelog.
- Fix license and dependencies
- Re-download the source</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1604404800">- Update to upstream git (jsc#SLE-13288).
  + 0001-Add-active-dump-check-in-kdump-and-FADump-plugin.patch
  + 0002-Introduce-a-new-option-to-mark-plugins-optional.patch
  + 0003-HTX-Mark-HTX-plugin-as-optional.patch
  + 0004-Add-new-option-to-run-all-applicable-plugins.patch
  + 0005-Allow-distro-classes-to-redefine-the-capture-kernel-.patch
  + 0006-utils-remove-the-invalid-function-call-to-walk_packa.patch
  + 0007-Update-data-files-of-the-project.patch
  + 0008-Run-servicereport-using-python3-binary.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1612353600">- Update to version 2.2.2+git10.1caca0630e36 (bsc#1181729 ltc#191203):
  * Update SLES crashkernel recommendation values
  * update HTX service name
- Remove the already included patches
  - 0001-Add-active-dump-check-in-kdump-and-FADump-plugin.patch
  - 0002-Introduce-a-new-option-to-mark-plugins-optional.patch
  - 0003-HTX-Mark-HTX-plugin-as-optional.patch
  - 0004-Add-new-option-to-run-all-applicable-plugins.patch
  - 0005-Allow-distro-classes-to-redefine-the-capture-kernel-.patch
  - 0006-utils-remove-the-invalid-function-call-to-walk_packa.patch
  - 0007-Update-data-files-of-the-project.patch
  - 0008-Run-servicereport-using-python3-binary.patch</changelog>
</package>
<package pkgid="335805d3650567aa085995c2866fc6ebe8b2c4198cd75ea1c44abc62f1e5bbfc" name="ServiceReport" arch="src">
  <version epoch="0" ver="2.2.2+git10.1caca0630e36" rel="lp152.5.1"/>
  <changelog author="Sourabh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1573819200">Version 2.2.1
- First Open source release
- Initial Commit of Open Source release</changelog>
  <changelog author="Sourabh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1589457600">Update to version 2.2.2
- Update crashkernel memory reservation limit
- Remove rpm postscript
- Add servicereport.spec file
- Move systemd service file to a generic location
- Run service only once at boot time without repair action
- fix initrd repair function
- [fadump] No boolean return from check_* function
- [fadump] indent the code with spaces instead of tabs
- Fix the option_string for --plugin option
- [fadump] update the logic to extract the FADump mem reservation
- Add irqbalance daemon check
- Add irqbalance package check
- Fix the system platform string extraction from /proc/cpuinfo
- Fix powerpc-ibm-utils package name
- Fix typo in README.md</changelog>
  <changelog author="Sourbh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1589716800">- Move setup.cfg metadata to setup.py file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1599048000">- Run throuhg spec-cleaner and split off changelog.
- Fix license and dependencies
- Re-download the source</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1604404800">- Update to upstream git (jsc#SLE-13288).
  + 0001-Add-active-dump-check-in-kdump-and-FADump-plugin.patch
  + 0002-Introduce-a-new-option-to-mark-plugins-optional.patch
  + 0003-HTX-Mark-HTX-plugin-as-optional.patch
  + 0004-Add-new-option-to-run-all-applicable-plugins.patch
  + 0005-Allow-distro-classes-to-redefine-the-capture-kernel-.patch
  + 0006-utils-remove-the-invalid-function-call-to-walk_packa.patch
  + 0007-Update-data-files-of-the-project.patch
  + 0008-Run-servicereport-using-python3-binary.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1612353600">- Update to version 2.2.2+git10.1caca0630e36 (bsc#1181729 ltc#191203):
  * Update SLES crashkernel recommendation values
  * update HTX service name
- Remove the already included patches
  - 0001-Add-active-dump-check-in-kdump-and-FADump-plugin.patch
  - 0002-Introduce-a-new-option-to-mark-plugins-optional.patch
  - 0003-HTX-Mark-HTX-plugin-as-optional.patch
  - 0004-Add-new-option-to-run-all-applicable-plugins.patch
  - 0005-Allow-distro-classes-to-redefine-the-capture-kernel-.patch
  - 0006-utils-remove-the-invalid-function-call-to-walk_packa.patch
  - 0007-Update-data-files-of-the-project.patch
  - 0008-Run-servicereport-using-python3-binary.patch</changelog>
</package>
<package pkgid="4ee9af99ec51f563a1c3ca112fb76b66432dfe657d2ac01d4c2bc46eff7f5aa7" name="ServiceReport" arch="noarch">
  <version epoch="0" ver="2.2.2" rel="lp152.2.1"/>
  <changelog author="Sourabh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1573819200">Version 2.2.1
- First Open source release
- Initial Commit of Open Source release</changelog>
  <changelog author="Sourabh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1589457600">Update to version 2.2.2
- Update crashkernel memory reservation limit
- Remove rpm postscript
- Add servicereport.spec file
- Move systemd service file to a generic location
- Run service only once at boot time without repair action
- fix initrd repair function
- [fadump] No boolean return from check_* function
- [fadump] indent the code with spaces instead of tabs
- Fix the option_string for --plugin option
- [fadump] update the logic to extract the FADump mem reservation
- Add irqbalance daemon check
- Add irqbalance package check
- Fix the system platform string extraction from /proc/cpuinfo
- Fix powerpc-ibm-utils package name
- Fix typo in README.md</changelog>
  <changelog author="Sourbh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1589716800">- Move setup.cfg metadata to setup.py file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1599048000">- Run throuhg spec-cleaner and split off changelog.
- Fix license and dependencies
- Re-download the source</changelog>
</package>
<package pkgid="4a79cbe792bf8a3ab2dbf2244c3822cc0b5bba604908903dc4f10bfddc1eeb3e" name="ServiceReport" arch="src">
  <version epoch="0" ver="2.2.2" rel="lp152.2.1"/>
  <changelog author="Sourabh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1573819200">Version 2.2.1
- First Open source release
- Initial Commit of Open Source release</changelog>
  <changelog author="Sourabh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1589457600">Update to version 2.2.2
- Update crashkernel memory reservation limit
- Remove rpm postscript
- Add servicereport.spec file
- Move systemd service file to a generic location
- Run service only once at boot time without repair action
- fix initrd repair function
- [fadump] No boolean return from check_* function
- [fadump] indent the code with spaces instead of tabs
- Fix the option_string for --plugin option
- [fadump] update the logic to extract the FADump mem reservation
- Add irqbalance daemon check
- Add irqbalance package check
- Fix the system platform string extraction from /proc/cpuinfo
- Fix powerpc-ibm-utils package name
- Fix typo in README.md</changelog>
  <changelog author="Sourbh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1589716800">- Move setup.cfg metadata to setup.py file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1599048000">- Run throuhg spec-cleaner and split off changelog.
- Fix license and dependencies
- Re-download the source</changelog>
</package>
<package pkgid="0906a67ceb0b10c719800bcee22b9387c034df7e870bf43c9e3028294e32c496" name="ServiceReport" arch="noarch">
  <version epoch="0" ver="2.2.3+git1.55a13db1c256" rel="lp152.8.1"/>
  <changelog author="Sourabh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1573819200">Version 2.2.1
- First Open source release
- Initial Commit of Open Source release</changelog>
  <changelog author="Sourabh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1589457600">Update to version 2.2.2
- Update crashkernel memory reservation limit
- Remove rpm postscript
- Add servicereport.spec file
- Move systemd service file to a generic location
- Run service only once at boot time without repair action
- fix initrd repair function
- [fadump] No boolean return from check_* function
- [fadump] indent the code with spaces instead of tabs
- Fix the option_string for --plugin option
- [fadump] update the logic to extract the FADump mem reservation
- Add irqbalance daemon check
- Add irqbalance package check
- Fix the system platform string extraction from /proc/cpuinfo
- Fix powerpc-ibm-utils package name
- Fix typo in README.md</changelog>
  <changelog author="Sourbh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1589716800">- Move setup.cfg metadata to setup.py file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1599048000">- Run throuhg spec-cleaner and split off changelog.
- Fix license and dependencies
- Re-download the source</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1604404800">- Update to upstream git (jsc#SLE-13288).
  + 0001-Add-active-dump-check-in-kdump-and-FADump-plugin.patch
  + 0002-Introduce-a-new-option-to-mark-plugins-optional.patch
  + 0003-HTX-Mark-HTX-plugin-as-optional.patch
  + 0004-Add-new-option-to-run-all-applicable-plugins.patch
  + 0005-Allow-distro-classes-to-redefine-the-capture-kernel-.patch
  + 0006-utils-remove-the-invalid-function-call-to-walk_packa.patch
  + 0007-Update-data-files-of-the-project.patch
  + 0008-Run-servicereport-using-python3-binary.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1612353600">- Update to version 2.2.2+git10.1caca0630e36 (bsc#1181729 ltc#191203):
  * Update SLES crashkernel recommendation values
  * update HTX service name
- Remove the already included patches
  - 0001-Add-active-dump-check-in-kdump-and-FADump-plugin.patch
  - 0002-Introduce-a-new-option-to-mark-plugins-optional.patch
  - 0003-HTX-Mark-HTX-plugin-as-optional.patch
  - 0004-Add-new-option-to-run-all-applicable-plugins.patch
  - 0005-Allow-distro-classes-to-redefine-the-capture-kernel-.patch
  - 0006-utils-remove-the-invalid-function-call-to-walk_packa.patch
  - 0007-Update-data-files-of-the-project.patch
  - 0008-Run-servicereport-using-python3-binary.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1626350400">- Update to version 2.2.3 (jsc#SLE-18193):
  * ServiceReport v2.2.3 release
  * [Daemon] check active status along with enabled
  * Run-on supported architectures only
  * Take crashkernel recommendation from kdump-lib.sh scripts</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1627387200">- Added hardening to systemd service(s). Added harden_servicereport.service.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1632484800">- Update to version 2.2.3+git1.55a13db1c256:
  * [fadump] Update crashkernel recommendation (tid#7023277).</changelog>
</package>
<package pkgid="127d915c5465962ca046072e81c75aa3402bd87818b0f26b129422004dce72d9" name="ServiceReport" arch="src">
  <version epoch="0" ver="2.2.3+git1.55a13db1c256" rel="lp152.8.1"/>
  <changelog author="Sourabh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1573819200">Version 2.2.1
- First Open source release
- Initial Commit of Open Source release</changelog>
  <changelog author="Sourabh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1589457600">Update to version 2.2.2
- Update crashkernel memory reservation limit
- Remove rpm postscript
- Add servicereport.spec file
- Move systemd service file to a generic location
- Run service only once at boot time without repair action
- fix initrd repair function
- [fadump] No boolean return from check_* function
- [fadump] indent the code with spaces instead of tabs
- Fix the option_string for --plugin option
- [fadump] update the logic to extract the FADump mem reservation
- Add irqbalance daemon check
- Add irqbalance package check
- Fix the system platform string extraction from /proc/cpuinfo
- Fix powerpc-ibm-utils package name
- Fix typo in README.md</changelog>
  <changelog author="Sourbh Jain &lt;sourabhjain@linux.ibm.com&gt;" date="1589716800">- Move setup.cfg metadata to setup.py file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1599048000">- Run throuhg spec-cleaner and split off changelog.
- Fix license and dependencies
- Re-download the source</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1604404800">- Update to upstream git (jsc#SLE-13288).
  + 0001-Add-active-dump-check-in-kdump-and-FADump-plugin.patch
  + 0002-Introduce-a-new-option-to-mark-plugins-optional.patch
  + 0003-HTX-Mark-HTX-plugin-as-optional.patch
  + 0004-Add-new-option-to-run-all-applicable-plugins.patch
  + 0005-Allow-distro-classes-to-redefine-the-capture-kernel-.patch
  + 0006-utils-remove-the-invalid-function-call-to-walk_packa.patch
  + 0007-Update-data-files-of-the-project.patch
  + 0008-Run-servicereport-using-python3-binary.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1612353600">- Update to version 2.2.2+git10.1caca0630e36 (bsc#1181729 ltc#191203):
  * Update SLES crashkernel recommendation values
  * update HTX service name
- Remove the already included patches
  - 0001-Add-active-dump-check-in-kdump-and-FADump-plugin.patch
  - 0002-Introduce-a-new-option-to-mark-plugins-optional.patch
  - 0003-HTX-Mark-HTX-plugin-as-optional.patch
  - 0004-Add-new-option-to-run-all-applicable-plugins.patch
  - 0005-Allow-distro-classes-to-redefine-the-capture-kernel-.patch
  - 0006-utils-remove-the-invalid-function-call-to-walk_packa.patch
  - 0007-Update-data-files-of-the-project.patch
  - 0008-Run-servicereport-using-python3-binary.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1626350400">- Update to version 2.2.3 (jsc#SLE-18193):
  * ServiceReport v2.2.3 release
  * [Daemon] check active status along with enabled
  * Run-on supported architectures only
  * Take crashkernel recommendation from kdump-lib.sh scripts</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1627387200">- Added hardening to systemd service(s). Added harden_servicereport.service.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1632484800">- Update to version 2.2.3+git1.55a13db1c256:
  * [fadump] Update crashkernel recommendation (tid#7023277).</changelog>
</package>
<package pkgid="df3edeba6bc20db1e9030c32760678f8bc7650a408eb07df4e66a521286118f2" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.10.1"/>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
</package>
<package pkgid="8d35b5afbedb1ef3909d71a13990644ada3a16f39303889dd2a3c93a9b5af2b0" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.10.1"/>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
</package>
<package pkgid="98243755da4584e8c17c6411dde0270562b916dee026af4b9a35d3a5f9e21836" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.10.1"/>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
</package>
<package pkgid="8c26673668eaaf78423bcfc0eb3dc8619558eaffc160ccbd0658a3a4e347939c" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="0d309dbc6385c6a402d544d86d55d21c04990cd29a0272b680a634b87679d70d" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="63ff047c0978f727aa824dc5ca7cafb61b3ee4c62896ff95e09c740d45121651" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="82fe1c3be48329dc699eb9a99be91469afae39281d9cd17f4149e6cb51750cb3" name="aaa_base" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="18b2da5c499832b5e90fd651bdfd37b3cbffff3bb390190e88a3bf35ae0a2d35" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="813dd75b61e065b2f1f5e3599c723570e49b667cc64ecc7d7acc007ea7538113" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="fca8b9ac3cb1666429d9bba20c2ad6bba27ec5a4835859bb02218b5230959324" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.10.1"/>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
</package>
<package pkgid="f4bee70d514e056d94cc29b26234549057326ef0d7b5d0d0e12159f36af1c72d" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.10.1"/>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
</package>
<package pkgid="c87b0c086bb6ec720714f8648b18cc081d45bc6e4ba1c3e2a54cd1eacab49321" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="a7b202f91569f2a3296ca5e499d05456a398c952a3c6a762167edee1408faa04" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="a5457e78e316ebae36e68b489361d118a0f20a1c62bc860cb953d45b46737e98" name="aaa_base-extras" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="604714886b62ffc8c91225994ae27f4464977fdec8f16691448b946d1014d26e" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="cb9646358f2550215d6439dbe68cc9e7cd664b65ab0088d3eddc74016be97f27" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.10.1"/>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
</package>
<package pkgid="797bab71108d02a81c888abdfdb19ec83def9ffac618803f207228e3a3a8ac64" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.10.1"/>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
</package>
<package pkgid="9fbb89bc933d947c6f5467953867b81047504ac13b77afdb405274d6ec06eeec" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="d8ff4d94b39ccc4be8f5631a60c39a71c39a815ac7c559137d2b192f20761619" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="f14fd1b38ddc9182e848c721e2aaf9af07e9f3fcc031f5e0756bf6a88b899f98" name="aaa_base-malloccheck" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="45f4356e5e799324edcfdc0b5c10f631e8295b55543b7af9f22c72cf84f376f8" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="21526c8b740b788c5359d4a79cd824ce0842deda728ac2eb303a519b20a97b2b" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.10.1"/>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
</package>
<package pkgid="0e7f3a60a34829165d943d92f1f092b5fd0ee89b4edf4753d7abe99c49836531" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.10.1"/>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="Witek Bedyk &lt;witold.bedyk@suse.com&gt;" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
</package>
<package pkgid="ff2a0e96fb81f85f64fbbb091fa2a8bdbfbb43dbd242690aaefe6723813f02b4" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="75e025b051e566762389e8e105c88608e7dd6d0e211854e9b36d0060e82523eb" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="202ae33d2112cfb8f43be380d7c5add8f0857f20466cdce337a35dfee6c28c32" name="aaa_base-wsl" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="7b4bd22ec8018a296c49d94b3b1e922bff2ce3022e285b7393732156ab448f11" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="61b194ffbd9a9fec1a8b635613e56f98b9cd8fdf20050fc30b636f4d9aa3ae37" name="abcde" arch="noarch">
  <version epoch="0" ver="2.9.3" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 2.6
  + Fix finding $CDROM on OS X. Closes issue 71.
  + USEID3 and USEID3V2 variables are unused now, so remove them.
    Closes issue 73.
  + Clean up movement to eyeD3, remove id3v2 remnants. Closes issue 74.
  + Fix infinite loop if cddb fails. Closes: #687038 in Debian
  + Switch from Musepack SV7 to SV8.
  + Allow aac encoding with neroAacEnc. Closes issue 8.
  + Allow opus encoding with opusenc. Closes issue 70.
  + Fix typo: s/CUEWAVEFILE/CUEWAVFILE/ so that abcde.mkcue should now
    produce working cue files. Closes issue 78.
  + Remove no-op -q option. Closes issue 106.
  + Fix issue 112: perl encoding pragma deprecation.
  + Fix option parsing for multiple output formats. Closes issue 115.
  + Fix eyeD3 tagging for cddb entries without year. Closes issue 107
  + Add mention of CD-TEXT support in the man page. Closes issue 102.
  + Make Y/N prompting more consistent. Closes issue 95
  + Remove the no-op -B option. Closes: #426531 in Debian
  + Document the need to escape parentheses in tag comments.
    Closes: #256941 in Debian.
  + Concatenate option steps on -t/-T option. Closes: #391294 in Debian
  + Try to use bsd-mailx where possible to force UTF-8 for cddb-tool mail
    submissions. If not possible, attempt to force UTF-8 via the
    environment and fall back to mail instead. Closes: #756289 in Debian,
    issue 111.
- Make cd-discid live in it's own package
- Update Urls and dowload sources
- Refresh the old abcde_2.3.99.6-quote.patch to abcde_2.6-quote.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1422100800">- re-add man pages, last update accidentally removed them</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 2.7.1
  * Rebuild of the abcde Makefile.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=4
  * Fix incorrect use of 'break'.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=6
  * Make older versions of id3 happy when 'Genre' field is empty.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=8
  * Add YEAR and GENRE variables to do_getalbumart().
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=9
  * Support added for encoding to True Audio using tta while still
    supporting the older ttaenc. Tagging is with mid3v2.
  * Support added for encoding to MPEG-1 Audio Layer II (mp2)
    with either twolame or FFmpeg / avconv. Tagging with mid3v2.
  * Encoding to WavPack with FFmpeg. Some slight changes to WavPack
    syntax with backward compatibility built in for abcde 2.7.
  * Encoding to m4a container with FFmpeg or avconv. This allows
    for alac encoding with FFmpeg's reverse engineered alac encoder.
  * AAC encoding with fhgaacenc via Wine. Tagging is provided
    by AtomicParsley which has been added back to abcde :). This
    allows encoding with HE-AAC v2, unavailable with qaac.
  * Support added for AAC encoding with qaac via Wine. This
    also allows for Apple Lossless Audio Coding (alac) using
    either qaac or refalac. This closes Issue 142.
  * Grab year information too when using musicbrainz.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=10
- Changes from version 2.7
  * Rewrite of abcde's mungefilename function.
    This closes Issues 72 and 135.
  * TRACKTOTAL now written to flac and ogg files.
    This resolves Issue 76.
  * Support added for the downloading of album art.
    Detailed documentation added to the abcde FAQ document
    although the sane defaults in place will guarantee a good
    experience even for those who do not read documentation!
    This closes Issue 33.
  * Support added for ripping with the GNU Compact Disc
    Input and Control library (libcdio) as requested by
    both gentoo and NixOS. The utility used is cd-paranoia
    and can best be called from a conf file as follows:
    CDROMREADERSYNTAX=libcdio
    CD_PARANOIA=cd-paranoia
    CDPARANOIAOPTS="--never-skip=40 --verbose"
    with the CD_PARANOIA variable giving the correct path
    to cd-paranoia.
  * Fix for encoding with bladeenc and usepipes.
  * Fix for broken ripping with dagrab. Closes Issue 140.
  * Fix for diskutil selecting wrong disk on OS X.
    closes Issue 139.
  * Added some error checking and documentation for
    the abcde-musicbrainz-tool. Closes issue 138.
  * New variables for m4a/aac encoding options to be
    manipulated in a users ~/.abcde.conf file:
    1. FAACENCOPTS for faac encoding options
    2. NEROAACENCOPTS for neroAacEnc options
    3. FDKAACENCOPTS for fdkaacenc options
    Note that these options replace the now obsolete AACENCOPTS.
  * Check added for neroAacTag when encoding with neroAacEnc.
  * Several additions to usepipes with the following encoders
    being added:
    1. mp3enc: mp3
    2. speexenc: Speex
    3. mpcenc: Musepack SV8
    4. wavpack: WavPack
    5. faac: aac
    6. neroAacEnc: aac
    7. fdkaac: aac
    The cd ripper cdda2wav (icedax) has also been added.
  * Ripping and encoding with 'usepipes' fixed. This fix
    closes Issue 46.
  * Suggested encoding options for mp3enc added to the sample
    abcde.conf. Last release of mp3enc in 1998 but it still
    works flawlessly with a modern abcde!
  * Suggested encoding options for l3enc added to the sample
    abcde.conf. Congratulations to abcde which in 2015 still
    works with l3enc which saw its final release in 1997!
  * Fix for -o option use with options and multiple outputs.
    This allows for commandline options such as the following:
    abcde -o 'flac:-8,mp3:-b 320'
    This closes Issue 136.
  * Support added for ReplayGain with WavPack encoding.
  * Fix for MusePack to allow the use of the SV8 ReplayGain
    application 'mpcgain'.
  * Monkey's Audio (ape) encoding added. Tagging is with
    Robert Muth's apetag.
  * Simplify Opus tagging.This closes Issue 133.
  * Allow 'clean' when OUTPUTTYPE=wav, broken for some time.
    This closes Issue 94.
  * Clarification that CDDBLOCALRECURSIVE=y is required for
    local CDDB search. This partially resolves Issue 121.
  * AtomicParsley removed from debian/control, WavPack added.
  * Details of abcde's handling of faac compiled with and
    without mp4v2 added as a new entry to FAQs.
  * Fix to allow display of the 'date' meta tag generated
    by eyeD3 in vlc, Audacious and friends.
    This closes Issue 126.
  * Fix for flac floating point error. closes Issue 113.
  * Formalised 3 methods of mp3 tagging using ID3TAGV:
    1.id3v2.4 using eyeD3 (set in abcde as the default)
    2.id3v2.3 using id3v2
    3.id3v1 using id3
    Fixes issue 101.
  * Support for WavPack added. Closes issue 123.
  * Fix for mp3 encoding with different versions of eyeD3.
  * Major AAC encoding cleanup, including addition of the fdkaac encoder.
- Update patch abcde_2.6-quote.patch &gt; abcde-quote.patch</changelog>
  <changelog author="adrian@suse.de" date="1451908800">- add recommends to eyeD3, abcde is using it by default since 2.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1461585600">- Update to version 2.7.2
  * When using musicbrainz, don't assume that there will be release
    events attached to a particular CD release. Bug fix for the addition
    of year information support in 2.7.1.
  * Support for output to the Matroska container (mka). Encoder
    is FFmpeg (or avconv). Typical conf file syntax would be:
    MKAENCODERSYNTAX=ffmpeg
    FFMPEG=ffmpeg
    FFMPEGENCOPTS="-c:a ac3 -b:a 448k"
    OUTPUTTYPE="mka"
  * Add id3tag mp3 tagger as this is the tagger available to
    OpenBSD users.
  * Allow for cddb response 500. This closes Issue 26:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=26
  * Fix for 'expansion of $REDIR' bug on MacOSX. This closes Issue 22:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=22
  * Makefile adjusted to allow the sample abcde.conf file to be
    installed by default to /etc rather than $(prefix)/etc.
    https://bugs.archlinux.org/task/46671
  * Allow getalbumart to correctly place cover image when single
    track is selected. This closes Issue 25:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=25
- Update abcde-quote.patch
- Set BuildArch as noarch; the package doesn't contain any binary</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to version 2.8.1
  * Fix silly error introduced in abcde-musicbrainz-tool when
    fixing bug 30. Thanks to Thomas Klausner for the bug/patch.
    Closes Issue 52:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=52
  version 2.8:
  * Make fdkaac the default for m4a encoding. Faac can still be
    selected for m4a encding via ~/.abcde.conf file but best not
    to :).
  * Split user-definable mungefilename function into
    mungetrackname, mungeartistname, and mungealbumname, each of
    which default to mungefilename Thanks to Gerald Turner for the
    patch and enhancement request. This closes Issue 39:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=39
  * FAQs: Clarify the exit from multi-result CDDB search.
  * Fix to allow multiple output formats when aac fallback is
    triggered. Thanks to Birk Bremer for the bug report.
    This closes Issue 35:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=35
  * Fix for some erroneous error and status logging. Thanks to
    Christian Wasem for the bug report and fix. This closes Issue
    32: https://abcde.einval.com/bugzilla/show_bug.cgi?id=32
  * Add support for trying multiple CD lookup services in
    order. Thanks to Gabriel Rosenkoetter for the patch. Closes
    Issue 42: https://abcde.einval.com/bugzilla/show_bug.cgi?id=42
  * Add Recommends on glyrc and imagemagick in Debian
    packaging. Closes Debian Bug #827626
  * Fix up handling of the first few sectors when reading
    from a whole-CD flac file or using cdparanoia in one-track
    mode. Thanks to Matthias König for the patch. Closes Issue
    44: https://abcde.einval.com/bugzilla/show_bug.cgi?id=44
  * Tweak the fix in musicbrainz for handling sketchy returned
    data some more. Hopefully closes Issue 30:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=30
  * Re-enable some commented out cdparanoia/debug code in
    do_discid. Closes Issue 14:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=14
  * Add "-a" to lots of grep calls in case of "binary" looking
    data, e.g. non-ascii text in track titles!
    Closes Issue 24:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=24
  * Add "-L" to default curl options, to follow redirects if
    needed. Closes Issue 40:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=40
    Thanks to Gabriel Rosenkoetter for the patch.
  * Switch default from "cddb" to "musicbrainz" for track lookup
    Closes Debian Bug #842178</changelog>
  <changelog author="rpm@fthiessen.de" date="1533729600">- Added use-cddbmethod.patch needed as factory does not provide
  perl(MusicBrainz::DiscID)
- Added fix-makefile-version-2.9.2.patch
- Added keyring for verification
- Update to 2.9.2:
  * Fix up lookup code to deal with spaces etc. in directory names
  * Cope with "stub" releases in Musicbrainz
  * Always call glyrc with LC_ALL=C. Thanks to Andreas Vögele for the
  report and the suggested fix.
  * Add a link to the CDDB data format in the abcde man page.
  * More fixups of track number padding. Thanks to John Straw for the
  patch.
  * Allow for embedding of  album art downloaded by the getalbumart
  function. Currently this is available for flac (using metaflac),
  mp3 (using eyed3), m4a (using AtomicParsley) and
  WavPack aka wv (using wvtag).
  * Use md5 rather than md5sum under macOS.
  * Support added for encoding with
  Audio Interchange File Format (AIFF).
  * Allow selection of either cddb or musicbrainz from the command line
  * Allow for embedding with do_embedalbumart() for single track
  encodes when OUTPUTFORMAT and ONETRACKOUTPUTFORMAT are different.
  * Experimental support for embedding albumart with ogg files.
  * Massive rework of CD lookup code so support multiple sources
  better. Thanks to Gabriel Rosenkoetter for his initial idea in this
  area, and to Tomasz Goli?ski on irc for initial inspiration on how
  this should work better.
  There are now 3 different options for CD lookup: cddb, musicbrainz and
  cdtext. They can all be listed in a comma-separated list for
  CDDBMETHOD and the code will now call all of them in the sequence
  listed. All the results will be combined into one list at the end for
  the user to select, just like would have previously worked for one
  source only.
  * Fix Musicbrainz ID calculation in makeids()
  * Fix abcde.mkcue() when handling the --wholedisk option. Thanks to
  Nino Burini for the patch.
  * Add more comprehensive examples for filename munging in the example
  config file.
  * Add a more better fix for the year lookup problem in
  abcde-musicbrainz-tool
  * Redirect stderr on "which" calls to clear up error noise on some
  systems.
  * Add Irix support.
  * Rework abcde-musicbrainz-tool to work with WebService::MusicBrainz
  Also added a specific dependency on version 1.0.4 or newer, so
  abcde-musicbrainz-tool will abort if the version found is too old.
  Since tweaked to deal with multi-artist albums and tracks more
  completely.
  * Add resume support in do_getalbumart()
  * Fix getopts setup for "P". Thanks to Alan W. Kerr for reporting this.
  * Major set of code cleanups to fix up lots of warnings found with
  shellcheck, and a few other style issues:
  + Lots of quoting fixes
  + Use $( instead of `
  + Stop using -o and -a syntax with if [ - use || or &amp;&amp; instead
  + Wrap and shorten some very long lines
  * Wrap some output messages so they fit on a standard width console
  * Factor out repeated code and make page() more useful
  * Add version check before resuming from an old ripping run
- Dropped abcde-quote.patch</changelog>
  <changelog author="jengelh@inai.de" date="1533988800">- Replace summary line with an actual summary. Fix broken
  sentence grammar in description.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1550577600">- Update to 2.9.3
  * Replace non-portable sed code for generating offset list with some
    simple awk instead. Should now work on FreeBSD again.
  * Deal with bizarre cdda2wav behaviour when doing cdtext lookup - it
    writes the track information to *stdin*. Closes Issue #89:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=89
  * Add a warning in abcde.conf about mayb needing to install recode before
    using it in mungefilename()
- Clean with spec-cleaner
- Drop fix-makefile-version-2.9.2.patch which is fixed upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551873600">- Added dependency on WebService::MusicBrainz</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Re-enabled musicbrainz, as both perl(MusicBrainz::DiscID) and
  perl(WebService::MusicBrainz) are accepted into Factory now.
  Note that abcde uses both MusicBrainz and CDDB by default.
  Build without MusicBrainz can be made by setting
  %_without_musibrainz 1 in prjconf.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
</package>
<package pkgid="4f3d791fea1d85eb112f3c305b325505ad6fe9a9d466c96c32bd72833d764f46" name="abcde" arch="src">
  <version epoch="0" ver="2.9.3" rel="lp152.4.3.1"/>
  <changelog author="coolo@suse.de" date="1130932800">- make CDROM != /dev/cdrom work</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="coolo@suse.de" date="1157630400">- update to 2.3.3:
  * Rips done in a single track were getting tagged as Various. Corrected.
  * Possibly eliminated some bashisms from using a variable as a variable
    (Closes: #324399). Thanks to A Costa.
  * MKCUE needs to be passed some $CDROM as an option, or otherwise it will
    not read the CDROM, in case is not /dev/cdrom.
  * Also, make the CUEREADER a bit more general, since we might be using other
    CUE extractors.
  * Defining the tracknumber now resets the first track if given a number
    different than 1 (that is: abcde -T 1 2-10 creates songs 1 to 9).
  * Modified the FAQ to reflect the changes on Marillat's repo
    (Closes: #315724).
  * Should be "space" safe: works properly when the working directory contains
    a space (Closes: #147493).
  * Repared the CD query for the discid code. When failing to read a disc,
    actually report that there might be no disc in the drive.
  * Right now, walk over the different encoders we Depends: on in Debian and
    use the one available: if a user has a FLAC encoder, abcde will no install
    vorbis-tools, so it will fail to run out of the box (Closes: #321216)
  * Added CUE support. Still experimental...
  * Added FLAC on Ogg. Still not activated, since we cannot get comments added
    as a post-process action.
  * Applied patches from Fedora Core (Credit goes to Nils Philippsen
    &lt;nphilipp@redhat.com&gt;)
  * Added a post_read() function to be executed before ejecting the CD.
  * Typos reported by A Costa corrected (Closes: #311463)
  * Problem with abcde being run in a directory with files containing only
    numbers solved (Closes: #313628).
  * vorbiscomment uses now "-R" (Closes: #303566).
  * "-t" and "-T" use the first track as a starter for the track list.
    (Closes: #305749).
  * Added CDPARANOIACDROMBUS option to define -d in case of using IDE and SCSI
    in case of using ide-scsi emulation layer (Closes: #290768).
  * Define metaflac in abcde.conf (Closes: #303555)
  * Double quotation added to solve parsing * as a wildcard (Closes: #302904).
    Thanks to Christian Grigis for the patch. Also (Closes: #268088).
  * CDPARANOIAOUTPUT missed some quotes.
  * Removed some useless lines.
  * If BATCH is used with ONETRACK, disable BATCH.
  * Small typos with CDROM comparisons.
  * Logic for CDROM variable improved.
  * Changed the way we call flac, to adapt to the new times:
  - -import-vc-from= to --import-tags-from.
  * DOSPLAYLIST was not included in the list of options.
  * Options passed to the encoder by using &lt;-o ogg:"-b 192"&gt; are now
    supported. One can modify the way abcde encodes just for the current CD.
  * Unfortunatelly I forgot to add the starting number for tags in Ogg. For
    MP3 is a bit more difficult, since it needs changing the X/YY code.
  * Also, the order of the tags in metaflac is important for the utf8 names.
    Thanks to Frederik Juul Christiani (Closes: #297482)
  * Added CDROMID in the .conf file, for reader programs that need it
    (Closes: #297005)
  * Added a check for cdparanoia when encountering data-only CDs.
  * Use the default while erasing an existing playlist (Closes: #288835).
  * Does not destroy track information when a track contains "=" in the name
    (Closes: #290709).
  * Quotes missing when evaluating a value (Closes: #284018).
  * Spotted and solved a problem with the way the data tracks were detected
    (Closes: #282647).</changelog>
  <changelog author="coolo@suse.de" date="1196164800">- update to 2.3.99.6: tons of debian bug reports fixed, e.g.
  * Default to UNICODE (UTF8) tags and comments (Closes: #282332).
  - Added CDDBPROTO option in config file (Closes: #349951)
  * Added a missing "INDEX 01" entry for CUE sheet creation.
  * Avoid completing the encoding of files if we aborted previously.
  * Embed the CUE sheet if we have a cuesheet file and we have a single FLAC
    file, even if we are not tagging. This way we can use the file as a source
    even if it is not tagged/named properly.
  * Fails to quote filenames properly (Closes: #355296)</changelog>
  <changelog author="coolo@suse.de" date="1225454400">- apply patch from bnc#419800 to fix
  "abcde quotes some variables incorrectly"</changelog>
  <changelog author="tschmidt@novell.com" date="1297339200">- added recommends id3v2</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 2.6
  + Fix finding $CDROM on OS X. Closes issue 71.
  + USEID3 and USEID3V2 variables are unused now, so remove them.
    Closes issue 73.
  + Clean up movement to eyeD3, remove id3v2 remnants. Closes issue 74.
  + Fix infinite loop if cddb fails. Closes: #687038 in Debian
  + Switch from Musepack SV7 to SV8.
  + Allow aac encoding with neroAacEnc. Closes issue 8.
  + Allow opus encoding with opusenc. Closes issue 70.
  + Fix typo: s/CUEWAVEFILE/CUEWAVFILE/ so that abcde.mkcue should now
    produce working cue files. Closes issue 78.
  + Remove no-op -q option. Closes issue 106.
  + Fix issue 112: perl encoding pragma deprecation.
  + Fix option parsing for multiple output formats. Closes issue 115.
  + Fix eyeD3 tagging for cddb entries without year. Closes issue 107
  + Add mention of CD-TEXT support in the man page. Closes issue 102.
  + Make Y/N prompting more consistent. Closes issue 95
  + Remove the no-op -B option. Closes: #426531 in Debian
  + Document the need to escape parentheses in tag comments.
    Closes: #256941 in Debian.
  + Concatenate option steps on -t/-T option. Closes: #391294 in Debian
  + Try to use bsd-mailx where possible to force UTF-8 for cddb-tool mail
    submissions. If not possible, attempt to force UTF-8 via the
    environment and fall back to mail instead. Closes: #756289 in Debian,
    issue 111.
- Make cd-discid live in it's own package
- Update Urls and dowload sources
- Refresh the old abcde_2.3.99.6-quote.patch to abcde_2.6-quote.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1422100800">- re-add man pages, last update accidentally removed them</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 2.7.1
  * Rebuild of the abcde Makefile.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=4
  * Fix incorrect use of 'break'.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=6
  * Make older versions of id3 happy when 'Genre' field is empty.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=8
  * Add YEAR and GENRE variables to do_getalbumart().
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=9
  * Support added for encoding to True Audio using tta while still
    supporting the older ttaenc. Tagging is with mid3v2.
  * Support added for encoding to MPEG-1 Audio Layer II (mp2)
    with either twolame or FFmpeg / avconv. Tagging with mid3v2.
  * Encoding to WavPack with FFmpeg. Some slight changes to WavPack
    syntax with backward compatibility built in for abcde 2.7.
  * Encoding to m4a container with FFmpeg or avconv. This allows
    for alac encoding with FFmpeg's reverse engineered alac encoder.
  * AAC encoding with fhgaacenc via Wine. Tagging is provided
    by AtomicParsley which has been added back to abcde :). This
    allows encoding with HE-AAC v2, unavailable with qaac.
  * Support added for AAC encoding with qaac via Wine. This
    also allows for Apple Lossless Audio Coding (alac) using
    either qaac or refalac. This closes Issue 142.
  * Grab year information too when using musicbrainz.
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=10
- Changes from version 2.7
  * Rewrite of abcde's mungefilename function.
    This closes Issues 72 and 135.
  * TRACKTOTAL now written to flac and ogg files.
    This resolves Issue 76.
  * Support added for the downloading of album art.
    Detailed documentation added to the abcde FAQ document
    although the sane defaults in place will guarantee a good
    experience even for those who do not read documentation!
    This closes Issue 33.
  * Support added for ripping with the GNU Compact Disc
    Input and Control library (libcdio) as requested by
    both gentoo and NixOS. The utility used is cd-paranoia
    and can best be called from a conf file as follows:
    CDROMREADERSYNTAX=libcdio
    CD_PARANOIA=cd-paranoia
    CDPARANOIAOPTS="--never-skip=40 --verbose"
    with the CD_PARANOIA variable giving the correct path
    to cd-paranoia.
  * Fix for encoding with bladeenc and usepipes.
  * Fix for broken ripping with dagrab. Closes Issue 140.
  * Fix for diskutil selecting wrong disk on OS X.
    closes Issue 139.
  * Added some error checking and documentation for
    the abcde-musicbrainz-tool. Closes issue 138.
  * New variables for m4a/aac encoding options to be
    manipulated in a users ~/.abcde.conf file:
    1. FAACENCOPTS for faac encoding options
    2. NEROAACENCOPTS for neroAacEnc options
    3. FDKAACENCOPTS for fdkaacenc options
    Note that these options replace the now obsolete AACENCOPTS.
  * Check added for neroAacTag when encoding with neroAacEnc.
  * Several additions to usepipes with the following encoders
    being added:
    1. mp3enc: mp3
    2. speexenc: Speex
    3. mpcenc: Musepack SV8
    4. wavpack: WavPack
    5. faac: aac
    6. neroAacEnc: aac
    7. fdkaac: aac
    The cd ripper cdda2wav (icedax) has also been added.
  * Ripping and encoding with 'usepipes' fixed. This fix
    closes Issue 46.
  * Suggested encoding options for mp3enc added to the sample
    abcde.conf. Last release of mp3enc in 1998 but it still
    works flawlessly with a modern abcde!
  * Suggested encoding options for l3enc added to the sample
    abcde.conf. Congratulations to abcde which in 2015 still
    works with l3enc which saw its final release in 1997!
  * Fix for -o option use with options and multiple outputs.
    This allows for commandline options such as the following:
    abcde -o 'flac:-8,mp3:-b 320'
    This closes Issue 136.
  * Support added for ReplayGain with WavPack encoding.
  * Fix for MusePack to allow the use of the SV8 ReplayGain
    application 'mpcgain'.
  * Monkey's Audio (ape) encoding added. Tagging is with
    Robert Muth's apetag.
  * Simplify Opus tagging.This closes Issue 133.
  * Allow 'clean' when OUTPUTTYPE=wav, broken for some time.
    This closes Issue 94.
  * Clarification that CDDBLOCALRECURSIVE=y is required for
    local CDDB search. This partially resolves Issue 121.
  * AtomicParsley removed from debian/control, WavPack added.
  * Details of abcde's handling of faac compiled with and
    without mp4v2 added as a new entry to FAQs.
  * Fix to allow display of the 'date' meta tag generated
    by eyeD3 in vlc, Audacious and friends.
    This closes Issue 126.
  * Fix for flac floating point error. closes Issue 113.
  * Formalised 3 methods of mp3 tagging using ID3TAGV:
    1.id3v2.4 using eyeD3 (set in abcde as the default)
    2.id3v2.3 using id3v2
    3.id3v1 using id3
    Fixes issue 101.
  * Support for WavPack added. Closes issue 123.
  * Fix for mp3 encoding with different versions of eyeD3.
  * Major AAC encoding cleanup, including addition of the fdkaac encoder.
- Update patch abcde_2.6-quote.patch &gt; abcde-quote.patch</changelog>
  <changelog author="adrian@suse.de" date="1451908800">- add recommends to eyeD3, abcde is using it by default since 2.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1461585600">- Update to version 2.7.2
  * When using musicbrainz, don't assume that there will be release
    events attached to a particular CD release. Bug fix for the addition
    of year information support in 2.7.1.
  * Support for output to the Matroska container (mka). Encoder
    is FFmpeg (or avconv). Typical conf file syntax would be:
    MKAENCODERSYNTAX=ffmpeg
    FFMPEG=ffmpeg
    FFMPEGENCOPTS="-c:a ac3 -b:a 448k"
    OUTPUTTYPE="mka"
  * Add id3tag mp3 tagger as this is the tagger available to
    OpenBSD users.
  * Allow for cddb response 500. This closes Issue 26:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=26
  * Fix for 'expansion of $REDIR' bug on MacOSX. This closes Issue 22:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=22
  * Makefile adjusted to allow the sample abcde.conf file to be
    installed by default to /etc rather than $(prefix)/etc.
    https://bugs.archlinux.org/task/46671
  * Allow getalbumart to correctly place cover image when single
    track is selected. This closes Issue 25:
    http://abcde.einval.com/bugzilla/show_bug.cgi?id=25
- Update abcde-quote.patch
- Set BuildArch as noarch; the package doesn't contain any binary</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to version 2.8.1
  * Fix silly error introduced in abcde-musicbrainz-tool when
    fixing bug 30. Thanks to Thomas Klausner for the bug/patch.
    Closes Issue 52:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=52
  version 2.8:
  * Make fdkaac the default for m4a encoding. Faac can still be
    selected for m4a encding via ~/.abcde.conf file but best not
    to :).
  * Split user-definable mungefilename function into
    mungetrackname, mungeartistname, and mungealbumname, each of
    which default to mungefilename Thanks to Gerald Turner for the
    patch and enhancement request. This closes Issue 39:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=39
  * FAQs: Clarify the exit from multi-result CDDB search.
  * Fix to allow multiple output formats when aac fallback is
    triggered. Thanks to Birk Bremer for the bug report.
    This closes Issue 35:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=35
  * Fix for some erroneous error and status logging. Thanks to
    Christian Wasem for the bug report and fix. This closes Issue
    32: https://abcde.einval.com/bugzilla/show_bug.cgi?id=32
  * Add support for trying multiple CD lookup services in
    order. Thanks to Gabriel Rosenkoetter for the patch. Closes
    Issue 42: https://abcde.einval.com/bugzilla/show_bug.cgi?id=42
  * Add Recommends on glyrc and imagemagick in Debian
    packaging. Closes Debian Bug #827626
  * Fix up handling of the first few sectors when reading
    from a whole-CD flac file or using cdparanoia in one-track
    mode. Thanks to Matthias König for the patch. Closes Issue
    44: https://abcde.einval.com/bugzilla/show_bug.cgi?id=44
  * Tweak the fix in musicbrainz for handling sketchy returned
    data some more. Hopefully closes Issue 30:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=30
  * Re-enable some commented out cdparanoia/debug code in
    do_discid. Closes Issue 14:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=14
  * Add "-a" to lots of grep calls in case of "binary" looking
    data, e.g. non-ascii text in track titles!
    Closes Issue 24:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=24
  * Add "-L" to default curl options, to follow redirects if
    needed. Closes Issue 40:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=40
    Thanks to Gabriel Rosenkoetter for the patch.
  * Switch default from "cddb" to "musicbrainz" for track lookup
    Closes Debian Bug #842178</changelog>
  <changelog author="rpm@fthiessen.de" date="1533729600">- Added use-cddbmethod.patch needed as factory does not provide
  perl(MusicBrainz::DiscID)
- Added fix-makefile-version-2.9.2.patch
- Added keyring for verification
- Update to 2.9.2:
  * Fix up lookup code to deal with spaces etc. in directory names
  * Cope with "stub" releases in Musicbrainz
  * Always call glyrc with LC_ALL=C. Thanks to Andreas Vögele for the
  report and the suggested fix.
  * Add a link to the CDDB data format in the abcde man page.
  * More fixups of track number padding. Thanks to John Straw for the
  patch.
  * Allow for embedding of  album art downloaded by the getalbumart
  function. Currently this is available for flac (using metaflac),
  mp3 (using eyed3), m4a (using AtomicParsley) and
  WavPack aka wv (using wvtag).
  * Use md5 rather than md5sum under macOS.
  * Support added for encoding with
  Audio Interchange File Format (AIFF).
  * Allow selection of either cddb or musicbrainz from the command line
  * Allow for embedding with do_embedalbumart() for single track
  encodes when OUTPUTFORMAT and ONETRACKOUTPUTFORMAT are different.
  * Experimental support for embedding albumart with ogg files.
  * Massive rework of CD lookup code so support multiple sources
  better. Thanks to Gabriel Rosenkoetter for his initial idea in this
  area, and to Tomasz Goli?ski on irc for initial inspiration on how
  this should work better.
  There are now 3 different options for CD lookup: cddb, musicbrainz and
  cdtext. They can all be listed in a comma-separated list for
  CDDBMETHOD and the code will now call all of them in the sequence
  listed. All the results will be combined into one list at the end for
  the user to select, just like would have previously worked for one
  source only.
  * Fix Musicbrainz ID calculation in makeids()
  * Fix abcde.mkcue() when handling the --wholedisk option. Thanks to
  Nino Burini for the patch.
  * Add more comprehensive examples for filename munging in the example
  config file.
  * Add a more better fix for the year lookup problem in
  abcde-musicbrainz-tool
  * Redirect stderr on "which" calls to clear up error noise on some
  systems.
  * Add Irix support.
  * Rework abcde-musicbrainz-tool to work with WebService::MusicBrainz
  Also added a specific dependency on version 1.0.4 or newer, so
  abcde-musicbrainz-tool will abort if the version found is too old.
  Since tweaked to deal with multi-artist albums and tracks more
  completely.
  * Add resume support in do_getalbumart()
  * Fix getopts setup for "P". Thanks to Alan W. Kerr for reporting this.
  * Major set of code cleanups to fix up lots of warnings found with
  shellcheck, and a few other style issues:
  + Lots of quoting fixes
  + Use $( instead of `
  + Stop using -o and -a syntax with if [ - use || or &amp;&amp; instead
  + Wrap and shorten some very long lines
  * Wrap some output messages so they fit on a standard width console
  * Factor out repeated code and make page() more useful
  * Add version check before resuming from an old ripping run
- Dropped abcde-quote.patch</changelog>
  <changelog author="jengelh@inai.de" date="1533988800">- Replace summary line with an actual summary. Fix broken
  sentence grammar in description.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1550577600">- Update to 2.9.3
  * Replace non-portable sed code for generating offset list with some
    simple awk instead. Should now work on FreeBSD again.
  * Deal with bizarre cdda2wav behaviour when doing cdtext lookup - it
    writes the track information to *stdin*. Closes Issue #89:
    https://abcde.einval.com/bugzilla/show_bug.cgi?id=89
  * Add a warning in abcde.conf about mayb needing to install recode before
    using it in mungefilename()
- Clean with spec-cleaner
- Drop fix-makefile-version-2.9.2.patch which is fixed upstream</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551873600">- Added dependency on WebService::MusicBrainz</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Re-enabled musicbrainz, as both perl(MusicBrainz::DiscID) and
  perl(WebService::MusicBrainz) are accepted into Factory now.
  Note that abcde uses both MusicBrainz and CDDB by default.
  Build without MusicBrainz can be made by setting
  %_without_musibrainz 1 in prjconf.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
</package>
<package pkgid="99520aee8b29b49dd87865c74d91ce5bf21359562c7fbd9868d085599fec1ae2" name="acct" arch="src">
  <version epoch="0" ver="6.6.4" rel="lp152.4.3.1"/>
  <changelog author="schuetzm@gmx.net" date="1370520000">- Converted rc file to systemd unit file.
- Fixed a bug where the accounting file wasn't reopened after
  logrotate, because force-reload isn't implemented.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382184000">- Remove useless %inserv_prereq and fillup_prereq macro; acct package
  doesn't contain neither sysvinit script and sysconfig file</changelog>
  <changelog author="vcizek@suse.com" date="1387627200">- update to 6.6.1
  * Fixed vulnabilities, due to autmake. Thanks to Karl Berry
    for pointing this out.
  * Update gnulib to latest git.
- dropped acct-stdio.h.patch (upstream)
- add gpg verification</changelog>
  <changelog author="werner@suse.de" date="1395057600">- cleanup of acct
  * Add install section in service unit (bnc#867138)
  * Add a simple script to create pacct file</changelog>
  <changelog author="vcizek@suse.com" date="1409227200">- fixed libexec path in acct.service (bnc#893980)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 6.6.2
  + Link with -lm.
  + Fix texi.
  + The rest of fixes from 6.5.5 to 6.6.1.
- Update Url to new project home
- Use download Url
- Remove dependency on gpg-offline and keyring files; let OBS handle
  source verification
- Adapt acct-hz.patch to upstream changes
  &gt; acct-6.6.2-hz.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Add back .keyring and .sig files; OBS verify them too</changelog>
  <changelog author="p.drouand@gmail.com" date="1425211200">- Fixthe log path in service and logrotate files; fix bnc#915654</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- install deinstall needs to be in preun</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Use try-restart not restart on logrotate update, otherwise we could
  suprisingly start the service for user, which is not desired
- Cleanup with spec-cleaner
- Use tmpfiles creation instead of hand-written shell script</changelog>
  <changelog author="tchvatal@suse.com" date="1434974401">- Use just /var/log/account/pacct file and remove the tmpfiles creation
  completely</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- The previous commit ghosted the log file, but we need it empty
  and present to start with, so unghost it</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from info file
  acct-timestamp.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1468411200">- remove syslog.target from acct.service file [bsc#983938]</changelog>
  <changelog author="kstreitova@suse.com" date="1490788800">- cleanup with spec-cleaner
- get rid of %{name} and %{version} macros from the patch names</changelog>
  <changelog author="mpluskal@suse.com" date="1491480000">- Update to version 6.6.3:
  * Fixed manuals.
- Refresh patches:
  * acct-6.6.2-hz.patch
  * acct-info.patch
- Drop no longer needed:
  * acct-ac.patch
  * acct-timestamp.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1492084800">- remove acct-info.patch that is no longer needed (fixed upstream
  in version 6.6.3)
- note: acct-6.6.2-hz.patch was not accepted upstream as it might
  break support for the HP alpha platform</changelog>
  <changelog author="astieger@suse.com" date="1499688000">- update to 6.6.4:
  * Added --pid to 'lastcomm'.</changelog>
  <changelog author="kstreitova@suse.com" date="1505822400">- acct.service: fix chmod command call to use an absolute path
  [bsc#1053528]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1636977600">- Migrate pacct log file to new location when upgrading from SLE12,
  fixes bsc#1188159</changelog>
</package>
<package pkgid="4541327f77905e2baad16b83007d6e45168af84e15f709916d632d601f49889e" name="acct" arch="x86_64">
  <version epoch="0" ver="6.6.4" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 6.6.2
  + Link with -lm.
  + Fix texi.
  + The rest of fixes from 6.5.5 to 6.6.1.
- Update Url to new project home
- Use download Url
- Remove dependency on gpg-offline and keyring files; let OBS handle
  source verification
- Adapt acct-hz.patch to upstream changes
  &gt; acct-6.6.2-hz.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1418990400">- Add back .keyring and .sig files; OBS verify them too</changelog>
  <changelog author="p.drouand@gmail.com" date="1425211200">- Fixthe log path in service and logrotate files; fix bnc#915654</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- install deinstall needs to be in preun</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Use try-restart not restart on logrotate update, otherwise we could
  suprisingly start the service for user, which is not desired
- Cleanup with spec-cleaner
- Use tmpfiles creation instead of hand-written shell script</changelog>
  <changelog author="tchvatal@suse.com" date="1434974401">- Use just /var/log/account/pacct file and remove the tmpfiles creation
  completely</changelog>
  <changelog author="tchvatal@suse.com" date="1435838400">- The previous commit ghosted the log file, but we need it empty
  and present to start with, so unghost it</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from info file
  acct-timestamp.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1468411200">- remove syslog.target from acct.service file [bsc#983938]</changelog>
  <changelog author="kstreitova@suse.com" date="1490788800">- cleanup with spec-cleaner
- get rid of %{name} and %{version} macros from the patch names</changelog>
  <changelog author="mpluskal@suse.com" date="1491480000">- Update to version 6.6.3:
  * Fixed manuals.
- Refresh patches:
  * acct-6.6.2-hz.patch
  * acct-info.patch
- Drop no longer needed:
  * acct-ac.patch
  * acct-timestamp.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1492084800">- remove acct-info.patch that is no longer needed (fixed upstream
  in version 6.6.3)
- note: acct-6.6.2-hz.patch was not accepted upstream as it might
  break support for the HP alpha platform</changelog>
  <changelog author="astieger@suse.com" date="1499688000">- update to 6.6.4:
  * Added --pid to 'lastcomm'.</changelog>
  <changelog author="kstreitova@suse.com" date="1505822400">- acct.service: fix chmod command call to use an absolute path
  [bsc#1053528]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1636977600">- Migrate pacct log file to new location when upgrading from SLE12,
  fixes bsc#1188159</changelog>
</package>
<package pkgid="3fd9cc69a930168dbcc8bdb15b952729a8a4d28ff4f07ee76fe2aad1d1b7a372" name="adcli" arch="i586">
  <version epoch="0" ver="0.8.2" rel="lp152.5.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
</package>
<package pkgid="1f47d4fa0a34957a84df2fe46c2b5842c85dd168e6fcb883a16b8681742d81e6" name="adcli" arch="src">
  <version epoch="0" ver="0.8.2" rel="lp152.5.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
</package>
<package pkgid="77395bc3d4a5114f124a95d7375cb99f63194f8d37a41a7ae395dff56de11077" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp152.5.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
</package>
<package pkgid="ca54f5f2eb36ef5bbbef75f363b13bd8509aeabc55cf2cdf2a9ea9f63e8e2a5f" name="adcli-doc" arch="i586">
  <version epoch="0" ver="0.8.2" rel="lp152.5.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
</package>
<package pkgid="87869cacd624e551b5cd5a79b3e038bc8e0d08d347a8f1a78a651510cfd085cb" name="adcli-doc" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp152.5.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
</package>
<package pkgid="e67d6b61de938a2002896474a6992ea7bd12129b7a75a409f291bd4ac3dea5e2" name="adminer" arch="noarch">
  <version epoch="0" ver="4.7.9" rel="lp152.2.3.1"/>
  <changelog author="jimmy@boombatower.com" date="1509192000">- Disable elasticsearch and mssql since the dependencies are no
  longer present in Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1516190400">- s/or/OR/ in License.
- Update to version 4.4.0:
  * Release 4.4.0
  * Allow sending multiple CSP headers
  * Use __construct for constructor
  * Set session cache limiter only without session.auto_start (bug #586)
  * Add missing newline
  * Require specifying credentials in login-sqlite plugin
  * Avoid count(null)
  * Disallow PHP 5.3 in Travis
  * Disallow connecting to privileged ports (thanks to hyp3rlinx)
  * Rate limit password-less login attempts from the same IP address (thanks to hyp3rlinx)
  * Use HTTPS
  * Use HTTPS in doc_link()
  * Do not set '' for empty enum
  * Fix select function onchange
  * Clone all event handlers in cloneNode()
  * Use border-collapse to prevent unnecessary wrapping in Chrome
  * Fix whitespace
  * Fix selectCount() in information_schema
  * Fix SQL command toggle
  * Disallow scripts without nonce
  * Fix wrapping in Create table
  * Use script_src for &lt;script src&gt;
  * Fix typo in script()
  * Do not send empty CSP
  * Move inline event handlers to &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use the fact that we handle oninput in whisper()
  * Move inline event handlers to &lt;script&gt;
  * Editor: Fix Search data in tables
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler for skipping original
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingMoveRow()
  * Move inline event handlers to &lt;script&gt;
  * Use oninput instead of onchange
  * Move inline event handlers to &lt;script&gt;
  * Fix fieldChange() after 6353a898
  * Use oninput instead of onkeyup
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in on_help()
  * Move inline event handlers to &lt;script&gt;
  * Clone onchange in cloneNode()
  * Move inline event handlers to &lt;script&gt;
  * Allow searching data in tables by Ctrl+Enter
  * Move inline event handlers to &lt;script&gt;
  * Fix selectors in schema after 58b2904d
  * Rely on event always passed to handlers
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingRemoveRow
  * Move inline event handlers to &lt;script&gt;
  * Use script() for &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in print_fieldset()
  * Use &lt;script&gt; instead of inline event handler in confirm()
  * Move inline event handlers to &lt;script&gt;
  * Return false from ajaxSetHtml()
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Move inline event handlers to &lt;script&gt;
  * Return false from toggle()
  * onchange='selectFieldChange
  * Use @this in selectFieldChange
  * Move inline event handlers to &lt;script&gt;
  * Fix indexesAddColumn after 14778165
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Allow customizing CSP
  * Allow img-src data: common in skins
  * Use JSON.parse if available
  * Add Content Security Policy
  * Always send security headers in customization
  * Add nosniff header
  * Use Referrer-Policy instead of &lt;meta name="referrer"&gt;
  * Editor: Fix doubleclick on database page
  * Fix a typo from 9cb28186
  * Use @this in JavaScript (prepares for removing inline event handlers)
  * Prevent PHP 7.1 warning about non-numeric values
  * Unindent doc-comments
  * Delete type="text/css" from &lt;style&gt; as it is the default in HTML5
  * Delete type="text/javascript" from &lt;script&gt; as it is the default in HTML5
  * Replace getElementsByTagName by shortcut for querySelectorAll
  * Use querySelector
  * Replace getElementById by shortcut for querySelector (requires IE8)
  * Fix skin for Chrome 61 (thanks to Dominik Ulrich)
  * Editor: Display field comment's text inside [] only in edit form
  * Fix hebrew typos (#228)
  * Add new Hebrew translations
  * Add Hebrew translation
  * Editor: Don't set time zone from PHP
  * Make sure all sidebar elements are pushed down, not just the form.
  * Update AdminerTablesFilter to produce li as per c9801e2e2418
  * MySQL: Remove dedicated view for replication status
  * Sort table names (bug #552)
  * Update es.inc.php
  * Add a donate link</changelog>
  <changelog author="jimmy@boombatower.com" date="1516881600">- Update to version 4.5.0:
  * Release 4.5.0
  * Fix tests after 95d02bb9
  * Simplify drop object confirmation questions
  * Translate message added in 4.4.0
  * Display name of the object in confirmation when dropping it
  * Display error when getting row to edit
  * Avoid CONVERT() except in MySQL (bug #509)
  * Bump version
  * MySQL: Support routines with comments in parameters (bug #460)
  * Verify if adminer.version was created on www.adminer.org
  * Store current Adminer version server-side to avoid excessive requests
  * Send token as last param
  * Allow using adminer.invalid by other users in a group
  * Extract file_open_lock and file_write_unlock
  * Display boolean values as code (bug #562)
  * MariaDB: Support fulltext and spatial indexes in InnoDB (bug #583)
  * PostgreSQL: Display foreign tables (bug #576)
  * Add designs.php
  * Fix compiled version after 5cc831c1
  * Hide window.opener from pages opened in a new window (bug #561)
  * Fix GPL version
  * Add plugin for switching designs
  * Display bold parts of error (bug #565)
  * Add bottom border to last cells
  * Editor: Fix displaying of false values in PostgreSQL (bug #568)
  * Decrease float precision (bug #578)
  * Add ability to override file name (path) when loading dump from webserver
  * Support current_timestamp() as default of time fields (bug #572)
  * Display newlines in column comments (bug #573)
  * MySQL: Support geometry in MySQL 8 (bug #574)
  * MSSQL driver fixed for freetds drivers. See bug #167, #291
  * Fix search focus (regression from 4.4.0)
  * Compatibility with PHP &lt; 5.3
  * Add mongodb as a possible driver
  * Save bytes
  * php7 support with minimal changes of original code
  * PostgreSQL: Export DROP SEQUENCE if dropping table
  * PostgreSQL: Do not export triggers if not requested
  * Ignore removed CREATE+ALTER mode in trigger_sql()
  * Fix whitespace
  * CSP: Allow any CSS
  * adminer-theme-mancave2-2.0.alpha
  * Fix NULL value in edit form with Postgres
  * Do not warn about MySQL specific functions
  * Fix single driver non-MySQL compiled versions (regression from 150301ed)
  * Hide driver selection in single-driver version (regression from e762a6aa)
  * Unify HTML for list of tables in Editor according to Adminer
  * Encapsulate fulltext part in search box into &lt;div&gt;
  * Enhance ElasticSearch integration
  * Allow PHP 5.6 in Travis
  * Select numeric database name in DB list (bug #580)
  * SQLite: Enable foreign key checks
  * CSP: Allow any images, media and fonts, disallow base-uri
  * Define JS functions in AdminerTablesFilter sooner
  * Adminer: Fix Search data in tables</changelog>
  <changelog author="jimmy@boombatower.com" date="1517832000">- Update to version 4.6.0:
  * Release 4.6.0
  * Fix affected rows after getting warnings
  * Fix number of affected rows after getting warnings
  * Fix test
  * Fix 5.1 being displayed as 5.09999...
  * PRIMARY KEY in SQLite
  * Add design Esterka
  * Disable autocompleting password on create user page
  * Use primary key to edit rows even if not selected
  * Space between DB and Use
  * Translate DB
  * Select converted fields only once
  * Don't count rows if we reached the end
  * Fix count_rows with more than one group by column
  * Use separator in limit1
  * SQLite: Limit rows in data manipulation without unique key
  * Document that tests don't work with oninput
  * PostgreSQL: Limit rows in data manipulation without unique key
  * Don't use ctid as it's not stable
  * Move variables close to their usage
  * Limit non-unique where updates
  * Use Oid as the name of the column
  * Save bytes
  * Update rmsoft design
  * MySQL: Add FIND_IN_SET search operator
  * Add rmsoft design
  * MySQL: Add floor and ceil functions
  * Fix links to PostgreSQL 10 documentation
  * Delete unused variable
  * Display options for timestamp columns when creating a new table (thanks to Robert Vlach)
  * Don't display warnings for failed queries
  * Fix variable name
  * Reorder variables
  * Use pg_last_notice only with pgsql
  * Print warnings in call
  * Pass start time to selectQuery
  * PostgreSQL: Display warnings
  * Return string from warnings()
  * Display warnings in messages
  * Show select warnings
  * Support X-Forwarded-Prefix (e.g. Traefik PathPrefixStrip feature)
  * Lowercase EXPLAIN but don't translate it
  * Move explain below warnings
  * Fix return type
  * MySQL: Display warnings in SQL command
  * Quote default values not starting with a letter
  * Stop redirecting links via adminer.org
  * Fix min_version use
  * Quote dates in default value
  * Fully support functions in default values
  * Fix min_version use
  * PostgreSQL: Allow now() as default value (bug #525)
  * Fix edit_type after 1f21cd43
  * PostgreSQL: Allow editing views with uppercase letters (bug #467)
  * PostgreSQL: Allow creating trigger functions
  * Add placeholders
  * PostgreSQL: Support functions
  * Add min_version to compile.php
  * SimpleDB: Document that allow_url_fopen is required (bug #340)
  * Focus correct field in selectSearch
  * Support JSON since MariaDB 10.2 (bug #590)
  * Use min_version
  * Add min_version
  * Save bytes
  * add malay translation
  * Added and translated missing keys in polish translation
  * Update compatibility with TinyMCE v4 (#247)
  * Fix elastic after ef5a7639
  * fix elastic.inc.php to work on PHP 5.2
  * Fix counting selected rows after going back to select page</changelog>
  <changelog author="jimmy@boombatower.com" date="1518177600">- Update to version 4.6.1:
  * Release 4.6.1
  * Round 9.2 to 9.2
  * MariaDB: Links to documentation in syntax highlighting
  * Display notification about performing action after relogin
  * Reorder changes
  * Allow specifying server name displayed in breadcrumbs
  * MariaDB: Links to documentation
  * Reorder changes
  * Remove .lcZ from timeFormat (bug #593)
  * Add todo
  * Add more system tables help links
  * Respect empty tableName in tablesPrint
  * Use tableName() in table.inc.php
  * Avoid qsl in a loop
  * Support Shift+click in server export
  * Avoid qsl in a loop
  * Sticky position of table actions
  * Document regression
  * Avoid qsl in check[]
  * Avoid qsl in a loop
  * Mark optional parameter
  * SQLite: Support ` in PRIMARY KEY
  * Avoid Invalid credentials with no credentials
  * SQLite: Allow deleting PRIMARY KEY from tables with auto increment
  * Do not wrap alter table thead
  * Add version() to use in plugins
  * Select original if nothing else is selected
  * Remove nested array
  * Support connecting to MySQL via SSL
  * Display Invalid credentials if connection error is empty
  * Delete unused functions
  * Ignore functions in Min_Driver
  * Remove unnecessary quotes
  * Add truncate_sql to PostgreSQL
  * PostgreSQL: Unescape bytea fields
  * Save bytes
  * Add missing function to compile.php
  * PostgreSQL: Upload binary files to bytea fields
  * Allow using number_type() as pattern
  * Translate thousands separator in JS
  * Editor: Use type=search for Search tables
  * Move tableCheck() below &lt;/form&gt;
  * Pass operator from db.inc.php
  * PostgreSQL: Cast to string when searching using LIKE (bug #325)
  * MySQL: Support non-utf8 charset in search in column
  * Use ST_GeomFromText in MySQL 8 (bug #574)
  * Do not modify $_GET["where"]
  * Display empty operator as LIKE %%
  * Fix whitespace
  * Avoid deprecated each()
  * PostgreSQL: Fix condition for selecting no rows
  * Fix error display in Search tables
  * PostgreSQL: Don't treat interval type as number (bug #474)
  * Pass required parameter
  * Use existing variable
  * Add class to use in designs
  * Use primary key instead of LIMIT 1 if available</changelog>
  <changelog author="jimmy@boombatower.com" date="1519128000">- Update to version 4.6.2:
  * Release 4.6.2
  * Fix test
  * Fix typo
  * Comment
  * Use function after declaring it
  * Remove test server
  * Make test works with MariaDB
  * Make test work on wide screen
  * Editor: Fix displaying of true boolean values
  * Comment
  * Store current version before authentication and in Editor
  * Update design (thanks to Jan)
  * Add missing fullstop
  * Version 4.6.1.1 (#254)
  * Turkish language file updated.
  * Align Whole result
  * Always hide import
  * Print email only with rows or page
  * Move import out of footer
  * Move pagination to fieldset
  * Update readme
  * Make Login test work with jush-textarea
  * Add SQLite test
  * Test warnings
  * Convert tests to Katalon
  * Promote MongoDB, demote Oracle and MS SQL
  * Capitalize Whole result
  * Fill footer to the right
  * Make footer smaller
  * Move pagination outside footer
  * Wrap more into if (!is_ajax)
  * Move &lt;p&gt;
  * PostgreSQL: Add IF EXISTS to DROP SEQUENCE in export (bug #595)
  * Make footer border more obvious
  * Make footer margin not transparent
  * Centralize oninput
  * Speed up alter table
  * Use Unicode arrows in alt
  * Avoid hiding column only to show it later
  * Respect unchecked Default values
  * Update UI when coming from history
  * PostgreSQL: Fix exporting string default values (thanks to PotatoPangolin)
  * Semi-transparent border on table actions
  * Fix exporting sequences in PostgreSQL 10
  * Do not append empty values
  * Shorten JSON values in select (bug #594)
  * Fix id in databases list
  * Suggest updating Git submodules
  * Declare MariaDB support</changelog>
  <changelog author="jimmy@boombatower.com" date="1530187200">- Update to version 4.6.3:
  * Release 4.6.3
  * Fix typo
  * Revert "PgSQL search operator "SQL" added"
  * Add TODO
  * MySQL: Disallow LOAD DATA LOCAL INFILE
  * PostgreSQL: Export false as 0 in PDO (bug #619)
  * mssql: ignore serverproperty error
  * Add spaces
  * Fix table list in sidebar in designs/pokorny (#278)
  * Allow AdminerTablesFilter plugin to be used with third-party table list plugins (#275)
  * Recommend inlining the hash
  * Improve error message
  * Escape \ in enum edit
  * Improve enum parsing
  * Order database names in MySQL 8(bug #613)
  * Respect 'session.cookie_secure' if it is On
  * Copy triggers when copying table
  * MS SQL: Support port with sqlsrc
  * PostgreSQL: Do not cast uuid searches to text (bug #608)
  * Editor: Do not check boolean checkboxes with false in PostgreSQL (bug #607)
  * Disallow using password-less databases
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Report version
  * Document that Elasticsearch requires allow_url_fopen
  * PostgreSQL: Do not cast boolean to text on search (#264)
  * PostgreSQL: Do not cast number searches to text
  * PostgreSQL: Fix editing data in views (bug #605)
  * Elasticsearch: Fix PHP warning
  * PgSQL search operator "SQL" added
  * PostgreSQL: Fix slow query
  * Update JUSH
  * Display that *.gz files are supported in file upload
  * Save bytes
  * Stay on import page when switching database
  * Decrease timeout for running slow queries from 5 seconds to 2 seconds
  * Simplify running slow queries
  * Remove unused argument
  * Update JUSH
  * Use JUSH from GitHub
  * Clarify changelog
  * Display missing database in navigation
  * MongoDB driver: Add create_database methods.
  * Fix comment
  * Add $driver to global variables
  * Add $driver to global variables
  * Use $adminer-&gt;operators
  * PostgreSQL: Do not cast time search
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * MySQL: Use CONVERT() only when searching for non-ASCII (bug #603)
  * Remove optional submodule
  * Update adminer-design (rmsoft) to version 4.6.2.1
  * Wrap lines
  * Fix displaying info about non-alphabetical objects (bug #599)
  * Allow connecting to different drivers in login-servers
  * Wrap long line
  * Add login-otp plugin
  * Update translation
  * Comment
  * Centralize stopping session
  * Stop session before connecting (thanks to Kareem Zidane)
  * Update design (thanks to Jan)
  * PDO: Support binary fields download
  * Don't try to check missing checkboxes
  * Use file caching only in non-dev
  * Editor: Delete images from compiled version
  * Remove driver from file URLs (stored in path)
  * Fix image in compiled version
  * Use single \ in ' strings
  * &amp;nbsp; is not needed with border-collapse</changelog>
  <changelog author="jimmy@boombatower.com" date="1543147200">- Update to version 4.7.0:
  * Release 4.7.0
  * Fix whitespace
  * Clarify change description
  * Updated theme for v4.7 (#310)
  * Update zh-tw.inc.php (#299)
  * Fix a typo
  * Delete copy/pasted code
  * Change inline style to class name
  * Wrap `table.nowrap` with `div[style="overflow-x: auto"]`
  * Fix MariaDB link to numeric types
  * MySQL: Descending indexes in MySQL 8 (bug #643)
  * PostgreSQL: Support for GENERATED BY DEFAULT AS IDENTITY
  * Fix style
  * ClickHouse: support for decimal types, SQL operator
  * ClickHouse: Fix for drop multiple tables and views
  * ClickHouse ALTER DELETE and ALTER UPDATE support
  * ClickHouse fix select-like queries format postfix
  * Avoid overwriting existing tables when copying tables (bug #642)
  * PostgreSQL: Export DESC indexes (bug #639)
  * Recognize current_timestamp() in edit (bug #638)
  * Hide import from server if no path
  * Simplify storing executed SQL queries to bookmarks
  * fix editor theme (#302)
  * Remove unused code
  * MySQL: Recognize ON UPDATE current_timestamp() (bug #632)
  * PostgreSQL: Quote array values in export (bug #621)
  * Add plugin pretty-json-column
  * Update translation
  * DOM not ready when restoring `adminer_tables_filter` (#289)
  * Add Georgian translation
  * Update mvt design
  * Fix design (thanks to apmuthu)
  * ClickHouse: Fix escaping
  * ClickHouse support alpha version
  * Fix typo in Vietnamese translation
  * Add class 'layout' to all non-data tables
  * Set default db to sqlsrv connection
  * Warn when using password with leading or trailing spaces
  * Update donation link
  * Make maxlength in all fields a soft limit
  * Increase username maxlength to 80 (bug #623)
  * Fixes foreign key pattern in MySQL
  * Fix function change with set data type (thanks to osoba hrdelnata)
  * Adminer theme
  * Reset event handlers after cloning (thanks to Salko)
  * Fix inline editing of empty cells</changelog>
  <changelog author="jimmy@boombatower.com" date="1548331200">- Update to version 4.7.1:
  * Release 4.7.1
  * Remember visible columns in Create Table form (bug #493)
  * Editor: Allow disabling boolean fields in PostgreSQL (bug #640)
  * fix: haeckel adminer.css (#323)
  * SQLite: Hide server field in login form
  * Improve MariaDB status variables link (bug #658)
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Display the tables scrollbar (bug #647)
  * Document change
  * Fix PHP 7.3 compatibility (#318)
  * Position of the background database image changed. (#316)
  * Fix mvt theme (#315)
  * Use &lt;ul&gt; list for logins (#314)
  * Add missing Japanese translations (thanks to Shirai Takashi)
  * Change '...' to horizontal ellipsis character
  * php &lt;5.4 compat: array syntax (#313)
  * Add autocomplete attributes to login form</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Replace %__-type macro indirections.
- Replace bash-specific syntax in scriptlets by POSIX sh.</changelog>
  <changelog author="jimmy@boombatower.com" date="1563451200">- Update to version 4.7.2:
  * Release 4.7.2
  * MySQL: Fix getting foreign keys
  * Fix table status in PostgreSQL 12 (bug #683)
  * Fix displaying SQL command after Save and continue edit
  * PostgreSQL: Display definitions of materialized views (bug #682)
  * Support for viewing and editing of column comments in mssql driver
  * PostgreSQL: Fix setting column comments on new table
  * MySQL: Fix displaying multi-columns foreign keys (bug #675)
  * Check if PDO SSL Attributes are set within config, and only set them in PDO Options. otherwise Mysql PDO throws errors if attribute is set and empty
  * Elasticsearch: Show executed query as a json
  * MongoDB: number of records should be count on provide rows
  * Keep font size in all tables.
  * travis: test on php 5.6-7.3 (#330)
  * Cache busting for adminer.css
  * Always pass the SRID part of a geometry property with the GeomFromText function
  * Update rmsoft designs
  * Allow bruteForceKey to be overwritten (#342)
  * Allow overwriting tables when copying them
  * Update rmsoft design
  * Stretch footer over the whole table width (bug #624)
  * Do not attempt logging in without password (bug #676)
  * Fix typo in translation (bug #673)
  * missing translation DE
  * Fix too small #lang margin on pepa-linha design
  * Fix creating users and changing password in MySQL 8 (bug #663)
  * Fix #tables margin (#326)</changelog>
  <changelog author="jimmy@boombatower.com" date="1567080000">- Update to version 4.7.3:
  * Release 4.7.3
  * Fix blocking of concurrent instances in PHP &gt;7.2 (bug #703)
  * setup Mongo authSource by ENV
  * Reset table after changing DB
  * Move &lt;p&gt; after a possible error
  * Allow editing foreign keys pointing to tables in other database/schema (bug #694)
  * MS SQL: Support foreign keys to other DB
  * Do not display error for foreign keys to other databases
  * Save bytes
  * MSSQL: use textarea in edit form for Memo type (#357)
  * MySQL: Support STORED GENERATED
  * SQLite: Skip renaming when recreating table if not necessary
  * SQLite: Preserve auto increment when recreating table
  * SQLite: Allow setting auto increment for empty tables
  * Remove extra space in alter table command
  * SQLite: Handle error in altering table (bug #697)
  * init mancave-hever design
  * MySQL: Allow editing rows identified by negative floats (bug #695)
  * added floating footer css for adminer-theme-mancave2-2.1.alpha
  * Add a comment (bug #691)
  * Use is_numeric()
  * Support MariaDB virtual columns
  * MySQL: Speed up displaying tables in large databases (bug #700)
  * Support unquoted floats in export
  * SQLite: Quote strings stored in integer columns in export (bug #696)
  * MySQL: Skip editing generated columns
  * Add AdminerLoginIp
  * Close &lt;/ul&gt; of logins</changelog>
  <changelog author="jimmy@boombatower.com" date="1571745600">- Update to version 4.7.4:
  * Release 4.7.4
  * Fix XSS if Adminer is accessible at URL /data:
  * Do not put unused doc links to single driver compiled version
  * Fix PostgreSQL doc root
  * Save bytes
  * add links to oracle docs
  * add links to postgres docs
  * Bump version</changelog>
  <changelog author="jimmy@boombatower.com" date="1574856000">- Update to version 4.7.5:
  * Release 4.7.5
  * Re-apply https://github.com/vrana/adminer/pull/363/commits/89b6e9bb
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Stop using adsrc column
  * fixed: SQL command for insert, create table, etc. new: create/rename table, add/drop/change type for column
  * Fix brazilian portuguese translation
  * Swedish translation
  * Update hever design
  * Don't overwrite variable
  * Add id="" to cells with failed inline edit (bug #708)
  * Unify dumpTable declarations (bug #707)
  * PostgreSQL, Oracle: Set schema for EXPLAIN queries in SQL command (bug #706)
  * Initialize version-noverify sooner (bug #705)
  * Make context in qsa() optional
  * Delete extra newlines
  * correct complement of responsive media query
  * update lucas-sandery theme
  * Add funding</changelog>
  <changelog author="jimmy@boombatower.com" date="1580472000">- Update to version 4.7.6:
  * Release 4.7.6
  * Fix comparing IPs
  * Update readme
  * Add example for using SQLite with Editor
  * PostgreSQL: Support exporting views
  * Disallow connecting to ports &gt; 65535 (bug #730)
  * Display time of procedure execution
  * Hide columns when rendering
  * Speed up alter table form
  * Fix clicking on non-input fields in alter table
  * Editor: Fix focusing foreign key search in select
  * MySQL: Always set foreign_key_checks in export</changelog>
  <changelog author="jimmy@boombatower.com" date="1589198400">- Update to version 4.7.7:
  * Release 4.7.7
  * Fix open redirect if Adminer is accessible at //adminer.php%2F@ (thanks to Prakash Sharma)
  * Update Finnish translation
  * Fix typo in Greek translation
  * Add missing translation
  * Fix forwarded IP comparison in login-ip plugin
  * Release 4.7.6</changelog>
  <changelog author="elimat@opensuse.org" date="1609848000">- Update to version 4.7.8:
  * Release 4.7.8
  * MySQL: Use renamed variable
  * Avoid PDO exceptions in PHP 8
  * Fix method call after #406
  * Improve check for numeric ports (bug #769)
  * Add missing method
  * Fix compatibility with PHP 8
  * Avoid each() not available in PHP 8
  * Fix style
  * Escape : also in remove_from_param</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610798400">- BuildRequires php-cli</changelog>
  <changelog author="Jimmy Berry &lt;jimmy@boombatower.com&gt;" date="1611835200">- Drop virtual firebird package since php-firebird was dropped.
  See sr#863764 for Factory decline.</changelog>
  <changelog author="jimmy@boombatower.com" date="1612785600">- Update to version 4.7.9:
  * Release 4.7.9
  * Reorder changes
  * Editor: Avoid trailing dot in export filename
  * Skip impossible condition ($link always contains ?username=)
  * Fix displayed foreign key columns from other DB (bug #766)
  * Do not display empty database in the list twice
  * Display CSRF logout error after connecting
  * Fix displaying type mapping for Elasticsearch &gt;= 6.0
  * MongoDB: Prefer modern extension
  * Fix MongoDB connect 'Database does not support password.' tips
  * Update bug numbers
  * Postgres - fix missing partitioned tables in navigation
  * Linkify URLs in SQL results
  * Title for select data link
  * Quote values with leading and trailing zeroes in CSV export (bug #777)
  * MySQL: Don't quote default value of text fields (bug #779)
  * fixed Unsupported operand types when $port is socket
  * Respect SQL command URL parameters
  * Fix XSS in browsers which don't encode URL parameters (bug #775)
  * SQLite: Set busy_timeout to 500
  * PostgreSQL 11: Create PRIMARY KEY for auto increment columns
  * PostgreSQL: Support smallserial
  * Add comment
  * PostgreSQL PDO: Support PgBouncer, unsupport PostgreSQL &lt; 9.1 (bug #771)
  * fix wrong hungarian translation
  * Editor: Cast to string when searching (bug #325)
  * Don't syntax highlight during IME composition (bug #747)
  * PostgreSQL: Use bigserial for bigint auto increment (bug #765, regression from 3.0.0)
  * MSSQL: Don't trucate displayed comments to 30 chars (use varchar maximum of 8000 upon casting)
  * Update Korean translation (thanks to B. Cansmile Cha)
  * add alternative design dracula theme
  * show correct collation for PostgresSQL
  * PostgreSQL: Fix current schema in view definition
  * Add external designs as submodules
  * Fixes to lucas-sandery theme
  * Do not export names in quotes with sql_mode='ANSI_QUOTES' (bug #749)
  * Fix PgSQL generated always as identity fix
  * Update Russian translation.
  * Update Ukrainian translation.
  * PostgreSQL: Export all FKs after all CREATE TABLE
  * MySQL, MariaDB: Fix doc links
  * Do not display SQL function for checkbox
  * Fix style (bug #743)
  * PostgreSQL: Fix dollar-quoted syntax highlighting (bug #738)
  * Elasticsearch, ClickHouse: Do not print response if HTTP code is not 200
  * Add basic Makefile.
  * Travis: add php 7.4 &amp;&amp; 8.0
  * Re-enable PHP warnings</changelog>
</package>
<package pkgid="d0a5d4bb322f1628df8f663bbd9d30eb6a5905cd19e1ea622942762f239e7c0d" name="adminer" arch="src">
  <version epoch="0" ver="4.7.9" rel="lp152.2.3.1"/>
  <changelog author="jimmy@boombatower.com" date="1509192000">- Disable elasticsearch and mssql since the dependencies are no
  longer present in Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1516190400">- s/or/OR/ in License.
- Update to version 4.4.0:
  * Release 4.4.0
  * Allow sending multiple CSP headers
  * Use __construct for constructor
  * Set session cache limiter only without session.auto_start (bug #586)
  * Add missing newline
  * Require specifying credentials in login-sqlite plugin
  * Avoid count(null)
  * Disallow PHP 5.3 in Travis
  * Disallow connecting to privileged ports (thanks to hyp3rlinx)
  * Rate limit password-less login attempts from the same IP address (thanks to hyp3rlinx)
  * Use HTTPS
  * Use HTTPS in doc_link()
  * Do not set '' for empty enum
  * Fix select function onchange
  * Clone all event handlers in cloneNode()
  * Use border-collapse to prevent unnecessary wrapping in Chrome
  * Fix whitespace
  * Fix selectCount() in information_schema
  * Fix SQL command toggle
  * Disallow scripts without nonce
  * Fix wrapping in Create table
  * Use script_src for &lt;script src&gt;
  * Fix typo in script()
  * Do not send empty CSP
  * Move inline event handlers to &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use the fact that we handle oninput in whisper()
  * Move inline event handlers to &lt;script&gt;
  * Editor: Fix Search data in tables
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler for skipping original
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingMoveRow()
  * Move inline event handlers to &lt;script&gt;
  * Use oninput instead of onchange
  * Move inline event handlers to &lt;script&gt;
  * Fix fieldChange() after 6353a898
  * Use oninput instead of onkeyup
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in on_help()
  * Move inline event handlers to &lt;script&gt;
  * Clone onchange in cloneNode()
  * Move inline event handlers to &lt;script&gt;
  * Allow searching data in tables by Ctrl+Enter
  * Move inline event handlers to &lt;script&gt;
  * Fix selectors in schema after 58b2904d
  * Rely on event always passed to handlers
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingRemoveRow
  * Move inline event handlers to &lt;script&gt;
  * Use script() for &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in print_fieldset()
  * Use &lt;script&gt; instead of inline event handler in confirm()
  * Move inline event handlers to &lt;script&gt;
  * Return false from ajaxSetHtml()
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Move inline event handlers to &lt;script&gt;
  * Return false from toggle()
  * onchange='selectFieldChange
  * Use @this in selectFieldChange
  * Move inline event handlers to &lt;script&gt;
  * Fix indexesAddColumn after 14778165
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Allow customizing CSP
  * Allow img-src data: common in skins
  * Use JSON.parse if available
  * Add Content Security Policy
  * Always send security headers in customization
  * Add nosniff header
  * Use Referrer-Policy instead of &lt;meta name="referrer"&gt;
  * Editor: Fix doubleclick on database page
  * Fix a typo from 9cb28186
  * Use @this in JavaScript (prepares for removing inline event handlers)
  * Prevent PHP 7.1 warning about non-numeric values
  * Unindent doc-comments
  * Delete type="text/css" from &lt;style&gt; as it is the default in HTML5
  * Delete type="text/javascript" from &lt;script&gt; as it is the default in HTML5
  * Replace getElementsByTagName by shortcut for querySelectorAll
  * Use querySelector
  * Replace getElementById by shortcut for querySelector (requires IE8)
  * Fix skin for Chrome 61 (thanks to Dominik Ulrich)
  * Editor: Display field comment's text inside [] only in edit form
  * Fix hebrew typos (#228)
  * Add new Hebrew translations
  * Add Hebrew translation
  * Editor: Don't set time zone from PHP
  * Make sure all sidebar elements are pushed down, not just the form.
  * Update AdminerTablesFilter to produce li as per c9801e2e2418
  * MySQL: Remove dedicated view for replication status
  * Sort table names (bug #552)
  * Update es.inc.php
  * Add a donate link</changelog>
  <changelog author="jimmy@boombatower.com" date="1516881600">- Update to version 4.5.0:
  * Release 4.5.0
  * Fix tests after 95d02bb9
  * Simplify drop object confirmation questions
  * Translate message added in 4.4.0
  * Display name of the object in confirmation when dropping it
  * Display error when getting row to edit
  * Avoid CONVERT() except in MySQL (bug #509)
  * Bump version
  * MySQL: Support routines with comments in parameters (bug #460)
  * Verify if adminer.version was created on www.adminer.org
  * Store current Adminer version server-side to avoid excessive requests
  * Send token as last param
  * Allow using adminer.invalid by other users in a group
  * Extract file_open_lock and file_write_unlock
  * Display boolean values as code (bug #562)
  * MariaDB: Support fulltext and spatial indexes in InnoDB (bug #583)
  * PostgreSQL: Display foreign tables (bug #576)
  * Add designs.php
  * Fix compiled version after 5cc831c1
  * Hide window.opener from pages opened in a new window (bug #561)
  * Fix GPL version
  * Add plugin for switching designs
  * Display bold parts of error (bug #565)
  * Add bottom border to last cells
  * Editor: Fix displaying of false values in PostgreSQL (bug #568)
  * Decrease float precision (bug #578)
  * Add ability to override file name (path) when loading dump from webserver
  * Support current_timestamp() as default of time fields (bug #572)
  * Display newlines in column comments (bug #573)
  * MySQL: Support geometry in MySQL 8 (bug #574)
  * MSSQL driver fixed for freetds drivers. See bug #167, #291
  * Fix search focus (regression from 4.4.0)
  * Compatibility with PHP &lt; 5.3
  * Add mongodb as a possible driver
  * Save bytes
  * php7 support with minimal changes of original code
  * PostgreSQL: Export DROP SEQUENCE if dropping table
  * PostgreSQL: Do not export triggers if not requested
  * Ignore removed CREATE+ALTER mode in trigger_sql()
  * Fix whitespace
  * CSP: Allow any CSS
  * adminer-theme-mancave2-2.0.alpha
  * Fix NULL value in edit form with Postgres
  * Do not warn about MySQL specific functions
  * Fix single driver non-MySQL compiled versions (regression from 150301ed)
  * Hide driver selection in single-driver version (regression from e762a6aa)
  * Unify HTML for list of tables in Editor according to Adminer
  * Encapsulate fulltext part in search box into &lt;div&gt;
  * Enhance ElasticSearch integration
  * Allow PHP 5.6 in Travis
  * Select numeric database name in DB list (bug #580)
  * SQLite: Enable foreign key checks
  * CSP: Allow any images, media and fonts, disallow base-uri
  * Define JS functions in AdminerTablesFilter sooner
  * Adminer: Fix Search data in tables</changelog>
  <changelog author="jimmy@boombatower.com" date="1517832000">- Update to version 4.6.0:
  * Release 4.6.0
  * Fix affected rows after getting warnings
  * Fix number of affected rows after getting warnings
  * Fix test
  * Fix 5.1 being displayed as 5.09999...
  * PRIMARY KEY in SQLite
  * Add design Esterka
  * Disable autocompleting password on create user page
  * Use primary key to edit rows even if not selected
  * Space between DB and Use
  * Translate DB
  * Select converted fields only once
  * Don't count rows if we reached the end
  * Fix count_rows with more than one group by column
  * Use separator in limit1
  * SQLite: Limit rows in data manipulation without unique key
  * Document that tests don't work with oninput
  * PostgreSQL: Limit rows in data manipulation without unique key
  * Don't use ctid as it's not stable
  * Move variables close to their usage
  * Limit non-unique where updates
  * Use Oid as the name of the column
  * Save bytes
  * Update rmsoft design
  * MySQL: Add FIND_IN_SET search operator
  * Add rmsoft design
  * MySQL: Add floor and ceil functions
  * Fix links to PostgreSQL 10 documentation
  * Delete unused variable
  * Display options for timestamp columns when creating a new table (thanks to Robert Vlach)
  * Don't display warnings for failed queries
  * Fix variable name
  * Reorder variables
  * Use pg_last_notice only with pgsql
  * Print warnings in call
  * Pass start time to selectQuery
  * PostgreSQL: Display warnings
  * Return string from warnings()
  * Display warnings in messages
  * Show select warnings
  * Support X-Forwarded-Prefix (e.g. Traefik PathPrefixStrip feature)
  * Lowercase EXPLAIN but don't translate it
  * Move explain below warnings
  * Fix return type
  * MySQL: Display warnings in SQL command
  * Quote default values not starting with a letter
  * Stop redirecting links via adminer.org
  * Fix min_version use
  * Quote dates in default value
  * Fully support functions in default values
  * Fix min_version use
  * PostgreSQL: Allow now() as default value (bug #525)
  * Fix edit_type after 1f21cd43
  * PostgreSQL: Allow editing views with uppercase letters (bug #467)
  * PostgreSQL: Allow creating trigger functions
  * Add placeholders
  * PostgreSQL: Support functions
  * Add min_version to compile.php
  * SimpleDB: Document that allow_url_fopen is required (bug #340)
  * Focus correct field in selectSearch
  * Support JSON since MariaDB 10.2 (bug #590)
  * Use min_version
  * Add min_version
  * Save bytes
  * add malay translation
  * Added and translated missing keys in polish translation
  * Update compatibility with TinyMCE v4 (#247)
  * Fix elastic after ef5a7639
  * fix elastic.inc.php to work on PHP 5.2
  * Fix counting selected rows after going back to select page</changelog>
  <changelog author="jimmy@boombatower.com" date="1518177600">- Update to version 4.6.1:
  * Release 4.6.1
  * Round 9.2 to 9.2
  * MariaDB: Links to documentation in syntax highlighting
  * Display notification about performing action after relogin
  * Reorder changes
  * Allow specifying server name displayed in breadcrumbs
  * MariaDB: Links to documentation
  * Reorder changes
  * Remove .lcZ from timeFormat (bug #593)
  * Add todo
  * Add more system tables help links
  * Respect empty tableName in tablesPrint
  * Use tableName() in table.inc.php
  * Avoid qsl in a loop
  * Support Shift+click in server export
  * Avoid qsl in a loop
  * Sticky position of table actions
  * Document regression
  * Avoid qsl in check[]
  * Avoid qsl in a loop
  * Mark optional parameter
  * SQLite: Support ` in PRIMARY KEY
  * Avoid Invalid credentials with no credentials
  * SQLite: Allow deleting PRIMARY KEY from tables with auto increment
  * Do not wrap alter table thead
  * Add version() to use in plugins
  * Select original if nothing else is selected
  * Remove nested array
  * Support connecting to MySQL via SSL
  * Display Invalid credentials if connection error is empty
  * Delete unused functions
  * Ignore functions in Min_Driver
  * Remove unnecessary quotes
  * Add truncate_sql to PostgreSQL
  * PostgreSQL: Unescape bytea fields
  * Save bytes
  * Add missing function to compile.php
  * PostgreSQL: Upload binary files to bytea fields
  * Allow using number_type() as pattern
  * Translate thousands separator in JS
  * Editor: Use type=search for Search tables
  * Move tableCheck() below &lt;/form&gt;
  * Pass operator from db.inc.php
  * PostgreSQL: Cast to string when searching using LIKE (bug #325)
  * MySQL: Support non-utf8 charset in search in column
  * Use ST_GeomFromText in MySQL 8 (bug #574)
  * Do not modify $_GET["where"]
  * Display empty operator as LIKE %%
  * Fix whitespace
  * Avoid deprecated each()
  * PostgreSQL: Fix condition for selecting no rows
  * Fix error display in Search tables
  * PostgreSQL: Don't treat interval type as number (bug #474)
  * Pass required parameter
  * Use existing variable
  * Add class to use in designs
  * Use primary key instead of LIMIT 1 if available</changelog>
  <changelog author="jimmy@boombatower.com" date="1519128000">- Update to version 4.6.2:
  * Release 4.6.2
  * Fix test
  * Fix typo
  * Comment
  * Use function after declaring it
  * Remove test server
  * Make test works with MariaDB
  * Make test work on wide screen
  * Editor: Fix displaying of true boolean values
  * Comment
  * Store current version before authentication and in Editor
  * Update design (thanks to Jan)
  * Add missing fullstop
  * Version 4.6.1.1 (#254)
  * Turkish language file updated.
  * Align Whole result
  * Always hide import
  * Print email only with rows or page
  * Move import out of footer
  * Move pagination to fieldset
  * Update readme
  * Make Login test work with jush-textarea
  * Add SQLite test
  * Test warnings
  * Convert tests to Katalon
  * Promote MongoDB, demote Oracle and MS SQL
  * Capitalize Whole result
  * Fill footer to the right
  * Make footer smaller
  * Move pagination outside footer
  * Wrap more into if (!is_ajax)
  * Move &lt;p&gt;
  * PostgreSQL: Add IF EXISTS to DROP SEQUENCE in export (bug #595)
  * Make footer border more obvious
  * Make footer margin not transparent
  * Centralize oninput
  * Speed up alter table
  * Use Unicode arrows in alt
  * Avoid hiding column only to show it later
  * Respect unchecked Default values
  * Update UI when coming from history
  * PostgreSQL: Fix exporting string default values (thanks to PotatoPangolin)
  * Semi-transparent border on table actions
  * Fix exporting sequences in PostgreSQL 10
  * Do not append empty values
  * Shorten JSON values in select (bug #594)
  * Fix id in databases list
  * Suggest updating Git submodules
  * Declare MariaDB support</changelog>
  <changelog author="jimmy@boombatower.com" date="1530187200">- Update to version 4.6.3:
  * Release 4.6.3
  * Fix typo
  * Revert "PgSQL search operator "SQL" added"
  * Add TODO
  * MySQL: Disallow LOAD DATA LOCAL INFILE
  * PostgreSQL: Export false as 0 in PDO (bug #619)
  * mssql: ignore serverproperty error
  * Add spaces
  * Fix table list in sidebar in designs/pokorny (#278)
  * Allow AdminerTablesFilter plugin to be used with third-party table list plugins (#275)
  * Recommend inlining the hash
  * Improve error message
  * Escape \ in enum edit
  * Improve enum parsing
  * Order database names in MySQL 8(bug #613)
  * Respect 'session.cookie_secure' if it is On
  * Copy triggers when copying table
  * MS SQL: Support port with sqlsrc
  * PostgreSQL: Do not cast uuid searches to text (bug #608)
  * Editor: Do not check boolean checkboxes with false in PostgreSQL (bug #607)
  * Disallow using password-less databases
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Report version
  * Document that Elasticsearch requires allow_url_fopen
  * PostgreSQL: Do not cast boolean to text on search (#264)
  * PostgreSQL: Do not cast number searches to text
  * PostgreSQL: Fix editing data in views (bug #605)
  * Elasticsearch: Fix PHP warning
  * PgSQL search operator "SQL" added
  * PostgreSQL: Fix slow query
  * Update JUSH
  * Display that *.gz files are supported in file upload
  * Save bytes
  * Stay on import page when switching database
  * Decrease timeout for running slow queries from 5 seconds to 2 seconds
  * Simplify running slow queries
  * Remove unused argument
  * Update JUSH
  * Use JUSH from GitHub
  * Clarify changelog
  * Display missing database in navigation
  * MongoDB driver: Add create_database methods.
  * Fix comment
  * Add $driver to global variables
  * Add $driver to global variables
  * Use $adminer-&gt;operators
  * PostgreSQL: Do not cast time search
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * MySQL: Use CONVERT() only when searching for non-ASCII (bug #603)
  * Remove optional submodule
  * Update adminer-design (rmsoft) to version 4.6.2.1
  * Wrap lines
  * Fix displaying info about non-alphabetical objects (bug #599)
  * Allow connecting to different drivers in login-servers
  * Wrap long line
  * Add login-otp plugin
  * Update translation
  * Comment
  * Centralize stopping session
  * Stop session before connecting (thanks to Kareem Zidane)
  * Update design (thanks to Jan)
  * PDO: Support binary fields download
  * Don't try to check missing checkboxes
  * Use file caching only in non-dev
  * Editor: Delete images from compiled version
  * Remove driver from file URLs (stored in path)
  * Fix image in compiled version
  * Use single \ in ' strings
  * &amp;nbsp; is not needed with border-collapse</changelog>
  <changelog author="jimmy@boombatower.com" date="1543147200">- Update to version 4.7.0:
  * Release 4.7.0
  * Fix whitespace
  * Clarify change description
  * Updated theme for v4.7 (#310)
  * Update zh-tw.inc.php (#299)
  * Fix a typo
  * Delete copy/pasted code
  * Change inline style to class name
  * Wrap `table.nowrap` with `div[style="overflow-x: auto"]`
  * Fix MariaDB link to numeric types
  * MySQL: Descending indexes in MySQL 8 (bug #643)
  * PostgreSQL: Support for GENERATED BY DEFAULT AS IDENTITY
  * Fix style
  * ClickHouse: support for decimal types, SQL operator
  * ClickHouse: Fix for drop multiple tables and views
  * ClickHouse ALTER DELETE and ALTER UPDATE support
  * ClickHouse fix select-like queries format postfix
  * Avoid overwriting existing tables when copying tables (bug #642)
  * PostgreSQL: Export DESC indexes (bug #639)
  * Recognize current_timestamp() in edit (bug #638)
  * Hide import from server if no path
  * Simplify storing executed SQL queries to bookmarks
  * fix editor theme (#302)
  * Remove unused code
  * MySQL: Recognize ON UPDATE current_timestamp() (bug #632)
  * PostgreSQL: Quote array values in export (bug #621)
  * Add plugin pretty-json-column
  * Update translation
  * DOM not ready when restoring `adminer_tables_filter` (#289)
  * Add Georgian translation
  * Update mvt design
  * Fix design (thanks to apmuthu)
  * ClickHouse: Fix escaping
  * ClickHouse support alpha version
  * Fix typo in Vietnamese translation
  * Add class 'layout' to all non-data tables
  * Set default db to sqlsrv connection
  * Warn when using password with leading or trailing spaces
  * Update donation link
  * Make maxlength in all fields a soft limit
  * Increase username maxlength to 80 (bug #623)
  * Fixes foreign key pattern in MySQL
  * Fix function change with set data type (thanks to osoba hrdelnata)
  * Adminer theme
  * Reset event handlers after cloning (thanks to Salko)
  * Fix inline editing of empty cells</changelog>
  <changelog author="jimmy@boombatower.com" date="1548331200">- Update to version 4.7.1:
  * Release 4.7.1
  * Remember visible columns in Create Table form (bug #493)
  * Editor: Allow disabling boolean fields in PostgreSQL (bug #640)
  * fix: haeckel adminer.css (#323)
  * SQLite: Hide server field in login form
  * Improve MariaDB status variables link (bug #658)
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Display the tables scrollbar (bug #647)
  * Document change
  * Fix PHP 7.3 compatibility (#318)
  * Position of the background database image changed. (#316)
  * Fix mvt theme (#315)
  * Use &lt;ul&gt; list for logins (#314)
  * Add missing Japanese translations (thanks to Shirai Takashi)
  * Change '...' to horizontal ellipsis character
  * php &lt;5.4 compat: array syntax (#313)
  * Add autocomplete attributes to login form</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Replace %__-type macro indirections.
- Replace bash-specific syntax in scriptlets by POSIX sh.</changelog>
  <changelog author="jimmy@boombatower.com" date="1563451200">- Update to version 4.7.2:
  * Release 4.7.2
  * MySQL: Fix getting foreign keys
  * Fix table status in PostgreSQL 12 (bug #683)
  * Fix displaying SQL command after Save and continue edit
  * PostgreSQL: Display definitions of materialized views (bug #682)
  * Support for viewing and editing of column comments in mssql driver
  * PostgreSQL: Fix setting column comments on new table
  * MySQL: Fix displaying multi-columns foreign keys (bug #675)
  * Check if PDO SSL Attributes are set within config, and only set them in PDO Options. otherwise Mysql PDO throws errors if attribute is set and empty
  * Elasticsearch: Show executed query as a json
  * MongoDB: number of records should be count on provide rows
  * Keep font size in all tables.
  * travis: test on php 5.6-7.3 (#330)
  * Cache busting for adminer.css
  * Always pass the SRID part of a geometry property with the GeomFromText function
  * Update rmsoft designs
  * Allow bruteForceKey to be overwritten (#342)
  * Allow overwriting tables when copying them
  * Update rmsoft design
  * Stretch footer over the whole table width (bug #624)
  * Do not attempt logging in without password (bug #676)
  * Fix typo in translation (bug #673)
  * missing translation DE
  * Fix too small #lang margin on pepa-linha design
  * Fix creating users and changing password in MySQL 8 (bug #663)
  * Fix #tables margin (#326)</changelog>
  <changelog author="jimmy@boombatower.com" date="1567080000">- Update to version 4.7.3:
  * Release 4.7.3
  * Fix blocking of concurrent instances in PHP &gt;7.2 (bug #703)
  * setup Mongo authSource by ENV
  * Reset table after changing DB
  * Move &lt;p&gt; after a possible error
  * Allow editing foreign keys pointing to tables in other database/schema (bug #694)
  * MS SQL: Support foreign keys to other DB
  * Do not display error for foreign keys to other databases
  * Save bytes
  * MSSQL: use textarea in edit form for Memo type (#357)
  * MySQL: Support STORED GENERATED
  * SQLite: Skip renaming when recreating table if not necessary
  * SQLite: Preserve auto increment when recreating table
  * SQLite: Allow setting auto increment for empty tables
  * Remove extra space in alter table command
  * SQLite: Handle error in altering table (bug #697)
  * init mancave-hever design
  * MySQL: Allow editing rows identified by negative floats (bug #695)
  * added floating footer css for adminer-theme-mancave2-2.1.alpha
  * Add a comment (bug #691)
  * Use is_numeric()
  * Support MariaDB virtual columns
  * MySQL: Speed up displaying tables in large databases (bug #700)
  * Support unquoted floats in export
  * SQLite: Quote strings stored in integer columns in export (bug #696)
  * MySQL: Skip editing generated columns
  * Add AdminerLoginIp
  * Close &lt;/ul&gt; of logins</changelog>
  <changelog author="jimmy@boombatower.com" date="1571745600">- Update to version 4.7.4:
  * Release 4.7.4
  * Fix XSS if Adminer is accessible at URL /data:
  * Do not put unused doc links to single driver compiled version
  * Fix PostgreSQL doc root
  * Save bytes
  * add links to oracle docs
  * add links to postgres docs
  * Bump version</changelog>
  <changelog author="jimmy@boombatower.com" date="1574856000">- Update to version 4.7.5:
  * Release 4.7.5
  * Re-apply https://github.com/vrana/adminer/pull/363/commits/89b6e9bb
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Stop using adsrc column
  * fixed: SQL command for insert, create table, etc. new: create/rename table, add/drop/change type for column
  * Fix brazilian portuguese translation
  * Swedish translation
  * Update hever design
  * Don't overwrite variable
  * Add id="" to cells with failed inline edit (bug #708)
  * Unify dumpTable declarations (bug #707)
  * PostgreSQL, Oracle: Set schema for EXPLAIN queries in SQL command (bug #706)
  * Initialize version-noverify sooner (bug #705)
  * Make context in qsa() optional
  * Delete extra newlines
  * correct complement of responsive media query
  * update lucas-sandery theme
  * Add funding</changelog>
  <changelog author="jimmy@boombatower.com" date="1580472000">- Update to version 4.7.6:
  * Release 4.7.6
  * Fix comparing IPs
  * Update readme
  * Add example for using SQLite with Editor
  * PostgreSQL: Support exporting views
  * Disallow connecting to ports &gt; 65535 (bug #730)
  * Display time of procedure execution
  * Hide columns when rendering
  * Speed up alter table form
  * Fix clicking on non-input fields in alter table
  * Editor: Fix focusing foreign key search in select
  * MySQL: Always set foreign_key_checks in export</changelog>
  <changelog author="jimmy@boombatower.com" date="1589198400">- Update to version 4.7.7:
  * Release 4.7.7
  * Fix open redirect if Adminer is accessible at //adminer.php%2F@ (thanks to Prakash Sharma)
  * Update Finnish translation
  * Fix typo in Greek translation
  * Add missing translation
  * Fix forwarded IP comparison in login-ip plugin
  * Release 4.7.6</changelog>
  <changelog author="elimat@opensuse.org" date="1609848000">- Update to version 4.7.8:
  * Release 4.7.8
  * MySQL: Use renamed variable
  * Avoid PDO exceptions in PHP 8
  * Fix method call after #406
  * Improve check for numeric ports (bug #769)
  * Add missing method
  * Fix compatibility with PHP 8
  * Avoid each() not available in PHP 8
  * Fix style
  * Escape : also in remove_from_param</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610798400">- BuildRequires php-cli</changelog>
  <changelog author="Jimmy Berry &lt;jimmy@boombatower.com&gt;" date="1611835200">- Drop virtual firebird package since php-firebird was dropped.
  See sr#863764 for Factory decline.</changelog>
  <changelog author="jimmy@boombatower.com" date="1612785600">- Update to version 4.7.9:
  * Release 4.7.9
  * Reorder changes
  * Editor: Avoid trailing dot in export filename
  * Skip impossible condition ($link always contains ?username=)
  * Fix displayed foreign key columns from other DB (bug #766)
  * Do not display empty database in the list twice
  * Display CSRF logout error after connecting
  * Fix displaying type mapping for Elasticsearch &gt;= 6.0
  * MongoDB: Prefer modern extension
  * Fix MongoDB connect 'Database does not support password.' tips
  * Update bug numbers
  * Postgres - fix missing partitioned tables in navigation
  * Linkify URLs in SQL results
  * Title for select data link
  * Quote values with leading and trailing zeroes in CSV export (bug #777)
  * MySQL: Don't quote default value of text fields (bug #779)
  * fixed Unsupported operand types when $port is socket
  * Respect SQL command URL parameters
  * Fix XSS in browsers which don't encode URL parameters (bug #775)
  * SQLite: Set busy_timeout to 500
  * PostgreSQL 11: Create PRIMARY KEY for auto increment columns
  * PostgreSQL: Support smallserial
  * Add comment
  * PostgreSQL PDO: Support PgBouncer, unsupport PostgreSQL &lt; 9.1 (bug #771)
  * fix wrong hungarian translation
  * Editor: Cast to string when searching (bug #325)
  * Don't syntax highlight during IME composition (bug #747)
  * PostgreSQL: Use bigserial for bigint auto increment (bug #765, regression from 3.0.0)
  * MSSQL: Don't trucate displayed comments to 30 chars (use varchar maximum of 8000 upon casting)
  * Update Korean translation (thanks to B. Cansmile Cha)
  * add alternative design dracula theme
  * show correct collation for PostgresSQL
  * PostgreSQL: Fix current schema in view definition
  * Add external designs as submodules
  * Fixes to lucas-sandery theme
  * Do not export names in quotes with sql_mode='ANSI_QUOTES' (bug #749)
  * Fix PgSQL generated always as identity fix
  * Update Russian translation.
  * Update Ukrainian translation.
  * PostgreSQL: Export all FKs after all CREATE TABLE
  * MySQL, MariaDB: Fix doc links
  * Do not display SQL function for checkbox
  * Fix style (bug #743)
  * PostgreSQL: Fix dollar-quoted syntax highlighting (bug #738)
  * Elasticsearch, ClickHouse: Do not print response if HTTP code is not 200
  * Add basic Makefile.
  * Travis: add php 7.4 &amp;&amp; 8.0
  * Re-enable PHP warnings</changelog>
</package>
<package pkgid="773a9fc0df2b5d0319e3ee1f7015b3cf2cf10a5f4df536ebc5a6443832d59ed6" name="adminer-designs" arch="noarch">
  <version epoch="0" ver="4.7.9" rel="lp152.2.3.1"/>
  <changelog author="jimmy@boombatower.com" date="1509192000">- Disable elasticsearch and mssql since the dependencies are no
  longer present in Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1516190400">- s/or/OR/ in License.
- Update to version 4.4.0:
  * Release 4.4.0
  * Allow sending multiple CSP headers
  * Use __construct for constructor
  * Set session cache limiter only without session.auto_start (bug #586)
  * Add missing newline
  * Require specifying credentials in login-sqlite plugin
  * Avoid count(null)
  * Disallow PHP 5.3 in Travis
  * Disallow connecting to privileged ports (thanks to hyp3rlinx)
  * Rate limit password-less login attempts from the same IP address (thanks to hyp3rlinx)
  * Use HTTPS
  * Use HTTPS in doc_link()
  * Do not set '' for empty enum
  * Fix select function onchange
  * Clone all event handlers in cloneNode()
  * Use border-collapse to prevent unnecessary wrapping in Chrome
  * Fix whitespace
  * Fix selectCount() in information_schema
  * Fix SQL command toggle
  * Disallow scripts without nonce
  * Fix wrapping in Create table
  * Use script_src for &lt;script src&gt;
  * Fix typo in script()
  * Do not send empty CSP
  * Move inline event handlers to &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use the fact that we handle oninput in whisper()
  * Move inline event handlers to &lt;script&gt;
  * Editor: Fix Search data in tables
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler for skipping original
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingMoveRow()
  * Move inline event handlers to &lt;script&gt;
  * Use oninput instead of onchange
  * Move inline event handlers to &lt;script&gt;
  * Fix fieldChange() after 6353a898
  * Use oninput instead of onkeyup
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in on_help()
  * Move inline event handlers to &lt;script&gt;
  * Clone onchange in cloneNode()
  * Move inline event handlers to &lt;script&gt;
  * Allow searching data in tables by Ctrl+Enter
  * Move inline event handlers to &lt;script&gt;
  * Fix selectors in schema after 58b2904d
  * Rely on event always passed to handlers
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingRemoveRow
  * Move inline event handlers to &lt;script&gt;
  * Use script() for &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in print_fieldset()
  * Use &lt;script&gt; instead of inline event handler in confirm()
  * Move inline event handlers to &lt;script&gt;
  * Return false from ajaxSetHtml()
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Move inline event handlers to &lt;script&gt;
  * Return false from toggle()
  * onchange='selectFieldChange
  * Use @this in selectFieldChange
  * Move inline event handlers to &lt;script&gt;
  * Fix indexesAddColumn after 14778165
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Allow customizing CSP
  * Allow img-src data: common in skins
  * Use JSON.parse if available
  * Add Content Security Policy
  * Always send security headers in customization
  * Add nosniff header
  * Use Referrer-Policy instead of &lt;meta name="referrer"&gt;
  * Editor: Fix doubleclick on database page
  * Fix a typo from 9cb28186
  * Use @this in JavaScript (prepares for removing inline event handlers)
  * Prevent PHP 7.1 warning about non-numeric values
  * Unindent doc-comments
  * Delete type="text/css" from &lt;style&gt; as it is the default in HTML5
  * Delete type="text/javascript" from &lt;script&gt; as it is the default in HTML5
  * Replace getElementsByTagName by shortcut for querySelectorAll
  * Use querySelector
  * Replace getElementById by shortcut for querySelector (requires IE8)
  * Fix skin for Chrome 61 (thanks to Dominik Ulrich)
  * Editor: Display field comment's text inside [] only in edit form
  * Fix hebrew typos (#228)
  * Add new Hebrew translations
  * Add Hebrew translation
  * Editor: Don't set time zone from PHP
  * Make sure all sidebar elements are pushed down, not just the form.
  * Update AdminerTablesFilter to produce li as per c9801e2e2418
  * MySQL: Remove dedicated view for replication status
  * Sort table names (bug #552)
  * Update es.inc.php
  * Add a donate link</changelog>
  <changelog author="jimmy@boombatower.com" date="1516881600">- Update to version 4.5.0:
  * Release 4.5.0
  * Fix tests after 95d02bb9
  * Simplify drop object confirmation questions
  * Translate message added in 4.4.0
  * Display name of the object in confirmation when dropping it
  * Display error when getting row to edit
  * Avoid CONVERT() except in MySQL (bug #509)
  * Bump version
  * MySQL: Support routines with comments in parameters (bug #460)
  * Verify if adminer.version was created on www.adminer.org
  * Store current Adminer version server-side to avoid excessive requests
  * Send token as last param
  * Allow using adminer.invalid by other users in a group
  * Extract file_open_lock and file_write_unlock
  * Display boolean values as code (bug #562)
  * MariaDB: Support fulltext and spatial indexes in InnoDB (bug #583)
  * PostgreSQL: Display foreign tables (bug #576)
  * Add designs.php
  * Fix compiled version after 5cc831c1
  * Hide window.opener from pages opened in a new window (bug #561)
  * Fix GPL version
  * Add plugin for switching designs
  * Display bold parts of error (bug #565)
  * Add bottom border to last cells
  * Editor: Fix displaying of false values in PostgreSQL (bug #568)
  * Decrease float precision (bug #578)
  * Add ability to override file name (path) when loading dump from webserver
  * Support current_timestamp() as default of time fields (bug #572)
  * Display newlines in column comments (bug #573)
  * MySQL: Support geometry in MySQL 8 (bug #574)
  * MSSQL driver fixed for freetds drivers. See bug #167, #291
  * Fix search focus (regression from 4.4.0)
  * Compatibility with PHP &lt; 5.3
  * Add mongodb as a possible driver
  * Save bytes
  * php7 support with minimal changes of original code
  * PostgreSQL: Export DROP SEQUENCE if dropping table
  * PostgreSQL: Do not export triggers if not requested
  * Ignore removed CREATE+ALTER mode in trigger_sql()
  * Fix whitespace
  * CSP: Allow any CSS
  * adminer-theme-mancave2-2.0.alpha
  * Fix NULL value in edit form with Postgres
  * Do not warn about MySQL specific functions
  * Fix single driver non-MySQL compiled versions (regression from 150301ed)
  * Hide driver selection in single-driver version (regression from e762a6aa)
  * Unify HTML for list of tables in Editor according to Adminer
  * Encapsulate fulltext part in search box into &lt;div&gt;
  * Enhance ElasticSearch integration
  * Allow PHP 5.6 in Travis
  * Select numeric database name in DB list (bug #580)
  * SQLite: Enable foreign key checks
  * CSP: Allow any images, media and fonts, disallow base-uri
  * Define JS functions in AdminerTablesFilter sooner
  * Adminer: Fix Search data in tables</changelog>
  <changelog author="jimmy@boombatower.com" date="1517832000">- Update to version 4.6.0:
  * Release 4.6.0
  * Fix affected rows after getting warnings
  * Fix number of affected rows after getting warnings
  * Fix test
  * Fix 5.1 being displayed as 5.09999...
  * PRIMARY KEY in SQLite
  * Add design Esterka
  * Disable autocompleting password on create user page
  * Use primary key to edit rows even if not selected
  * Space between DB and Use
  * Translate DB
  * Select converted fields only once
  * Don't count rows if we reached the end
  * Fix count_rows with more than one group by column
  * Use separator in limit1
  * SQLite: Limit rows in data manipulation without unique key
  * Document that tests don't work with oninput
  * PostgreSQL: Limit rows in data manipulation without unique key
  * Don't use ctid as it's not stable
  * Move variables close to their usage
  * Limit non-unique where updates
  * Use Oid as the name of the column
  * Save bytes
  * Update rmsoft design
  * MySQL: Add FIND_IN_SET search operator
  * Add rmsoft design
  * MySQL: Add floor and ceil functions
  * Fix links to PostgreSQL 10 documentation
  * Delete unused variable
  * Display options for timestamp columns when creating a new table (thanks to Robert Vlach)
  * Don't display warnings for failed queries
  * Fix variable name
  * Reorder variables
  * Use pg_last_notice only with pgsql
  * Print warnings in call
  * Pass start time to selectQuery
  * PostgreSQL: Display warnings
  * Return string from warnings()
  * Display warnings in messages
  * Show select warnings
  * Support X-Forwarded-Prefix (e.g. Traefik PathPrefixStrip feature)
  * Lowercase EXPLAIN but don't translate it
  * Move explain below warnings
  * Fix return type
  * MySQL: Display warnings in SQL command
  * Quote default values not starting with a letter
  * Stop redirecting links via adminer.org
  * Fix min_version use
  * Quote dates in default value
  * Fully support functions in default values
  * Fix min_version use
  * PostgreSQL: Allow now() as default value (bug #525)
  * Fix edit_type after 1f21cd43
  * PostgreSQL: Allow editing views with uppercase letters (bug #467)
  * PostgreSQL: Allow creating trigger functions
  * Add placeholders
  * PostgreSQL: Support functions
  * Add min_version to compile.php
  * SimpleDB: Document that allow_url_fopen is required (bug #340)
  * Focus correct field in selectSearch
  * Support JSON since MariaDB 10.2 (bug #590)
  * Use min_version
  * Add min_version
  * Save bytes
  * add malay translation
  * Added and translated missing keys in polish translation
  * Update compatibility with TinyMCE v4 (#247)
  * Fix elastic after ef5a7639
  * fix elastic.inc.php to work on PHP 5.2
  * Fix counting selected rows after going back to select page</changelog>
  <changelog author="jimmy@boombatower.com" date="1518177600">- Update to version 4.6.1:
  * Release 4.6.1
  * Round 9.2 to 9.2
  * MariaDB: Links to documentation in syntax highlighting
  * Display notification about performing action after relogin
  * Reorder changes
  * Allow specifying server name displayed in breadcrumbs
  * MariaDB: Links to documentation
  * Reorder changes
  * Remove .lcZ from timeFormat (bug #593)
  * Add todo
  * Add more system tables help links
  * Respect empty tableName in tablesPrint
  * Use tableName() in table.inc.php
  * Avoid qsl in a loop
  * Support Shift+click in server export
  * Avoid qsl in a loop
  * Sticky position of table actions
  * Document regression
  * Avoid qsl in check[]
  * Avoid qsl in a loop
  * Mark optional parameter
  * SQLite: Support ` in PRIMARY KEY
  * Avoid Invalid credentials with no credentials
  * SQLite: Allow deleting PRIMARY KEY from tables with auto increment
  * Do not wrap alter table thead
  * Add version() to use in plugins
  * Select original if nothing else is selected
  * Remove nested array
  * Support connecting to MySQL via SSL
  * Display Invalid credentials if connection error is empty
  * Delete unused functions
  * Ignore functions in Min_Driver
  * Remove unnecessary quotes
  * Add truncate_sql to PostgreSQL
  * PostgreSQL: Unescape bytea fields
  * Save bytes
  * Add missing function to compile.php
  * PostgreSQL: Upload binary files to bytea fields
  * Allow using number_type() as pattern
  * Translate thousands separator in JS
  * Editor: Use type=search for Search tables
  * Move tableCheck() below &lt;/form&gt;
  * Pass operator from db.inc.php
  * PostgreSQL: Cast to string when searching using LIKE (bug #325)
  * MySQL: Support non-utf8 charset in search in column
  * Use ST_GeomFromText in MySQL 8 (bug #574)
  * Do not modify $_GET["where"]
  * Display empty operator as LIKE %%
  * Fix whitespace
  * Avoid deprecated each()
  * PostgreSQL: Fix condition for selecting no rows
  * Fix error display in Search tables
  * PostgreSQL: Don't treat interval type as number (bug #474)
  * Pass required parameter
  * Use existing variable
  * Add class to use in designs
  * Use primary key instead of LIMIT 1 if available</changelog>
  <changelog author="jimmy@boombatower.com" date="1519128000">- Update to version 4.6.2:
  * Release 4.6.2
  * Fix test
  * Fix typo
  * Comment
  * Use function after declaring it
  * Remove test server
  * Make test works with MariaDB
  * Make test work on wide screen
  * Editor: Fix displaying of true boolean values
  * Comment
  * Store current version before authentication and in Editor
  * Update design (thanks to Jan)
  * Add missing fullstop
  * Version 4.6.1.1 (#254)
  * Turkish language file updated.
  * Align Whole result
  * Always hide import
  * Print email only with rows or page
  * Move import out of footer
  * Move pagination to fieldset
  * Update readme
  * Make Login test work with jush-textarea
  * Add SQLite test
  * Test warnings
  * Convert tests to Katalon
  * Promote MongoDB, demote Oracle and MS SQL
  * Capitalize Whole result
  * Fill footer to the right
  * Make footer smaller
  * Move pagination outside footer
  * Wrap more into if (!is_ajax)
  * Move &lt;p&gt;
  * PostgreSQL: Add IF EXISTS to DROP SEQUENCE in export (bug #595)
  * Make footer border more obvious
  * Make footer margin not transparent
  * Centralize oninput
  * Speed up alter table
  * Use Unicode arrows in alt
  * Avoid hiding column only to show it later
  * Respect unchecked Default values
  * Update UI when coming from history
  * PostgreSQL: Fix exporting string default values (thanks to PotatoPangolin)
  * Semi-transparent border on table actions
  * Fix exporting sequences in PostgreSQL 10
  * Do not append empty values
  * Shorten JSON values in select (bug #594)
  * Fix id in databases list
  * Suggest updating Git submodules
  * Declare MariaDB support</changelog>
  <changelog author="jimmy@boombatower.com" date="1530187200">- Update to version 4.6.3:
  * Release 4.6.3
  * Fix typo
  * Revert "PgSQL search operator "SQL" added"
  * Add TODO
  * MySQL: Disallow LOAD DATA LOCAL INFILE
  * PostgreSQL: Export false as 0 in PDO (bug #619)
  * mssql: ignore serverproperty error
  * Add spaces
  * Fix table list in sidebar in designs/pokorny (#278)
  * Allow AdminerTablesFilter plugin to be used with third-party table list plugins (#275)
  * Recommend inlining the hash
  * Improve error message
  * Escape \ in enum edit
  * Improve enum parsing
  * Order database names in MySQL 8(bug #613)
  * Respect 'session.cookie_secure' if it is On
  * Copy triggers when copying table
  * MS SQL: Support port with sqlsrc
  * PostgreSQL: Do not cast uuid searches to text (bug #608)
  * Editor: Do not check boolean checkboxes with false in PostgreSQL (bug #607)
  * Disallow using password-less databases
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Report version
  * Document that Elasticsearch requires allow_url_fopen
  * PostgreSQL: Do not cast boolean to text on search (#264)
  * PostgreSQL: Do not cast number searches to text
  * PostgreSQL: Fix editing data in views (bug #605)
  * Elasticsearch: Fix PHP warning
  * PgSQL search operator "SQL" added
  * PostgreSQL: Fix slow query
  * Update JUSH
  * Display that *.gz files are supported in file upload
  * Save bytes
  * Stay on import page when switching database
  * Decrease timeout for running slow queries from 5 seconds to 2 seconds
  * Simplify running slow queries
  * Remove unused argument
  * Update JUSH
  * Use JUSH from GitHub
  * Clarify changelog
  * Display missing database in navigation
  * MongoDB driver: Add create_database methods.
  * Fix comment
  * Add $driver to global variables
  * Add $driver to global variables
  * Use $adminer-&gt;operators
  * PostgreSQL: Do not cast time search
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * MySQL: Use CONVERT() only when searching for non-ASCII (bug #603)
  * Remove optional submodule
  * Update adminer-design (rmsoft) to version 4.6.2.1
  * Wrap lines
  * Fix displaying info about non-alphabetical objects (bug #599)
  * Allow connecting to different drivers in login-servers
  * Wrap long line
  * Add login-otp plugin
  * Update translation
  * Comment
  * Centralize stopping session
  * Stop session before connecting (thanks to Kareem Zidane)
  * Update design (thanks to Jan)
  * PDO: Support binary fields download
  * Don't try to check missing checkboxes
  * Use file caching only in non-dev
  * Editor: Delete images from compiled version
  * Remove driver from file URLs (stored in path)
  * Fix image in compiled version
  * Use single \ in ' strings
  * &amp;nbsp; is not needed with border-collapse</changelog>
  <changelog author="jimmy@boombatower.com" date="1543147200">- Update to version 4.7.0:
  * Release 4.7.0
  * Fix whitespace
  * Clarify change description
  * Updated theme for v4.7 (#310)
  * Update zh-tw.inc.php (#299)
  * Fix a typo
  * Delete copy/pasted code
  * Change inline style to class name
  * Wrap `table.nowrap` with `div[style="overflow-x: auto"]`
  * Fix MariaDB link to numeric types
  * MySQL: Descending indexes in MySQL 8 (bug #643)
  * PostgreSQL: Support for GENERATED BY DEFAULT AS IDENTITY
  * Fix style
  * ClickHouse: support for decimal types, SQL operator
  * ClickHouse: Fix for drop multiple tables and views
  * ClickHouse ALTER DELETE and ALTER UPDATE support
  * ClickHouse fix select-like queries format postfix
  * Avoid overwriting existing tables when copying tables (bug #642)
  * PostgreSQL: Export DESC indexes (bug #639)
  * Recognize current_timestamp() in edit (bug #638)
  * Hide import from server if no path
  * Simplify storing executed SQL queries to bookmarks
  * fix editor theme (#302)
  * Remove unused code
  * MySQL: Recognize ON UPDATE current_timestamp() (bug #632)
  * PostgreSQL: Quote array values in export (bug #621)
  * Add plugin pretty-json-column
  * Update translation
  * DOM not ready when restoring `adminer_tables_filter` (#289)
  * Add Georgian translation
  * Update mvt design
  * Fix design (thanks to apmuthu)
  * ClickHouse: Fix escaping
  * ClickHouse support alpha version
  * Fix typo in Vietnamese translation
  * Add class 'layout' to all non-data tables
  * Set default db to sqlsrv connection
  * Warn when using password with leading or trailing spaces
  * Update donation link
  * Make maxlength in all fields a soft limit
  * Increase username maxlength to 80 (bug #623)
  * Fixes foreign key pattern in MySQL
  * Fix function change with set data type (thanks to osoba hrdelnata)
  * Adminer theme
  * Reset event handlers after cloning (thanks to Salko)
  * Fix inline editing of empty cells</changelog>
  <changelog author="jimmy@boombatower.com" date="1548331200">- Update to version 4.7.1:
  * Release 4.7.1
  * Remember visible columns in Create Table form (bug #493)
  * Editor: Allow disabling boolean fields in PostgreSQL (bug #640)
  * fix: haeckel adminer.css (#323)
  * SQLite: Hide server field in login form
  * Improve MariaDB status variables link (bug #658)
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Display the tables scrollbar (bug #647)
  * Document change
  * Fix PHP 7.3 compatibility (#318)
  * Position of the background database image changed. (#316)
  * Fix mvt theme (#315)
  * Use &lt;ul&gt; list for logins (#314)
  * Add missing Japanese translations (thanks to Shirai Takashi)
  * Change '...' to horizontal ellipsis character
  * php &lt;5.4 compat: array syntax (#313)
  * Add autocomplete attributes to login form</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Replace %__-type macro indirections.
- Replace bash-specific syntax in scriptlets by POSIX sh.</changelog>
  <changelog author="jimmy@boombatower.com" date="1563451200">- Update to version 4.7.2:
  * Release 4.7.2
  * MySQL: Fix getting foreign keys
  * Fix table status in PostgreSQL 12 (bug #683)
  * Fix displaying SQL command after Save and continue edit
  * PostgreSQL: Display definitions of materialized views (bug #682)
  * Support for viewing and editing of column comments in mssql driver
  * PostgreSQL: Fix setting column comments on new table
  * MySQL: Fix displaying multi-columns foreign keys (bug #675)
  * Check if PDO SSL Attributes are set within config, and only set them in PDO Options. otherwise Mysql PDO throws errors if attribute is set and empty
  * Elasticsearch: Show executed query as a json
  * MongoDB: number of records should be count on provide rows
  * Keep font size in all tables.
  * travis: test on php 5.6-7.3 (#330)
  * Cache busting for adminer.css
  * Always pass the SRID part of a geometry property with the GeomFromText function
  * Update rmsoft designs
  * Allow bruteForceKey to be overwritten (#342)
  * Allow overwriting tables when copying them
  * Update rmsoft design
  * Stretch footer over the whole table width (bug #624)
  * Do not attempt logging in without password (bug #676)
  * Fix typo in translation (bug #673)
  * missing translation DE
  * Fix too small #lang margin on pepa-linha design
  * Fix creating users and changing password in MySQL 8 (bug #663)
  * Fix #tables margin (#326)</changelog>
  <changelog author="jimmy@boombatower.com" date="1567080000">- Update to version 4.7.3:
  * Release 4.7.3
  * Fix blocking of concurrent instances in PHP &gt;7.2 (bug #703)
  * setup Mongo authSource by ENV
  * Reset table after changing DB
  * Move &lt;p&gt; after a possible error
  * Allow editing foreign keys pointing to tables in other database/schema (bug #694)
  * MS SQL: Support foreign keys to other DB
  * Do not display error for foreign keys to other databases
  * Save bytes
  * MSSQL: use textarea in edit form for Memo type (#357)
  * MySQL: Support STORED GENERATED
  * SQLite: Skip renaming when recreating table if not necessary
  * SQLite: Preserve auto increment when recreating table
  * SQLite: Allow setting auto increment for empty tables
  * Remove extra space in alter table command
  * SQLite: Handle error in altering table (bug #697)
  * init mancave-hever design
  * MySQL: Allow editing rows identified by negative floats (bug #695)
  * added floating footer css for adminer-theme-mancave2-2.1.alpha
  * Add a comment (bug #691)
  * Use is_numeric()
  * Support MariaDB virtual columns
  * MySQL: Speed up displaying tables in large databases (bug #700)
  * Support unquoted floats in export
  * SQLite: Quote strings stored in integer columns in export (bug #696)
  * MySQL: Skip editing generated columns
  * Add AdminerLoginIp
  * Close &lt;/ul&gt; of logins</changelog>
  <changelog author="jimmy@boombatower.com" date="1571745600">- Update to version 4.7.4:
  * Release 4.7.4
  * Fix XSS if Adminer is accessible at URL /data:
  * Do not put unused doc links to single driver compiled version
  * Fix PostgreSQL doc root
  * Save bytes
  * add links to oracle docs
  * add links to postgres docs
  * Bump version</changelog>
  <changelog author="jimmy@boombatower.com" date="1574856000">- Update to version 4.7.5:
  * Release 4.7.5
  * Re-apply https://github.com/vrana/adminer/pull/363/commits/89b6e9bb
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Stop using adsrc column
  * fixed: SQL command for insert, create table, etc. new: create/rename table, add/drop/change type for column
  * Fix brazilian portuguese translation
  * Swedish translation
  * Update hever design
  * Don't overwrite variable
  * Add id="" to cells with failed inline edit (bug #708)
  * Unify dumpTable declarations (bug #707)
  * PostgreSQL, Oracle: Set schema for EXPLAIN queries in SQL command (bug #706)
  * Initialize version-noverify sooner (bug #705)
  * Make context in qsa() optional
  * Delete extra newlines
  * correct complement of responsive media query
  * update lucas-sandery theme
  * Add funding</changelog>
  <changelog author="jimmy@boombatower.com" date="1580472000">- Update to version 4.7.6:
  * Release 4.7.6
  * Fix comparing IPs
  * Update readme
  * Add example for using SQLite with Editor
  * PostgreSQL: Support exporting views
  * Disallow connecting to ports &gt; 65535 (bug #730)
  * Display time of procedure execution
  * Hide columns when rendering
  * Speed up alter table form
  * Fix clicking on non-input fields in alter table
  * Editor: Fix focusing foreign key search in select
  * MySQL: Always set foreign_key_checks in export</changelog>
  <changelog author="jimmy@boombatower.com" date="1589198400">- Update to version 4.7.7:
  * Release 4.7.7
  * Fix open redirect if Adminer is accessible at //adminer.php%2F@ (thanks to Prakash Sharma)
  * Update Finnish translation
  * Fix typo in Greek translation
  * Add missing translation
  * Fix forwarded IP comparison in login-ip plugin
  * Release 4.7.6</changelog>
  <changelog author="elimat@opensuse.org" date="1609848000">- Update to version 4.7.8:
  * Release 4.7.8
  * MySQL: Use renamed variable
  * Avoid PDO exceptions in PHP 8
  * Fix method call after #406
  * Improve check for numeric ports (bug #769)
  * Add missing method
  * Fix compatibility with PHP 8
  * Avoid each() not available in PHP 8
  * Fix style
  * Escape : also in remove_from_param</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610798400">- BuildRequires php-cli</changelog>
  <changelog author="Jimmy Berry &lt;jimmy@boombatower.com&gt;" date="1611835200">- Drop virtual firebird package since php-firebird was dropped.
  See sr#863764 for Factory decline.</changelog>
  <changelog author="jimmy@boombatower.com" date="1612785600">- Update to version 4.7.9:
  * Release 4.7.9
  * Reorder changes
  * Editor: Avoid trailing dot in export filename
  * Skip impossible condition ($link always contains ?username=)
  * Fix displayed foreign key columns from other DB (bug #766)
  * Do not display empty database in the list twice
  * Display CSRF logout error after connecting
  * Fix displaying type mapping for Elasticsearch &gt;= 6.0
  * MongoDB: Prefer modern extension
  * Fix MongoDB connect 'Database does not support password.' tips
  * Update bug numbers
  * Postgres - fix missing partitioned tables in navigation
  * Linkify URLs in SQL results
  * Title for select data link
  * Quote values with leading and trailing zeroes in CSV export (bug #777)
  * MySQL: Don't quote default value of text fields (bug #779)
  * fixed Unsupported operand types when $port is socket
  * Respect SQL command URL parameters
  * Fix XSS in browsers which don't encode URL parameters (bug #775)
  * SQLite: Set busy_timeout to 500
  * PostgreSQL 11: Create PRIMARY KEY for auto increment columns
  * PostgreSQL: Support smallserial
  * Add comment
  * PostgreSQL PDO: Support PgBouncer, unsupport PostgreSQL &lt; 9.1 (bug #771)
  * fix wrong hungarian translation
  * Editor: Cast to string when searching (bug #325)
  * Don't syntax highlight during IME composition (bug #747)
  * PostgreSQL: Use bigserial for bigint auto increment (bug #765, regression from 3.0.0)
  * MSSQL: Don't trucate displayed comments to 30 chars (use varchar maximum of 8000 upon casting)
  * Update Korean translation (thanks to B. Cansmile Cha)
  * add alternative design dracula theme
  * show correct collation for PostgresSQL
  * PostgreSQL: Fix current schema in view definition
  * Add external designs as submodules
  * Fixes to lucas-sandery theme
  * Do not export names in quotes with sql_mode='ANSI_QUOTES' (bug #749)
  * Fix PgSQL generated always as identity fix
  * Update Russian translation.
  * Update Ukrainian translation.
  * PostgreSQL: Export all FKs after all CREATE TABLE
  * MySQL, MariaDB: Fix doc links
  * Do not display SQL function for checkbox
  * Fix style (bug #743)
  * PostgreSQL: Fix dollar-quoted syntax highlighting (bug #738)
  * Elasticsearch, ClickHouse: Do not print response if HTTP code is not 200
  * Add basic Makefile.
  * Travis: add php 7.4 &amp;&amp; 8.0
  * Re-enable PHP warnings</changelog>
</package>
<package pkgid="cc213420d7183cb13c627f1db5cd5310264396c2ae07eed2e1e576b6c770f298" name="adminer-editor" arch="noarch">
  <version epoch="0" ver="4.7.9" rel="lp152.2.3.1"/>
  <changelog author="jimmy@boombatower.com" date="1509192000">- Disable elasticsearch and mssql since the dependencies are no
  longer present in Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1516190400">- s/or/OR/ in License.
- Update to version 4.4.0:
  * Release 4.4.0
  * Allow sending multiple CSP headers
  * Use __construct for constructor
  * Set session cache limiter only without session.auto_start (bug #586)
  * Add missing newline
  * Require specifying credentials in login-sqlite plugin
  * Avoid count(null)
  * Disallow PHP 5.3 in Travis
  * Disallow connecting to privileged ports (thanks to hyp3rlinx)
  * Rate limit password-less login attempts from the same IP address (thanks to hyp3rlinx)
  * Use HTTPS
  * Use HTTPS in doc_link()
  * Do not set '' for empty enum
  * Fix select function onchange
  * Clone all event handlers in cloneNode()
  * Use border-collapse to prevent unnecessary wrapping in Chrome
  * Fix whitespace
  * Fix selectCount() in information_schema
  * Fix SQL command toggle
  * Disallow scripts without nonce
  * Fix wrapping in Create table
  * Use script_src for &lt;script src&gt;
  * Fix typo in script()
  * Do not send empty CSP
  * Move inline event handlers to &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use the fact that we handle oninput in whisper()
  * Move inline event handlers to &lt;script&gt;
  * Editor: Fix Search data in tables
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler for skipping original
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingMoveRow()
  * Move inline event handlers to &lt;script&gt;
  * Use oninput instead of onchange
  * Move inline event handlers to &lt;script&gt;
  * Fix fieldChange() after 6353a898
  * Use oninput instead of onkeyup
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in on_help()
  * Move inline event handlers to &lt;script&gt;
  * Clone onchange in cloneNode()
  * Move inline event handlers to &lt;script&gt;
  * Allow searching data in tables by Ctrl+Enter
  * Move inline event handlers to &lt;script&gt;
  * Fix selectors in schema after 58b2904d
  * Rely on event always passed to handlers
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingRemoveRow
  * Move inline event handlers to &lt;script&gt;
  * Use script() for &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in print_fieldset()
  * Use &lt;script&gt; instead of inline event handler in confirm()
  * Move inline event handlers to &lt;script&gt;
  * Return false from ajaxSetHtml()
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Move inline event handlers to &lt;script&gt;
  * Return false from toggle()
  * onchange='selectFieldChange
  * Use @this in selectFieldChange
  * Move inline event handlers to &lt;script&gt;
  * Fix indexesAddColumn after 14778165
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Allow customizing CSP
  * Allow img-src data: common in skins
  * Use JSON.parse if available
  * Add Content Security Policy
  * Always send security headers in customization
  * Add nosniff header
  * Use Referrer-Policy instead of &lt;meta name="referrer"&gt;
  * Editor: Fix doubleclick on database page
  * Fix a typo from 9cb28186
  * Use @this in JavaScript (prepares for removing inline event handlers)
  * Prevent PHP 7.1 warning about non-numeric values
  * Unindent doc-comments
  * Delete type="text/css" from &lt;style&gt; as it is the default in HTML5
  * Delete type="text/javascript" from &lt;script&gt; as it is the default in HTML5
  * Replace getElementsByTagName by shortcut for querySelectorAll
  * Use querySelector
  * Replace getElementById by shortcut for querySelector (requires IE8)
  * Fix skin for Chrome 61 (thanks to Dominik Ulrich)
  * Editor: Display field comment's text inside [] only in edit form
  * Fix hebrew typos (#228)
  * Add new Hebrew translations
  * Add Hebrew translation
  * Editor: Don't set time zone from PHP
  * Make sure all sidebar elements are pushed down, not just the form.
  * Update AdminerTablesFilter to produce li as per c9801e2e2418
  * MySQL: Remove dedicated view for replication status
  * Sort table names (bug #552)
  * Update es.inc.php
  * Add a donate link</changelog>
  <changelog author="jimmy@boombatower.com" date="1516881600">- Update to version 4.5.0:
  * Release 4.5.0
  * Fix tests after 95d02bb9
  * Simplify drop object confirmation questions
  * Translate message added in 4.4.0
  * Display name of the object in confirmation when dropping it
  * Display error when getting row to edit
  * Avoid CONVERT() except in MySQL (bug #509)
  * Bump version
  * MySQL: Support routines with comments in parameters (bug #460)
  * Verify if adminer.version was created on www.adminer.org
  * Store current Adminer version server-side to avoid excessive requests
  * Send token as last param
  * Allow using adminer.invalid by other users in a group
  * Extract file_open_lock and file_write_unlock
  * Display boolean values as code (bug #562)
  * MariaDB: Support fulltext and spatial indexes in InnoDB (bug #583)
  * PostgreSQL: Display foreign tables (bug #576)
  * Add designs.php
  * Fix compiled version after 5cc831c1
  * Hide window.opener from pages opened in a new window (bug #561)
  * Fix GPL version
  * Add plugin for switching designs
  * Display bold parts of error (bug #565)
  * Add bottom border to last cells
  * Editor: Fix displaying of false values in PostgreSQL (bug #568)
  * Decrease float precision (bug #578)
  * Add ability to override file name (path) when loading dump from webserver
  * Support current_timestamp() as default of time fields (bug #572)
  * Display newlines in column comments (bug #573)
  * MySQL: Support geometry in MySQL 8 (bug #574)
  * MSSQL driver fixed for freetds drivers. See bug #167, #291
  * Fix search focus (regression from 4.4.0)
  * Compatibility with PHP &lt; 5.3
  * Add mongodb as a possible driver
  * Save bytes
  * php7 support with minimal changes of original code
  * PostgreSQL: Export DROP SEQUENCE if dropping table
  * PostgreSQL: Do not export triggers if not requested
  * Ignore removed CREATE+ALTER mode in trigger_sql()
  * Fix whitespace
  * CSP: Allow any CSS
  * adminer-theme-mancave2-2.0.alpha
  * Fix NULL value in edit form with Postgres
  * Do not warn about MySQL specific functions
  * Fix single driver non-MySQL compiled versions (regression from 150301ed)
  * Hide driver selection in single-driver version (regression from e762a6aa)
  * Unify HTML for list of tables in Editor according to Adminer
  * Encapsulate fulltext part in search box into &lt;div&gt;
  * Enhance ElasticSearch integration
  * Allow PHP 5.6 in Travis
  * Select numeric database name in DB list (bug #580)
  * SQLite: Enable foreign key checks
  * CSP: Allow any images, media and fonts, disallow base-uri
  * Define JS functions in AdminerTablesFilter sooner
  * Adminer: Fix Search data in tables</changelog>
  <changelog author="jimmy@boombatower.com" date="1517832000">- Update to version 4.6.0:
  * Release 4.6.0
  * Fix affected rows after getting warnings
  * Fix number of affected rows after getting warnings
  * Fix test
  * Fix 5.1 being displayed as 5.09999...
  * PRIMARY KEY in SQLite
  * Add design Esterka
  * Disable autocompleting password on create user page
  * Use primary key to edit rows even if not selected
  * Space between DB and Use
  * Translate DB
  * Select converted fields only once
  * Don't count rows if we reached the end
  * Fix count_rows with more than one group by column
  * Use separator in limit1
  * SQLite: Limit rows in data manipulation without unique key
  * Document that tests don't work with oninput
  * PostgreSQL: Limit rows in data manipulation without unique key
  * Don't use ctid as it's not stable
  * Move variables close to their usage
  * Limit non-unique where updates
  * Use Oid as the name of the column
  * Save bytes
  * Update rmsoft design
  * MySQL: Add FIND_IN_SET search operator
  * Add rmsoft design
  * MySQL: Add floor and ceil functions
  * Fix links to PostgreSQL 10 documentation
  * Delete unused variable
  * Display options for timestamp columns when creating a new table (thanks to Robert Vlach)
  * Don't display warnings for failed queries
  * Fix variable name
  * Reorder variables
  * Use pg_last_notice only with pgsql
  * Print warnings in call
  * Pass start time to selectQuery
  * PostgreSQL: Display warnings
  * Return string from warnings()
  * Display warnings in messages
  * Show select warnings
  * Support X-Forwarded-Prefix (e.g. Traefik PathPrefixStrip feature)
  * Lowercase EXPLAIN but don't translate it
  * Move explain below warnings
  * Fix return type
  * MySQL: Display warnings in SQL command
  * Quote default values not starting with a letter
  * Stop redirecting links via adminer.org
  * Fix min_version use
  * Quote dates in default value
  * Fully support functions in default values
  * Fix min_version use
  * PostgreSQL: Allow now() as default value (bug #525)
  * Fix edit_type after 1f21cd43
  * PostgreSQL: Allow editing views with uppercase letters (bug #467)
  * PostgreSQL: Allow creating trigger functions
  * Add placeholders
  * PostgreSQL: Support functions
  * Add min_version to compile.php
  * SimpleDB: Document that allow_url_fopen is required (bug #340)
  * Focus correct field in selectSearch
  * Support JSON since MariaDB 10.2 (bug #590)
  * Use min_version
  * Add min_version
  * Save bytes
  * add malay translation
  * Added and translated missing keys in polish translation
  * Update compatibility with TinyMCE v4 (#247)
  * Fix elastic after ef5a7639
  * fix elastic.inc.php to work on PHP 5.2
  * Fix counting selected rows after going back to select page</changelog>
  <changelog author="jimmy@boombatower.com" date="1518177600">- Update to version 4.6.1:
  * Release 4.6.1
  * Round 9.2 to 9.2
  * MariaDB: Links to documentation in syntax highlighting
  * Display notification about performing action after relogin
  * Reorder changes
  * Allow specifying server name displayed in breadcrumbs
  * MariaDB: Links to documentation
  * Reorder changes
  * Remove .lcZ from timeFormat (bug #593)
  * Add todo
  * Add more system tables help links
  * Respect empty tableName in tablesPrint
  * Use tableName() in table.inc.php
  * Avoid qsl in a loop
  * Support Shift+click in server export
  * Avoid qsl in a loop
  * Sticky position of table actions
  * Document regression
  * Avoid qsl in check[]
  * Avoid qsl in a loop
  * Mark optional parameter
  * SQLite: Support ` in PRIMARY KEY
  * Avoid Invalid credentials with no credentials
  * SQLite: Allow deleting PRIMARY KEY from tables with auto increment
  * Do not wrap alter table thead
  * Add version() to use in plugins
  * Select original if nothing else is selected
  * Remove nested array
  * Support connecting to MySQL via SSL
  * Display Invalid credentials if connection error is empty
  * Delete unused functions
  * Ignore functions in Min_Driver
  * Remove unnecessary quotes
  * Add truncate_sql to PostgreSQL
  * PostgreSQL: Unescape bytea fields
  * Save bytes
  * Add missing function to compile.php
  * PostgreSQL: Upload binary files to bytea fields
  * Allow using number_type() as pattern
  * Translate thousands separator in JS
  * Editor: Use type=search for Search tables
  * Move tableCheck() below &lt;/form&gt;
  * Pass operator from db.inc.php
  * PostgreSQL: Cast to string when searching using LIKE (bug #325)
  * MySQL: Support non-utf8 charset in search in column
  * Use ST_GeomFromText in MySQL 8 (bug #574)
  * Do not modify $_GET["where"]
  * Display empty operator as LIKE %%
  * Fix whitespace
  * Avoid deprecated each()
  * PostgreSQL: Fix condition for selecting no rows
  * Fix error display in Search tables
  * PostgreSQL: Don't treat interval type as number (bug #474)
  * Pass required parameter
  * Use existing variable
  * Add class to use in designs
  * Use primary key instead of LIMIT 1 if available</changelog>
  <changelog author="jimmy@boombatower.com" date="1519128000">- Update to version 4.6.2:
  * Release 4.6.2
  * Fix test
  * Fix typo
  * Comment
  * Use function after declaring it
  * Remove test server
  * Make test works with MariaDB
  * Make test work on wide screen
  * Editor: Fix displaying of true boolean values
  * Comment
  * Store current version before authentication and in Editor
  * Update design (thanks to Jan)
  * Add missing fullstop
  * Version 4.6.1.1 (#254)
  * Turkish language file updated.
  * Align Whole result
  * Always hide import
  * Print email only with rows or page
  * Move import out of footer
  * Move pagination to fieldset
  * Update readme
  * Make Login test work with jush-textarea
  * Add SQLite test
  * Test warnings
  * Convert tests to Katalon
  * Promote MongoDB, demote Oracle and MS SQL
  * Capitalize Whole result
  * Fill footer to the right
  * Make footer smaller
  * Move pagination outside footer
  * Wrap more into if (!is_ajax)
  * Move &lt;p&gt;
  * PostgreSQL: Add IF EXISTS to DROP SEQUENCE in export (bug #595)
  * Make footer border more obvious
  * Make footer margin not transparent
  * Centralize oninput
  * Speed up alter table
  * Use Unicode arrows in alt
  * Avoid hiding column only to show it later
  * Respect unchecked Default values
  * Update UI when coming from history
  * PostgreSQL: Fix exporting string default values (thanks to PotatoPangolin)
  * Semi-transparent border on table actions
  * Fix exporting sequences in PostgreSQL 10
  * Do not append empty values
  * Shorten JSON values in select (bug #594)
  * Fix id in databases list
  * Suggest updating Git submodules
  * Declare MariaDB support</changelog>
  <changelog author="jimmy@boombatower.com" date="1530187200">- Update to version 4.6.3:
  * Release 4.6.3
  * Fix typo
  * Revert "PgSQL search operator "SQL" added"
  * Add TODO
  * MySQL: Disallow LOAD DATA LOCAL INFILE
  * PostgreSQL: Export false as 0 in PDO (bug #619)
  * mssql: ignore serverproperty error
  * Add spaces
  * Fix table list in sidebar in designs/pokorny (#278)
  * Allow AdminerTablesFilter plugin to be used with third-party table list plugins (#275)
  * Recommend inlining the hash
  * Improve error message
  * Escape \ in enum edit
  * Improve enum parsing
  * Order database names in MySQL 8(bug #613)
  * Respect 'session.cookie_secure' if it is On
  * Copy triggers when copying table
  * MS SQL: Support port with sqlsrc
  * PostgreSQL: Do not cast uuid searches to text (bug #608)
  * Editor: Do not check boolean checkboxes with false in PostgreSQL (bug #607)
  * Disallow using password-less databases
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Report version
  * Document that Elasticsearch requires allow_url_fopen
  * PostgreSQL: Do not cast boolean to text on search (#264)
  * PostgreSQL: Do not cast number searches to text
  * PostgreSQL: Fix editing data in views (bug #605)
  * Elasticsearch: Fix PHP warning
  * PgSQL search operator "SQL" added
  * PostgreSQL: Fix slow query
  * Update JUSH
  * Display that *.gz files are supported in file upload
  * Save bytes
  * Stay on import page when switching database
  * Decrease timeout for running slow queries from 5 seconds to 2 seconds
  * Simplify running slow queries
  * Remove unused argument
  * Update JUSH
  * Use JUSH from GitHub
  * Clarify changelog
  * Display missing database in navigation
  * MongoDB driver: Add create_database methods.
  * Fix comment
  * Add $driver to global variables
  * Add $driver to global variables
  * Use $adminer-&gt;operators
  * PostgreSQL: Do not cast time search
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * MySQL: Use CONVERT() only when searching for non-ASCII (bug #603)
  * Remove optional submodule
  * Update adminer-design (rmsoft) to version 4.6.2.1
  * Wrap lines
  * Fix displaying info about non-alphabetical objects (bug #599)
  * Allow connecting to different drivers in login-servers
  * Wrap long line
  * Add login-otp plugin
  * Update translation
  * Comment
  * Centralize stopping session
  * Stop session before connecting (thanks to Kareem Zidane)
  * Update design (thanks to Jan)
  * PDO: Support binary fields download
  * Don't try to check missing checkboxes
  * Use file caching only in non-dev
  * Editor: Delete images from compiled version
  * Remove driver from file URLs (stored in path)
  * Fix image in compiled version
  * Use single \ in ' strings
  * &amp;nbsp; is not needed with border-collapse</changelog>
  <changelog author="jimmy@boombatower.com" date="1543147200">- Update to version 4.7.0:
  * Release 4.7.0
  * Fix whitespace
  * Clarify change description
  * Updated theme for v4.7 (#310)
  * Update zh-tw.inc.php (#299)
  * Fix a typo
  * Delete copy/pasted code
  * Change inline style to class name
  * Wrap `table.nowrap` with `div[style="overflow-x: auto"]`
  * Fix MariaDB link to numeric types
  * MySQL: Descending indexes in MySQL 8 (bug #643)
  * PostgreSQL: Support for GENERATED BY DEFAULT AS IDENTITY
  * Fix style
  * ClickHouse: support for decimal types, SQL operator
  * ClickHouse: Fix for drop multiple tables and views
  * ClickHouse ALTER DELETE and ALTER UPDATE support
  * ClickHouse fix select-like queries format postfix
  * Avoid overwriting existing tables when copying tables (bug #642)
  * PostgreSQL: Export DESC indexes (bug #639)
  * Recognize current_timestamp() in edit (bug #638)
  * Hide import from server if no path
  * Simplify storing executed SQL queries to bookmarks
  * fix editor theme (#302)
  * Remove unused code
  * MySQL: Recognize ON UPDATE current_timestamp() (bug #632)
  * PostgreSQL: Quote array values in export (bug #621)
  * Add plugin pretty-json-column
  * Update translation
  * DOM not ready when restoring `adminer_tables_filter` (#289)
  * Add Georgian translation
  * Update mvt design
  * Fix design (thanks to apmuthu)
  * ClickHouse: Fix escaping
  * ClickHouse support alpha version
  * Fix typo in Vietnamese translation
  * Add class 'layout' to all non-data tables
  * Set default db to sqlsrv connection
  * Warn when using password with leading or trailing spaces
  * Update donation link
  * Make maxlength in all fields a soft limit
  * Increase username maxlength to 80 (bug #623)
  * Fixes foreign key pattern in MySQL
  * Fix function change with set data type (thanks to osoba hrdelnata)
  * Adminer theme
  * Reset event handlers after cloning (thanks to Salko)
  * Fix inline editing of empty cells</changelog>
  <changelog author="jimmy@boombatower.com" date="1548331200">- Update to version 4.7.1:
  * Release 4.7.1
  * Remember visible columns in Create Table form (bug #493)
  * Editor: Allow disabling boolean fields in PostgreSQL (bug #640)
  * fix: haeckel adminer.css (#323)
  * SQLite: Hide server field in login form
  * Improve MariaDB status variables link (bug #658)
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Display the tables scrollbar (bug #647)
  * Document change
  * Fix PHP 7.3 compatibility (#318)
  * Position of the background database image changed. (#316)
  * Fix mvt theme (#315)
  * Use &lt;ul&gt; list for logins (#314)
  * Add missing Japanese translations (thanks to Shirai Takashi)
  * Change '...' to horizontal ellipsis character
  * php &lt;5.4 compat: array syntax (#313)
  * Add autocomplete attributes to login form</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Replace %__-type macro indirections.
- Replace bash-specific syntax in scriptlets by POSIX sh.</changelog>
  <changelog author="jimmy@boombatower.com" date="1563451200">- Update to version 4.7.2:
  * Release 4.7.2
  * MySQL: Fix getting foreign keys
  * Fix table status in PostgreSQL 12 (bug #683)
  * Fix displaying SQL command after Save and continue edit
  * PostgreSQL: Display definitions of materialized views (bug #682)
  * Support for viewing and editing of column comments in mssql driver
  * PostgreSQL: Fix setting column comments on new table
  * MySQL: Fix displaying multi-columns foreign keys (bug #675)
  * Check if PDO SSL Attributes are set within config, and only set them in PDO Options. otherwise Mysql PDO throws errors if attribute is set and empty
  * Elasticsearch: Show executed query as a json
  * MongoDB: number of records should be count on provide rows
  * Keep font size in all tables.
  * travis: test on php 5.6-7.3 (#330)
  * Cache busting for adminer.css
  * Always pass the SRID part of a geometry property with the GeomFromText function
  * Update rmsoft designs
  * Allow bruteForceKey to be overwritten (#342)
  * Allow overwriting tables when copying them
  * Update rmsoft design
  * Stretch footer over the whole table width (bug #624)
  * Do not attempt logging in without password (bug #676)
  * Fix typo in translation (bug #673)
  * missing translation DE
  * Fix too small #lang margin on pepa-linha design
  * Fix creating users and changing password in MySQL 8 (bug #663)
  * Fix #tables margin (#326)</changelog>
  <changelog author="jimmy@boombatower.com" date="1567080000">- Update to version 4.7.3:
  * Release 4.7.3
  * Fix blocking of concurrent instances in PHP &gt;7.2 (bug #703)
  * setup Mongo authSource by ENV
  * Reset table after changing DB
  * Move &lt;p&gt; after a possible error
  * Allow editing foreign keys pointing to tables in other database/schema (bug #694)
  * MS SQL: Support foreign keys to other DB
  * Do not display error for foreign keys to other databases
  * Save bytes
  * MSSQL: use textarea in edit form for Memo type (#357)
  * MySQL: Support STORED GENERATED
  * SQLite: Skip renaming when recreating table if not necessary
  * SQLite: Preserve auto increment when recreating table
  * SQLite: Allow setting auto increment for empty tables
  * Remove extra space in alter table command
  * SQLite: Handle error in altering table (bug #697)
  * init mancave-hever design
  * MySQL: Allow editing rows identified by negative floats (bug #695)
  * added floating footer css for adminer-theme-mancave2-2.1.alpha
  * Add a comment (bug #691)
  * Use is_numeric()
  * Support MariaDB virtual columns
  * MySQL: Speed up displaying tables in large databases (bug #700)
  * Support unquoted floats in export
  * SQLite: Quote strings stored in integer columns in export (bug #696)
  * MySQL: Skip editing generated columns
  * Add AdminerLoginIp
  * Close &lt;/ul&gt; of logins</changelog>
  <changelog author="jimmy@boombatower.com" date="1571745600">- Update to version 4.7.4:
  * Release 4.7.4
  * Fix XSS if Adminer is accessible at URL /data:
  * Do not put unused doc links to single driver compiled version
  * Fix PostgreSQL doc root
  * Save bytes
  * add links to oracle docs
  * add links to postgres docs
  * Bump version</changelog>
  <changelog author="jimmy@boombatower.com" date="1574856000">- Update to version 4.7.5:
  * Release 4.7.5
  * Re-apply https://github.com/vrana/adminer/pull/363/commits/89b6e9bb
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Stop using adsrc column
  * fixed: SQL command for insert, create table, etc. new: create/rename table, add/drop/change type for column
  * Fix brazilian portuguese translation
  * Swedish translation
  * Update hever design
  * Don't overwrite variable
  * Add id="" to cells with failed inline edit (bug #708)
  * Unify dumpTable declarations (bug #707)
  * PostgreSQL, Oracle: Set schema for EXPLAIN queries in SQL command (bug #706)
  * Initialize version-noverify sooner (bug #705)
  * Make context in qsa() optional
  * Delete extra newlines
  * correct complement of responsive media query
  * update lucas-sandery theme
  * Add funding</changelog>
  <changelog author="jimmy@boombatower.com" date="1580472000">- Update to version 4.7.6:
  * Release 4.7.6
  * Fix comparing IPs
  * Update readme
  * Add example for using SQLite with Editor
  * PostgreSQL: Support exporting views
  * Disallow connecting to ports &gt; 65535 (bug #730)
  * Display time of procedure execution
  * Hide columns when rendering
  * Speed up alter table form
  * Fix clicking on non-input fields in alter table
  * Editor: Fix focusing foreign key search in select
  * MySQL: Always set foreign_key_checks in export</changelog>
  <changelog author="jimmy@boombatower.com" date="1589198400">- Update to version 4.7.7:
  * Release 4.7.7
  * Fix open redirect if Adminer is accessible at //adminer.php%2F@ (thanks to Prakash Sharma)
  * Update Finnish translation
  * Fix typo in Greek translation
  * Add missing translation
  * Fix forwarded IP comparison in login-ip plugin
  * Release 4.7.6</changelog>
  <changelog author="elimat@opensuse.org" date="1609848000">- Update to version 4.7.8:
  * Release 4.7.8
  * MySQL: Use renamed variable
  * Avoid PDO exceptions in PHP 8
  * Fix method call after #406
  * Improve check for numeric ports (bug #769)
  * Add missing method
  * Fix compatibility with PHP 8
  * Avoid each() not available in PHP 8
  * Fix style
  * Escape : also in remove_from_param</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610798400">- BuildRequires php-cli</changelog>
  <changelog author="Jimmy Berry &lt;jimmy@boombatower.com&gt;" date="1611835200">- Drop virtual firebird package since php-firebird was dropped.
  See sr#863764 for Factory decline.</changelog>
  <changelog author="jimmy@boombatower.com" date="1612785600">- Update to version 4.7.9:
  * Release 4.7.9
  * Reorder changes
  * Editor: Avoid trailing dot in export filename
  * Skip impossible condition ($link always contains ?username=)
  * Fix displayed foreign key columns from other DB (bug #766)
  * Do not display empty database in the list twice
  * Display CSRF logout error after connecting
  * Fix displaying type mapping for Elasticsearch &gt;= 6.0
  * MongoDB: Prefer modern extension
  * Fix MongoDB connect 'Database does not support password.' tips
  * Update bug numbers
  * Postgres - fix missing partitioned tables in navigation
  * Linkify URLs in SQL results
  * Title for select data link
  * Quote values with leading and trailing zeroes in CSV export (bug #777)
  * MySQL: Don't quote default value of text fields (bug #779)
  * fixed Unsupported operand types when $port is socket
  * Respect SQL command URL parameters
  * Fix XSS in browsers which don't encode URL parameters (bug #775)
  * SQLite: Set busy_timeout to 500
  * PostgreSQL 11: Create PRIMARY KEY for auto increment columns
  * PostgreSQL: Support smallserial
  * Add comment
  * PostgreSQL PDO: Support PgBouncer, unsupport PostgreSQL &lt; 9.1 (bug #771)
  * fix wrong hungarian translation
  * Editor: Cast to string when searching (bug #325)
  * Don't syntax highlight during IME composition (bug #747)
  * PostgreSQL: Use bigserial for bigint auto increment (bug #765, regression from 3.0.0)
  * MSSQL: Don't trucate displayed comments to 30 chars (use varchar maximum of 8000 upon casting)
  * Update Korean translation (thanks to B. Cansmile Cha)
  * add alternative design dracula theme
  * show correct collation for PostgresSQL
  * PostgreSQL: Fix current schema in view definition
  * Add external designs as submodules
  * Fixes to lucas-sandery theme
  * Do not export names in quotes with sql_mode='ANSI_QUOTES' (bug #749)
  * Fix PgSQL generated always as identity fix
  * Update Russian translation.
  * Update Ukrainian translation.
  * PostgreSQL: Export all FKs after all CREATE TABLE
  * MySQL, MariaDB: Fix doc links
  * Do not display SQL function for checkbox
  * Fix style (bug #743)
  * PostgreSQL: Fix dollar-quoted syntax highlighting (bug #738)
  * Elasticsearch, ClickHouse: Do not print response if HTTP code is not 200
  * Add basic Makefile.
  * Travis: add php 7.4 &amp;&amp; 8.0
  * Re-enable PHP warnings</changelog>
</package>
<package pkgid="7a084e68b114255194a006a468b0f04e09b6625c13758f3f11b84c1b4bff2236" name="adminer-mysql" arch="noarch">
  <version epoch="0" ver="4.7.9" rel="lp152.2.3.1"/>
  <changelog author="jimmy@boombatower.com" date="1509192000">- Disable elasticsearch and mssql since the dependencies are no
  longer present in Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1516190400">- s/or/OR/ in License.
- Update to version 4.4.0:
  * Release 4.4.0
  * Allow sending multiple CSP headers
  * Use __construct for constructor
  * Set session cache limiter only without session.auto_start (bug #586)
  * Add missing newline
  * Require specifying credentials in login-sqlite plugin
  * Avoid count(null)
  * Disallow PHP 5.3 in Travis
  * Disallow connecting to privileged ports (thanks to hyp3rlinx)
  * Rate limit password-less login attempts from the same IP address (thanks to hyp3rlinx)
  * Use HTTPS
  * Use HTTPS in doc_link()
  * Do not set '' for empty enum
  * Fix select function onchange
  * Clone all event handlers in cloneNode()
  * Use border-collapse to prevent unnecessary wrapping in Chrome
  * Fix whitespace
  * Fix selectCount() in information_schema
  * Fix SQL command toggle
  * Disallow scripts without nonce
  * Fix wrapping in Create table
  * Use script_src for &lt;script src&gt;
  * Fix typo in script()
  * Do not send empty CSP
  * Move inline event handlers to &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use the fact that we handle oninput in whisper()
  * Move inline event handlers to &lt;script&gt;
  * Editor: Fix Search data in tables
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler for skipping original
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingMoveRow()
  * Move inline event handlers to &lt;script&gt;
  * Use oninput instead of onchange
  * Move inline event handlers to &lt;script&gt;
  * Fix fieldChange() after 6353a898
  * Use oninput instead of onkeyup
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in on_help()
  * Move inline event handlers to &lt;script&gt;
  * Clone onchange in cloneNode()
  * Move inline event handlers to &lt;script&gt;
  * Allow searching data in tables by Ctrl+Enter
  * Move inline event handlers to &lt;script&gt;
  * Fix selectors in schema after 58b2904d
  * Rely on event always passed to handlers
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingRemoveRow
  * Move inline event handlers to &lt;script&gt;
  * Use script() for &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in print_fieldset()
  * Use &lt;script&gt; instead of inline event handler in confirm()
  * Move inline event handlers to &lt;script&gt;
  * Return false from ajaxSetHtml()
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Move inline event handlers to &lt;script&gt;
  * Return false from toggle()
  * onchange='selectFieldChange
  * Use @this in selectFieldChange
  * Move inline event handlers to &lt;script&gt;
  * Fix indexesAddColumn after 14778165
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Allow customizing CSP
  * Allow img-src data: common in skins
  * Use JSON.parse if available
  * Add Content Security Policy
  * Always send security headers in customization
  * Add nosniff header
  * Use Referrer-Policy instead of &lt;meta name="referrer"&gt;
  * Editor: Fix doubleclick on database page
  * Fix a typo from 9cb28186
  * Use @this in JavaScript (prepares for removing inline event handlers)
  * Prevent PHP 7.1 warning about non-numeric values
  * Unindent doc-comments
  * Delete type="text/css" from &lt;style&gt; as it is the default in HTML5
  * Delete type="text/javascript" from &lt;script&gt; as it is the default in HTML5
  * Replace getElementsByTagName by shortcut for querySelectorAll
  * Use querySelector
  * Replace getElementById by shortcut for querySelector (requires IE8)
  * Fix skin for Chrome 61 (thanks to Dominik Ulrich)
  * Editor: Display field comment's text inside [] only in edit form
  * Fix hebrew typos (#228)
  * Add new Hebrew translations
  * Add Hebrew translation
  * Editor: Don't set time zone from PHP
  * Make sure all sidebar elements are pushed down, not just the form.
  * Update AdminerTablesFilter to produce li as per c9801e2e2418
  * MySQL: Remove dedicated view for replication status
  * Sort table names (bug #552)
  * Update es.inc.php
  * Add a donate link</changelog>
  <changelog author="jimmy@boombatower.com" date="1516881600">- Update to version 4.5.0:
  * Release 4.5.0
  * Fix tests after 95d02bb9
  * Simplify drop object confirmation questions
  * Translate message added in 4.4.0
  * Display name of the object in confirmation when dropping it
  * Display error when getting row to edit
  * Avoid CONVERT() except in MySQL (bug #509)
  * Bump version
  * MySQL: Support routines with comments in parameters (bug #460)
  * Verify if adminer.version was created on www.adminer.org
  * Store current Adminer version server-side to avoid excessive requests
  * Send token as last param
  * Allow using adminer.invalid by other users in a group
  * Extract file_open_lock and file_write_unlock
  * Display boolean values as code (bug #562)
  * MariaDB: Support fulltext and spatial indexes in InnoDB (bug #583)
  * PostgreSQL: Display foreign tables (bug #576)
  * Add designs.php
  * Fix compiled version after 5cc831c1
  * Hide window.opener from pages opened in a new window (bug #561)
  * Fix GPL version
  * Add plugin for switching designs
  * Display bold parts of error (bug #565)
  * Add bottom border to last cells
  * Editor: Fix displaying of false values in PostgreSQL (bug #568)
  * Decrease float precision (bug #578)
  * Add ability to override file name (path) when loading dump from webserver
  * Support current_timestamp() as default of time fields (bug #572)
  * Display newlines in column comments (bug #573)
  * MySQL: Support geometry in MySQL 8 (bug #574)
  * MSSQL driver fixed for freetds drivers. See bug #167, #291
  * Fix search focus (regression from 4.4.0)
  * Compatibility with PHP &lt; 5.3
  * Add mongodb as a possible driver
  * Save bytes
  * php7 support with minimal changes of original code
  * PostgreSQL: Export DROP SEQUENCE if dropping table
  * PostgreSQL: Do not export triggers if not requested
  * Ignore removed CREATE+ALTER mode in trigger_sql()
  * Fix whitespace
  * CSP: Allow any CSS
  * adminer-theme-mancave2-2.0.alpha
  * Fix NULL value in edit form with Postgres
  * Do not warn about MySQL specific functions
  * Fix single driver non-MySQL compiled versions (regression from 150301ed)
  * Hide driver selection in single-driver version (regression from e762a6aa)
  * Unify HTML for list of tables in Editor according to Adminer
  * Encapsulate fulltext part in search box into &lt;div&gt;
  * Enhance ElasticSearch integration
  * Allow PHP 5.6 in Travis
  * Select numeric database name in DB list (bug #580)
  * SQLite: Enable foreign key checks
  * CSP: Allow any images, media and fonts, disallow base-uri
  * Define JS functions in AdminerTablesFilter sooner
  * Adminer: Fix Search data in tables</changelog>
  <changelog author="jimmy@boombatower.com" date="1517832000">- Update to version 4.6.0:
  * Release 4.6.0
  * Fix affected rows after getting warnings
  * Fix number of affected rows after getting warnings
  * Fix test
  * Fix 5.1 being displayed as 5.09999...
  * PRIMARY KEY in SQLite
  * Add design Esterka
  * Disable autocompleting password on create user page
  * Use primary key to edit rows even if not selected
  * Space between DB and Use
  * Translate DB
  * Select converted fields only once
  * Don't count rows if we reached the end
  * Fix count_rows with more than one group by column
  * Use separator in limit1
  * SQLite: Limit rows in data manipulation without unique key
  * Document that tests don't work with oninput
  * PostgreSQL: Limit rows in data manipulation without unique key
  * Don't use ctid as it's not stable
  * Move variables close to their usage
  * Limit non-unique where updates
  * Use Oid as the name of the column
  * Save bytes
  * Update rmsoft design
  * MySQL: Add FIND_IN_SET search operator
  * Add rmsoft design
  * MySQL: Add floor and ceil functions
  * Fix links to PostgreSQL 10 documentation
  * Delete unused variable
  * Display options for timestamp columns when creating a new table (thanks to Robert Vlach)
  * Don't display warnings for failed queries
  * Fix variable name
  * Reorder variables
  * Use pg_last_notice only with pgsql
  * Print warnings in call
  * Pass start time to selectQuery
  * PostgreSQL: Display warnings
  * Return string from warnings()
  * Display warnings in messages
  * Show select warnings
  * Support X-Forwarded-Prefix (e.g. Traefik PathPrefixStrip feature)
  * Lowercase EXPLAIN but don't translate it
  * Move explain below warnings
  * Fix return type
  * MySQL: Display warnings in SQL command
  * Quote default values not starting with a letter
  * Stop redirecting links via adminer.org
  * Fix min_version use
  * Quote dates in default value
  * Fully support functions in default values
  * Fix min_version use
  * PostgreSQL: Allow now() as default value (bug #525)
  * Fix edit_type after 1f21cd43
  * PostgreSQL: Allow editing views with uppercase letters (bug #467)
  * PostgreSQL: Allow creating trigger functions
  * Add placeholders
  * PostgreSQL: Support functions
  * Add min_version to compile.php
  * SimpleDB: Document that allow_url_fopen is required (bug #340)
  * Focus correct field in selectSearch
  * Support JSON since MariaDB 10.2 (bug #590)
  * Use min_version
  * Add min_version
  * Save bytes
  * add malay translation
  * Added and translated missing keys in polish translation
  * Update compatibility with TinyMCE v4 (#247)
  * Fix elastic after ef5a7639
  * fix elastic.inc.php to work on PHP 5.2
  * Fix counting selected rows after going back to select page</changelog>
  <changelog author="jimmy@boombatower.com" date="1518177600">- Update to version 4.6.1:
  * Release 4.6.1
  * Round 9.2 to 9.2
  * MariaDB: Links to documentation in syntax highlighting
  * Display notification about performing action after relogin
  * Reorder changes
  * Allow specifying server name displayed in breadcrumbs
  * MariaDB: Links to documentation
  * Reorder changes
  * Remove .lcZ from timeFormat (bug #593)
  * Add todo
  * Add more system tables help links
  * Respect empty tableName in tablesPrint
  * Use tableName() in table.inc.php
  * Avoid qsl in a loop
  * Support Shift+click in server export
  * Avoid qsl in a loop
  * Sticky position of table actions
  * Document regression
  * Avoid qsl in check[]
  * Avoid qsl in a loop
  * Mark optional parameter
  * SQLite: Support ` in PRIMARY KEY
  * Avoid Invalid credentials with no credentials
  * SQLite: Allow deleting PRIMARY KEY from tables with auto increment
  * Do not wrap alter table thead
  * Add version() to use in plugins
  * Select original if nothing else is selected
  * Remove nested array
  * Support connecting to MySQL via SSL
  * Display Invalid credentials if connection error is empty
  * Delete unused functions
  * Ignore functions in Min_Driver
  * Remove unnecessary quotes
  * Add truncate_sql to PostgreSQL
  * PostgreSQL: Unescape bytea fields
  * Save bytes
  * Add missing function to compile.php
  * PostgreSQL: Upload binary files to bytea fields
  * Allow using number_type() as pattern
  * Translate thousands separator in JS
  * Editor: Use type=search for Search tables
  * Move tableCheck() below &lt;/form&gt;
  * Pass operator from db.inc.php
  * PostgreSQL: Cast to string when searching using LIKE (bug #325)
  * MySQL: Support non-utf8 charset in search in column
  * Use ST_GeomFromText in MySQL 8 (bug #574)
  * Do not modify $_GET["where"]
  * Display empty operator as LIKE %%
  * Fix whitespace
  * Avoid deprecated each()
  * PostgreSQL: Fix condition for selecting no rows
  * Fix error display in Search tables
  * PostgreSQL: Don't treat interval type as number (bug #474)
  * Pass required parameter
  * Use existing variable
  * Add class to use in designs
  * Use primary key instead of LIMIT 1 if available</changelog>
  <changelog author="jimmy@boombatower.com" date="1519128000">- Update to version 4.6.2:
  * Release 4.6.2
  * Fix test
  * Fix typo
  * Comment
  * Use function after declaring it
  * Remove test server
  * Make test works with MariaDB
  * Make test work on wide screen
  * Editor: Fix displaying of true boolean values
  * Comment
  * Store current version before authentication and in Editor
  * Update design (thanks to Jan)
  * Add missing fullstop
  * Version 4.6.1.1 (#254)
  * Turkish language file updated.
  * Align Whole result
  * Always hide import
  * Print email only with rows or page
  * Move import out of footer
  * Move pagination to fieldset
  * Update readme
  * Make Login test work with jush-textarea
  * Add SQLite test
  * Test warnings
  * Convert tests to Katalon
  * Promote MongoDB, demote Oracle and MS SQL
  * Capitalize Whole result
  * Fill footer to the right
  * Make footer smaller
  * Move pagination outside footer
  * Wrap more into if (!is_ajax)
  * Move &lt;p&gt;
  * PostgreSQL: Add IF EXISTS to DROP SEQUENCE in export (bug #595)
  * Make footer border more obvious
  * Make footer margin not transparent
  * Centralize oninput
  * Speed up alter table
  * Use Unicode arrows in alt
  * Avoid hiding column only to show it later
  * Respect unchecked Default values
  * Update UI when coming from history
  * PostgreSQL: Fix exporting string default values (thanks to PotatoPangolin)
  * Semi-transparent border on table actions
  * Fix exporting sequences in PostgreSQL 10
  * Do not append empty values
  * Shorten JSON values in select (bug #594)
  * Fix id in databases list
  * Suggest updating Git submodules
  * Declare MariaDB support</changelog>
  <changelog author="jimmy@boombatower.com" date="1530187200">- Update to version 4.6.3:
  * Release 4.6.3
  * Fix typo
  * Revert "PgSQL search operator "SQL" added"
  * Add TODO
  * MySQL: Disallow LOAD DATA LOCAL INFILE
  * PostgreSQL: Export false as 0 in PDO (bug #619)
  * mssql: ignore serverproperty error
  * Add spaces
  * Fix table list in sidebar in designs/pokorny (#278)
  * Allow AdminerTablesFilter plugin to be used with third-party table list plugins (#275)
  * Recommend inlining the hash
  * Improve error message
  * Escape \ in enum edit
  * Improve enum parsing
  * Order database names in MySQL 8(bug #613)
  * Respect 'session.cookie_secure' if it is On
  * Copy triggers when copying table
  * MS SQL: Support port with sqlsrc
  * PostgreSQL: Do not cast uuid searches to text (bug #608)
  * Editor: Do not check boolean checkboxes with false in PostgreSQL (bug #607)
  * Disallow using password-less databases
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Report version
  * Document that Elasticsearch requires allow_url_fopen
  * PostgreSQL: Do not cast boolean to text on search (#264)
  * PostgreSQL: Do not cast number searches to text
  * PostgreSQL: Fix editing data in views (bug #605)
  * Elasticsearch: Fix PHP warning
  * PgSQL search operator "SQL" added
  * PostgreSQL: Fix slow query
  * Update JUSH
  * Display that *.gz files are supported in file upload
  * Save bytes
  * Stay on import page when switching database
  * Decrease timeout for running slow queries from 5 seconds to 2 seconds
  * Simplify running slow queries
  * Remove unused argument
  * Update JUSH
  * Use JUSH from GitHub
  * Clarify changelog
  * Display missing database in navigation
  * MongoDB driver: Add create_database methods.
  * Fix comment
  * Add $driver to global variables
  * Add $driver to global variables
  * Use $adminer-&gt;operators
  * PostgreSQL: Do not cast time search
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * MySQL: Use CONVERT() only when searching for non-ASCII (bug #603)
  * Remove optional submodule
  * Update adminer-design (rmsoft) to version 4.6.2.1
  * Wrap lines
  * Fix displaying info about non-alphabetical objects (bug #599)
  * Allow connecting to different drivers in login-servers
  * Wrap long line
  * Add login-otp plugin
  * Update translation
  * Comment
  * Centralize stopping session
  * Stop session before connecting (thanks to Kareem Zidane)
  * Update design (thanks to Jan)
  * PDO: Support binary fields download
  * Don't try to check missing checkboxes
  * Use file caching only in non-dev
  * Editor: Delete images from compiled version
  * Remove driver from file URLs (stored in path)
  * Fix image in compiled version
  * Use single \ in ' strings
  * &amp;nbsp; is not needed with border-collapse</changelog>
  <changelog author="jimmy@boombatower.com" date="1543147200">- Update to version 4.7.0:
  * Release 4.7.0
  * Fix whitespace
  * Clarify change description
  * Updated theme for v4.7 (#310)
  * Update zh-tw.inc.php (#299)
  * Fix a typo
  * Delete copy/pasted code
  * Change inline style to class name
  * Wrap `table.nowrap` with `div[style="overflow-x: auto"]`
  * Fix MariaDB link to numeric types
  * MySQL: Descending indexes in MySQL 8 (bug #643)
  * PostgreSQL: Support for GENERATED BY DEFAULT AS IDENTITY
  * Fix style
  * ClickHouse: support for decimal types, SQL operator
  * ClickHouse: Fix for drop multiple tables and views
  * ClickHouse ALTER DELETE and ALTER UPDATE support
  * ClickHouse fix select-like queries format postfix
  * Avoid overwriting existing tables when copying tables (bug #642)
  * PostgreSQL: Export DESC indexes (bug #639)
  * Recognize current_timestamp() in edit (bug #638)
  * Hide import from server if no path
  * Simplify storing executed SQL queries to bookmarks
  * fix editor theme (#302)
  * Remove unused code
  * MySQL: Recognize ON UPDATE current_timestamp() (bug #632)
  * PostgreSQL: Quote array values in export (bug #621)
  * Add plugin pretty-json-column
  * Update translation
  * DOM not ready when restoring `adminer_tables_filter` (#289)
  * Add Georgian translation
  * Update mvt design
  * Fix design (thanks to apmuthu)
  * ClickHouse: Fix escaping
  * ClickHouse support alpha version
  * Fix typo in Vietnamese translation
  * Add class 'layout' to all non-data tables
  * Set default db to sqlsrv connection
  * Warn when using password with leading or trailing spaces
  * Update donation link
  * Make maxlength in all fields a soft limit
  * Increase username maxlength to 80 (bug #623)
  * Fixes foreign key pattern in MySQL
  * Fix function change with set data type (thanks to osoba hrdelnata)
  * Adminer theme
  * Reset event handlers after cloning (thanks to Salko)
  * Fix inline editing of empty cells</changelog>
  <changelog author="jimmy@boombatower.com" date="1548331200">- Update to version 4.7.1:
  * Release 4.7.1
  * Remember visible columns in Create Table form (bug #493)
  * Editor: Allow disabling boolean fields in PostgreSQL (bug #640)
  * fix: haeckel adminer.css (#323)
  * SQLite: Hide server field in login form
  * Improve MariaDB status variables link (bug #658)
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Display the tables scrollbar (bug #647)
  * Document change
  * Fix PHP 7.3 compatibility (#318)
  * Position of the background database image changed. (#316)
  * Fix mvt theme (#315)
  * Use &lt;ul&gt; list for logins (#314)
  * Add missing Japanese translations (thanks to Shirai Takashi)
  * Change '...' to horizontal ellipsis character
  * php &lt;5.4 compat: array syntax (#313)
  * Add autocomplete attributes to login form</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Replace %__-type macro indirections.
- Replace bash-specific syntax in scriptlets by POSIX sh.</changelog>
  <changelog author="jimmy@boombatower.com" date="1563451200">- Update to version 4.7.2:
  * Release 4.7.2
  * MySQL: Fix getting foreign keys
  * Fix table status in PostgreSQL 12 (bug #683)
  * Fix displaying SQL command after Save and continue edit
  * PostgreSQL: Display definitions of materialized views (bug #682)
  * Support for viewing and editing of column comments in mssql driver
  * PostgreSQL: Fix setting column comments on new table
  * MySQL: Fix displaying multi-columns foreign keys (bug #675)
  * Check if PDO SSL Attributes are set within config, and only set them in PDO Options. otherwise Mysql PDO throws errors if attribute is set and empty
  * Elasticsearch: Show executed query as a json
  * MongoDB: number of records should be count on provide rows
  * Keep font size in all tables.
  * travis: test on php 5.6-7.3 (#330)
  * Cache busting for adminer.css
  * Always pass the SRID part of a geometry property with the GeomFromText function
  * Update rmsoft designs
  * Allow bruteForceKey to be overwritten (#342)
  * Allow overwriting tables when copying them
  * Update rmsoft design
  * Stretch footer over the whole table width (bug #624)
  * Do not attempt logging in without password (bug #676)
  * Fix typo in translation (bug #673)
  * missing translation DE
  * Fix too small #lang margin on pepa-linha design
  * Fix creating users and changing password in MySQL 8 (bug #663)
  * Fix #tables margin (#326)</changelog>
  <changelog author="jimmy@boombatower.com" date="1567080000">- Update to version 4.7.3:
  * Release 4.7.3
  * Fix blocking of concurrent instances in PHP &gt;7.2 (bug #703)
  * setup Mongo authSource by ENV
  * Reset table after changing DB
  * Move &lt;p&gt; after a possible error
  * Allow editing foreign keys pointing to tables in other database/schema (bug #694)
  * MS SQL: Support foreign keys to other DB
  * Do not display error for foreign keys to other databases
  * Save bytes
  * MSSQL: use textarea in edit form for Memo type (#357)
  * MySQL: Support STORED GENERATED
  * SQLite: Skip renaming when recreating table if not necessary
  * SQLite: Preserve auto increment when recreating table
  * SQLite: Allow setting auto increment for empty tables
  * Remove extra space in alter table command
  * SQLite: Handle error in altering table (bug #697)
  * init mancave-hever design
  * MySQL: Allow editing rows identified by negative floats (bug #695)
  * added floating footer css for adminer-theme-mancave2-2.1.alpha
  * Add a comment (bug #691)
  * Use is_numeric()
  * Support MariaDB virtual columns
  * MySQL: Speed up displaying tables in large databases (bug #700)
  * Support unquoted floats in export
  * SQLite: Quote strings stored in integer columns in export (bug #696)
  * MySQL: Skip editing generated columns
  * Add AdminerLoginIp
  * Close &lt;/ul&gt; of logins</changelog>
  <changelog author="jimmy@boombatower.com" date="1571745600">- Update to version 4.7.4:
  * Release 4.7.4
  * Fix XSS if Adminer is accessible at URL /data:
  * Do not put unused doc links to single driver compiled version
  * Fix PostgreSQL doc root
  * Save bytes
  * add links to oracle docs
  * add links to postgres docs
  * Bump version</changelog>
  <changelog author="jimmy@boombatower.com" date="1574856000">- Update to version 4.7.5:
  * Release 4.7.5
  * Re-apply https://github.com/vrana/adminer/pull/363/commits/89b6e9bb
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Stop using adsrc column
  * fixed: SQL command for insert, create table, etc. new: create/rename table, add/drop/change type for column
  * Fix brazilian portuguese translation
  * Swedish translation
  * Update hever design
  * Don't overwrite variable
  * Add id="" to cells with failed inline edit (bug #708)
  * Unify dumpTable declarations (bug #707)
  * PostgreSQL, Oracle: Set schema for EXPLAIN queries in SQL command (bug #706)
  * Initialize version-noverify sooner (bug #705)
  * Make context in qsa() optional
  * Delete extra newlines
  * correct complement of responsive media query
  * update lucas-sandery theme
  * Add funding</changelog>
  <changelog author="jimmy@boombatower.com" date="1580472000">- Update to version 4.7.6:
  * Release 4.7.6
  * Fix comparing IPs
  * Update readme
  * Add example for using SQLite with Editor
  * PostgreSQL: Support exporting views
  * Disallow connecting to ports &gt; 65535 (bug #730)
  * Display time of procedure execution
  * Hide columns when rendering
  * Speed up alter table form
  * Fix clicking on non-input fields in alter table
  * Editor: Fix focusing foreign key search in select
  * MySQL: Always set foreign_key_checks in export</changelog>
  <changelog author="jimmy@boombatower.com" date="1589198400">- Update to version 4.7.7:
  * Release 4.7.7
  * Fix open redirect if Adminer is accessible at //adminer.php%2F@ (thanks to Prakash Sharma)
  * Update Finnish translation
  * Fix typo in Greek translation
  * Add missing translation
  * Fix forwarded IP comparison in login-ip plugin
  * Release 4.7.6</changelog>
  <changelog author="elimat@opensuse.org" date="1609848000">- Update to version 4.7.8:
  * Release 4.7.8
  * MySQL: Use renamed variable
  * Avoid PDO exceptions in PHP 8
  * Fix method call after #406
  * Improve check for numeric ports (bug #769)
  * Add missing method
  * Fix compatibility with PHP 8
  * Avoid each() not available in PHP 8
  * Fix style
  * Escape : also in remove_from_param</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610798400">- BuildRequires php-cli</changelog>
  <changelog author="Jimmy Berry &lt;jimmy@boombatower.com&gt;" date="1611835200">- Drop virtual firebird package since php-firebird was dropped.
  See sr#863764 for Factory decline.</changelog>
  <changelog author="jimmy@boombatower.com" date="1612785600">- Update to version 4.7.9:
  * Release 4.7.9
  * Reorder changes
  * Editor: Avoid trailing dot in export filename
  * Skip impossible condition ($link always contains ?username=)
  * Fix displayed foreign key columns from other DB (bug #766)
  * Do not display empty database in the list twice
  * Display CSRF logout error after connecting
  * Fix displaying type mapping for Elasticsearch &gt;= 6.0
  * MongoDB: Prefer modern extension
  * Fix MongoDB connect 'Database does not support password.' tips
  * Update bug numbers
  * Postgres - fix missing partitioned tables in navigation
  * Linkify URLs in SQL results
  * Title for select data link
  * Quote values with leading and trailing zeroes in CSV export (bug #777)
  * MySQL: Don't quote default value of text fields (bug #779)
  * fixed Unsupported operand types when $port is socket
  * Respect SQL command URL parameters
  * Fix XSS in browsers which don't encode URL parameters (bug #775)
  * SQLite: Set busy_timeout to 500
  * PostgreSQL 11: Create PRIMARY KEY for auto increment columns
  * PostgreSQL: Support smallserial
  * Add comment
  * PostgreSQL PDO: Support PgBouncer, unsupport PostgreSQL &lt; 9.1 (bug #771)
  * fix wrong hungarian translation
  * Editor: Cast to string when searching (bug #325)
  * Don't syntax highlight during IME composition (bug #747)
  * PostgreSQL: Use bigserial for bigint auto increment (bug #765, regression from 3.0.0)
  * MSSQL: Don't trucate displayed comments to 30 chars (use varchar maximum of 8000 upon casting)
  * Update Korean translation (thanks to B. Cansmile Cha)
  * add alternative design dracula theme
  * show correct collation for PostgresSQL
  * PostgreSQL: Fix current schema in view definition
  * Add external designs as submodules
  * Fixes to lucas-sandery theme
  * Do not export names in quotes with sql_mode='ANSI_QUOTES' (bug #749)
  * Fix PgSQL generated always as identity fix
  * Update Russian translation.
  * Update Ukrainian translation.
  * PostgreSQL: Export all FKs after all CREATE TABLE
  * MySQL, MariaDB: Fix doc links
  * Do not display SQL function for checkbox
  * Fix style (bug #743)
  * PostgreSQL: Fix dollar-quoted syntax highlighting (bug #738)
  * Elasticsearch, ClickHouse: Do not print response if HTTP code is not 200
  * Add basic Makefile.
  * Travis: add php 7.4 &amp;&amp; 8.0
  * Re-enable PHP warnings</changelog>
</package>
<package pkgid="0913f0ddfe1564bdd1b18367d28bbcd3d71464fa7016af064b69410691b18d43" name="adminer-pgsql" arch="noarch">
  <version epoch="0" ver="4.7.9" rel="lp152.2.3.1"/>
  <changelog author="jimmy@boombatower.com" date="1509192000">- Disable elasticsearch and mssql since the dependencies are no
  longer present in Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1516190400">- s/or/OR/ in License.
- Update to version 4.4.0:
  * Release 4.4.0
  * Allow sending multiple CSP headers
  * Use __construct for constructor
  * Set session cache limiter only without session.auto_start (bug #586)
  * Add missing newline
  * Require specifying credentials in login-sqlite plugin
  * Avoid count(null)
  * Disallow PHP 5.3 in Travis
  * Disallow connecting to privileged ports (thanks to hyp3rlinx)
  * Rate limit password-less login attempts from the same IP address (thanks to hyp3rlinx)
  * Use HTTPS
  * Use HTTPS in doc_link()
  * Do not set '' for empty enum
  * Fix select function onchange
  * Clone all event handlers in cloneNode()
  * Use border-collapse to prevent unnecessary wrapping in Chrome
  * Fix whitespace
  * Fix selectCount() in information_schema
  * Fix SQL command toggle
  * Disallow scripts without nonce
  * Fix wrapping in Create table
  * Use script_src for &lt;script src&gt;
  * Fix typo in script()
  * Do not send empty CSP
  * Move inline event handlers to &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use the fact that we handle oninput in whisper()
  * Move inline event handlers to &lt;script&gt;
  * Editor: Fix Search data in tables
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler for skipping original
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingMoveRow()
  * Move inline event handlers to &lt;script&gt;
  * Use oninput instead of onchange
  * Move inline event handlers to &lt;script&gt;
  * Fix fieldChange() after 6353a898
  * Use oninput instead of onkeyup
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in on_help()
  * Move inline event handlers to &lt;script&gt;
  * Clone onchange in cloneNode()
  * Move inline event handlers to &lt;script&gt;
  * Allow searching data in tables by Ctrl+Enter
  * Move inline event handlers to &lt;script&gt;
  * Fix selectors in schema after 58b2904d
  * Rely on event always passed to handlers
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingRemoveRow
  * Move inline event handlers to &lt;script&gt;
  * Use script() for &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in print_fieldset()
  * Use &lt;script&gt; instead of inline event handler in confirm()
  * Move inline event handlers to &lt;script&gt;
  * Return false from ajaxSetHtml()
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Move inline event handlers to &lt;script&gt;
  * Return false from toggle()
  * onchange='selectFieldChange
  * Use @this in selectFieldChange
  * Move inline event handlers to &lt;script&gt;
  * Fix indexesAddColumn after 14778165
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Allow customizing CSP
  * Allow img-src data: common in skins
  * Use JSON.parse if available
  * Add Content Security Policy
  * Always send security headers in customization
  * Add nosniff header
  * Use Referrer-Policy instead of &lt;meta name="referrer"&gt;
  * Editor: Fix doubleclick on database page
  * Fix a typo from 9cb28186
  * Use @this in JavaScript (prepares for removing inline event handlers)
  * Prevent PHP 7.1 warning about non-numeric values
  * Unindent doc-comments
  * Delete type="text/css" from &lt;style&gt; as it is the default in HTML5
  * Delete type="text/javascript" from &lt;script&gt; as it is the default in HTML5
  * Replace getElementsByTagName by shortcut for querySelectorAll
  * Use querySelector
  * Replace getElementById by shortcut for querySelector (requires IE8)
  * Fix skin for Chrome 61 (thanks to Dominik Ulrich)
  * Editor: Display field comment's text inside [] only in edit form
  * Fix hebrew typos (#228)
  * Add new Hebrew translations
  * Add Hebrew translation
  * Editor: Don't set time zone from PHP
  * Make sure all sidebar elements are pushed down, not just the form.
  * Update AdminerTablesFilter to produce li as per c9801e2e2418
  * MySQL: Remove dedicated view for replication status
  * Sort table names (bug #552)
  * Update es.inc.php
  * Add a donate link</changelog>
  <changelog author="jimmy@boombatower.com" date="1516881600">- Update to version 4.5.0:
  * Release 4.5.0
  * Fix tests after 95d02bb9
  * Simplify drop object confirmation questions
  * Translate message added in 4.4.0
  * Display name of the object in confirmation when dropping it
  * Display error when getting row to edit
  * Avoid CONVERT() except in MySQL (bug #509)
  * Bump version
  * MySQL: Support routines with comments in parameters (bug #460)
  * Verify if adminer.version was created on www.adminer.org
  * Store current Adminer version server-side to avoid excessive requests
  * Send token as last param
  * Allow using adminer.invalid by other users in a group
  * Extract file_open_lock and file_write_unlock
  * Display boolean values as code (bug #562)
  * MariaDB: Support fulltext and spatial indexes in InnoDB (bug #583)
  * PostgreSQL: Display foreign tables (bug #576)
  * Add designs.php
  * Fix compiled version after 5cc831c1
  * Hide window.opener from pages opened in a new window (bug #561)
  * Fix GPL version
  * Add plugin for switching designs
  * Display bold parts of error (bug #565)
  * Add bottom border to last cells
  * Editor: Fix displaying of false values in PostgreSQL (bug #568)
  * Decrease float precision (bug #578)
  * Add ability to override file name (path) when loading dump from webserver
  * Support current_timestamp() as default of time fields (bug #572)
  * Display newlines in column comments (bug #573)
  * MySQL: Support geometry in MySQL 8 (bug #574)
  * MSSQL driver fixed for freetds drivers. See bug #167, #291
  * Fix search focus (regression from 4.4.0)
  * Compatibility with PHP &lt; 5.3
  * Add mongodb as a possible driver
  * Save bytes
  * php7 support with minimal changes of original code
  * PostgreSQL: Export DROP SEQUENCE if dropping table
  * PostgreSQL: Do not export triggers if not requested
  * Ignore removed CREATE+ALTER mode in trigger_sql()
  * Fix whitespace
  * CSP: Allow any CSS
  * adminer-theme-mancave2-2.0.alpha
  * Fix NULL value in edit form with Postgres
  * Do not warn about MySQL specific functions
  * Fix single driver non-MySQL compiled versions (regression from 150301ed)
  * Hide driver selection in single-driver version (regression from e762a6aa)
  * Unify HTML for list of tables in Editor according to Adminer
  * Encapsulate fulltext part in search box into &lt;div&gt;
  * Enhance ElasticSearch integration
  * Allow PHP 5.6 in Travis
  * Select numeric database name in DB list (bug #580)
  * SQLite: Enable foreign key checks
  * CSP: Allow any images, media and fonts, disallow base-uri
  * Define JS functions in AdminerTablesFilter sooner
  * Adminer: Fix Search data in tables</changelog>
  <changelog author="jimmy@boombatower.com" date="1517832000">- Update to version 4.6.0:
  * Release 4.6.0
  * Fix affected rows after getting warnings
  * Fix number of affected rows after getting warnings
  * Fix test
  * Fix 5.1 being displayed as 5.09999...
  * PRIMARY KEY in SQLite
  * Add design Esterka
  * Disable autocompleting password on create user page
  * Use primary key to edit rows even if not selected
  * Space between DB and Use
  * Translate DB
  * Select converted fields only once
  * Don't count rows if we reached the end
  * Fix count_rows with more than one group by column
  * Use separator in limit1
  * SQLite: Limit rows in data manipulation without unique key
  * Document that tests don't work with oninput
  * PostgreSQL: Limit rows in data manipulation without unique key
  * Don't use ctid as it's not stable
  * Move variables close to their usage
  * Limit non-unique where updates
  * Use Oid as the name of the column
  * Save bytes
  * Update rmsoft design
  * MySQL: Add FIND_IN_SET search operator
  * Add rmsoft design
  * MySQL: Add floor and ceil functions
  * Fix links to PostgreSQL 10 documentation
  * Delete unused variable
  * Display options for timestamp columns when creating a new table (thanks to Robert Vlach)
  * Don't display warnings for failed queries
  * Fix variable name
  * Reorder variables
  * Use pg_last_notice only with pgsql
  * Print warnings in call
  * Pass start time to selectQuery
  * PostgreSQL: Display warnings
  * Return string from warnings()
  * Display warnings in messages
  * Show select warnings
  * Support X-Forwarded-Prefix (e.g. Traefik PathPrefixStrip feature)
  * Lowercase EXPLAIN but don't translate it
  * Move explain below warnings
  * Fix return type
  * MySQL: Display warnings in SQL command
  * Quote default values not starting with a letter
  * Stop redirecting links via adminer.org
  * Fix min_version use
  * Quote dates in default value
  * Fully support functions in default values
  * Fix min_version use
  * PostgreSQL: Allow now() as default value (bug #525)
  * Fix edit_type after 1f21cd43
  * PostgreSQL: Allow editing views with uppercase letters (bug #467)
  * PostgreSQL: Allow creating trigger functions
  * Add placeholders
  * PostgreSQL: Support functions
  * Add min_version to compile.php
  * SimpleDB: Document that allow_url_fopen is required (bug #340)
  * Focus correct field in selectSearch
  * Support JSON since MariaDB 10.2 (bug #590)
  * Use min_version
  * Add min_version
  * Save bytes
  * add malay translation
  * Added and translated missing keys in polish translation
  * Update compatibility with TinyMCE v4 (#247)
  * Fix elastic after ef5a7639
  * fix elastic.inc.php to work on PHP 5.2
  * Fix counting selected rows after going back to select page</changelog>
  <changelog author="jimmy@boombatower.com" date="1518177600">- Update to version 4.6.1:
  * Release 4.6.1
  * Round 9.2 to 9.2
  * MariaDB: Links to documentation in syntax highlighting
  * Display notification about performing action after relogin
  * Reorder changes
  * Allow specifying server name displayed in breadcrumbs
  * MariaDB: Links to documentation
  * Reorder changes
  * Remove .lcZ from timeFormat (bug #593)
  * Add todo
  * Add more system tables help links
  * Respect empty tableName in tablesPrint
  * Use tableName() in table.inc.php
  * Avoid qsl in a loop
  * Support Shift+click in server export
  * Avoid qsl in a loop
  * Sticky position of table actions
  * Document regression
  * Avoid qsl in check[]
  * Avoid qsl in a loop
  * Mark optional parameter
  * SQLite: Support ` in PRIMARY KEY
  * Avoid Invalid credentials with no credentials
  * SQLite: Allow deleting PRIMARY KEY from tables with auto increment
  * Do not wrap alter table thead
  * Add version() to use in plugins
  * Select original if nothing else is selected
  * Remove nested array
  * Support connecting to MySQL via SSL
  * Display Invalid credentials if connection error is empty
  * Delete unused functions
  * Ignore functions in Min_Driver
  * Remove unnecessary quotes
  * Add truncate_sql to PostgreSQL
  * PostgreSQL: Unescape bytea fields
  * Save bytes
  * Add missing function to compile.php
  * PostgreSQL: Upload binary files to bytea fields
  * Allow using number_type() as pattern
  * Translate thousands separator in JS
  * Editor: Use type=search for Search tables
  * Move tableCheck() below &lt;/form&gt;
  * Pass operator from db.inc.php
  * PostgreSQL: Cast to string when searching using LIKE (bug #325)
  * MySQL: Support non-utf8 charset in search in column
  * Use ST_GeomFromText in MySQL 8 (bug #574)
  * Do not modify $_GET["where"]
  * Display empty operator as LIKE %%
  * Fix whitespace
  * Avoid deprecated each()
  * PostgreSQL: Fix condition for selecting no rows
  * Fix error display in Search tables
  * PostgreSQL: Don't treat interval type as number (bug #474)
  * Pass required parameter
  * Use existing variable
  * Add class to use in designs
  * Use primary key instead of LIMIT 1 if available</changelog>
  <changelog author="jimmy@boombatower.com" date="1519128000">- Update to version 4.6.2:
  * Release 4.6.2
  * Fix test
  * Fix typo
  * Comment
  * Use function after declaring it
  * Remove test server
  * Make test works with MariaDB
  * Make test work on wide screen
  * Editor: Fix displaying of true boolean values
  * Comment
  * Store current version before authentication and in Editor
  * Update design (thanks to Jan)
  * Add missing fullstop
  * Version 4.6.1.1 (#254)
  * Turkish language file updated.
  * Align Whole result
  * Always hide import
  * Print email only with rows or page
  * Move import out of footer
  * Move pagination to fieldset
  * Update readme
  * Make Login test work with jush-textarea
  * Add SQLite test
  * Test warnings
  * Convert tests to Katalon
  * Promote MongoDB, demote Oracle and MS SQL
  * Capitalize Whole result
  * Fill footer to the right
  * Make footer smaller
  * Move pagination outside footer
  * Wrap more into if (!is_ajax)
  * Move &lt;p&gt;
  * PostgreSQL: Add IF EXISTS to DROP SEQUENCE in export (bug #595)
  * Make footer border more obvious
  * Make footer margin not transparent
  * Centralize oninput
  * Speed up alter table
  * Use Unicode arrows in alt
  * Avoid hiding column only to show it later
  * Respect unchecked Default values
  * Update UI when coming from history
  * PostgreSQL: Fix exporting string default values (thanks to PotatoPangolin)
  * Semi-transparent border on table actions
  * Fix exporting sequences in PostgreSQL 10
  * Do not append empty values
  * Shorten JSON values in select (bug #594)
  * Fix id in databases list
  * Suggest updating Git submodules
  * Declare MariaDB support</changelog>
  <changelog author="jimmy@boombatower.com" date="1530187200">- Update to version 4.6.3:
  * Release 4.6.3
  * Fix typo
  * Revert "PgSQL search operator "SQL" added"
  * Add TODO
  * MySQL: Disallow LOAD DATA LOCAL INFILE
  * PostgreSQL: Export false as 0 in PDO (bug #619)
  * mssql: ignore serverproperty error
  * Add spaces
  * Fix table list in sidebar in designs/pokorny (#278)
  * Allow AdminerTablesFilter plugin to be used with third-party table list plugins (#275)
  * Recommend inlining the hash
  * Improve error message
  * Escape \ in enum edit
  * Improve enum parsing
  * Order database names in MySQL 8(bug #613)
  * Respect 'session.cookie_secure' if it is On
  * Copy triggers when copying table
  * MS SQL: Support port with sqlsrc
  * PostgreSQL: Do not cast uuid searches to text (bug #608)
  * Editor: Do not check boolean checkboxes with false in PostgreSQL (bug #607)
  * Disallow using password-less databases
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Report version
  * Document that Elasticsearch requires allow_url_fopen
  * PostgreSQL: Do not cast boolean to text on search (#264)
  * PostgreSQL: Do not cast number searches to text
  * PostgreSQL: Fix editing data in views (bug #605)
  * Elasticsearch: Fix PHP warning
  * PgSQL search operator "SQL" added
  * PostgreSQL: Fix slow query
  * Update JUSH
  * Display that *.gz files are supported in file upload
  * Save bytes
  * Stay on import page when switching database
  * Decrease timeout for running slow queries from 5 seconds to 2 seconds
  * Simplify running slow queries
  * Remove unused argument
  * Update JUSH
  * Use JUSH from GitHub
  * Clarify changelog
  * Display missing database in navigation
  * MongoDB driver: Add create_database methods.
  * Fix comment
  * Add $driver to global variables
  * Add $driver to global variables
  * Use $adminer-&gt;operators
  * PostgreSQL: Do not cast time search
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * MySQL: Use CONVERT() only when searching for non-ASCII (bug #603)
  * Remove optional submodule
  * Update adminer-design (rmsoft) to version 4.6.2.1
  * Wrap lines
  * Fix displaying info about non-alphabetical objects (bug #599)
  * Allow connecting to different drivers in login-servers
  * Wrap long line
  * Add login-otp plugin
  * Update translation
  * Comment
  * Centralize stopping session
  * Stop session before connecting (thanks to Kareem Zidane)
  * Update design (thanks to Jan)
  * PDO: Support binary fields download
  * Don't try to check missing checkboxes
  * Use file caching only in non-dev
  * Editor: Delete images from compiled version
  * Remove driver from file URLs (stored in path)
  * Fix image in compiled version
  * Use single \ in ' strings
  * &amp;nbsp; is not needed with border-collapse</changelog>
  <changelog author="jimmy@boombatower.com" date="1543147200">- Update to version 4.7.0:
  * Release 4.7.0
  * Fix whitespace
  * Clarify change description
  * Updated theme for v4.7 (#310)
  * Update zh-tw.inc.php (#299)
  * Fix a typo
  * Delete copy/pasted code
  * Change inline style to class name
  * Wrap `table.nowrap` with `div[style="overflow-x: auto"]`
  * Fix MariaDB link to numeric types
  * MySQL: Descending indexes in MySQL 8 (bug #643)
  * PostgreSQL: Support for GENERATED BY DEFAULT AS IDENTITY
  * Fix style
  * ClickHouse: support for decimal types, SQL operator
  * ClickHouse: Fix for drop multiple tables and views
  * ClickHouse ALTER DELETE and ALTER UPDATE support
  * ClickHouse fix select-like queries format postfix
  * Avoid overwriting existing tables when copying tables (bug #642)
  * PostgreSQL: Export DESC indexes (bug #639)
  * Recognize current_timestamp() in edit (bug #638)
  * Hide import from server if no path
  * Simplify storing executed SQL queries to bookmarks
  * fix editor theme (#302)
  * Remove unused code
  * MySQL: Recognize ON UPDATE current_timestamp() (bug #632)
  * PostgreSQL: Quote array values in export (bug #621)
  * Add plugin pretty-json-column
  * Update translation
  * DOM not ready when restoring `adminer_tables_filter` (#289)
  * Add Georgian translation
  * Update mvt design
  * Fix design (thanks to apmuthu)
  * ClickHouse: Fix escaping
  * ClickHouse support alpha version
  * Fix typo in Vietnamese translation
  * Add class 'layout' to all non-data tables
  * Set default db to sqlsrv connection
  * Warn when using password with leading or trailing spaces
  * Update donation link
  * Make maxlength in all fields a soft limit
  * Increase username maxlength to 80 (bug #623)
  * Fixes foreign key pattern in MySQL
  * Fix function change with set data type (thanks to osoba hrdelnata)
  * Adminer theme
  * Reset event handlers after cloning (thanks to Salko)
  * Fix inline editing of empty cells</changelog>
  <changelog author="jimmy@boombatower.com" date="1548331200">- Update to version 4.7.1:
  * Release 4.7.1
  * Remember visible columns in Create Table form (bug #493)
  * Editor: Allow disabling boolean fields in PostgreSQL (bug #640)
  * fix: haeckel adminer.css (#323)
  * SQLite: Hide server field in login form
  * Improve MariaDB status variables link (bug #658)
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Display the tables scrollbar (bug #647)
  * Document change
  * Fix PHP 7.3 compatibility (#318)
  * Position of the background database image changed. (#316)
  * Fix mvt theme (#315)
  * Use &lt;ul&gt; list for logins (#314)
  * Add missing Japanese translations (thanks to Shirai Takashi)
  * Change '...' to horizontal ellipsis character
  * php &lt;5.4 compat: array syntax (#313)
  * Add autocomplete attributes to login form</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Replace %__-type macro indirections.
- Replace bash-specific syntax in scriptlets by POSIX sh.</changelog>
  <changelog author="jimmy@boombatower.com" date="1563451200">- Update to version 4.7.2:
  * Release 4.7.2
  * MySQL: Fix getting foreign keys
  * Fix table status in PostgreSQL 12 (bug #683)
  * Fix displaying SQL command after Save and continue edit
  * PostgreSQL: Display definitions of materialized views (bug #682)
  * Support for viewing and editing of column comments in mssql driver
  * PostgreSQL: Fix setting column comments on new table
  * MySQL: Fix displaying multi-columns foreign keys (bug #675)
  * Check if PDO SSL Attributes are set within config, and only set them in PDO Options. otherwise Mysql PDO throws errors if attribute is set and empty
  * Elasticsearch: Show executed query as a json
  * MongoDB: number of records should be count on provide rows
  * Keep font size in all tables.
  * travis: test on php 5.6-7.3 (#330)
  * Cache busting for adminer.css
  * Always pass the SRID part of a geometry property with the GeomFromText function
  * Update rmsoft designs
  * Allow bruteForceKey to be overwritten (#342)
  * Allow overwriting tables when copying them
  * Update rmsoft design
  * Stretch footer over the whole table width (bug #624)
  * Do not attempt logging in without password (bug #676)
  * Fix typo in translation (bug #673)
  * missing translation DE
  * Fix too small #lang margin on pepa-linha design
  * Fix creating users and changing password in MySQL 8 (bug #663)
  * Fix #tables margin (#326)</changelog>
  <changelog author="jimmy@boombatower.com" date="1567080000">- Update to version 4.7.3:
  * Release 4.7.3
  * Fix blocking of concurrent instances in PHP &gt;7.2 (bug #703)
  * setup Mongo authSource by ENV
  * Reset table after changing DB
  * Move &lt;p&gt; after a possible error
  * Allow editing foreign keys pointing to tables in other database/schema (bug #694)
  * MS SQL: Support foreign keys to other DB
  * Do not display error for foreign keys to other databases
  * Save bytes
  * MSSQL: use textarea in edit form for Memo type (#357)
  * MySQL: Support STORED GENERATED
  * SQLite: Skip renaming when recreating table if not necessary
  * SQLite: Preserve auto increment when recreating table
  * SQLite: Allow setting auto increment for empty tables
  * Remove extra space in alter table command
  * SQLite: Handle error in altering table (bug #697)
  * init mancave-hever design
  * MySQL: Allow editing rows identified by negative floats (bug #695)
  * added floating footer css for adminer-theme-mancave2-2.1.alpha
  * Add a comment (bug #691)
  * Use is_numeric()
  * Support MariaDB virtual columns
  * MySQL: Speed up displaying tables in large databases (bug #700)
  * Support unquoted floats in export
  * SQLite: Quote strings stored in integer columns in export (bug #696)
  * MySQL: Skip editing generated columns
  * Add AdminerLoginIp
  * Close &lt;/ul&gt; of logins</changelog>
  <changelog author="jimmy@boombatower.com" date="1571745600">- Update to version 4.7.4:
  * Release 4.7.4
  * Fix XSS if Adminer is accessible at URL /data:
  * Do not put unused doc links to single driver compiled version
  * Fix PostgreSQL doc root
  * Save bytes
  * add links to oracle docs
  * add links to postgres docs
  * Bump version</changelog>
  <changelog author="jimmy@boombatower.com" date="1574856000">- Update to version 4.7.5:
  * Release 4.7.5
  * Re-apply https://github.com/vrana/adminer/pull/363/commits/89b6e9bb
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Stop using adsrc column
  * fixed: SQL command for insert, create table, etc. new: create/rename table, add/drop/change type for column
  * Fix brazilian portuguese translation
  * Swedish translation
  * Update hever design
  * Don't overwrite variable
  * Add id="" to cells with failed inline edit (bug #708)
  * Unify dumpTable declarations (bug #707)
  * PostgreSQL, Oracle: Set schema for EXPLAIN queries in SQL command (bug #706)
  * Initialize version-noverify sooner (bug #705)
  * Make context in qsa() optional
  * Delete extra newlines
  * correct complement of responsive media query
  * update lucas-sandery theme
  * Add funding</changelog>
  <changelog author="jimmy@boombatower.com" date="1580472000">- Update to version 4.7.6:
  * Release 4.7.6
  * Fix comparing IPs
  * Update readme
  * Add example for using SQLite with Editor
  * PostgreSQL: Support exporting views
  * Disallow connecting to ports &gt; 65535 (bug #730)
  * Display time of procedure execution
  * Hide columns when rendering
  * Speed up alter table form
  * Fix clicking on non-input fields in alter table
  * Editor: Fix focusing foreign key search in select
  * MySQL: Always set foreign_key_checks in export</changelog>
  <changelog author="jimmy@boombatower.com" date="1589198400">- Update to version 4.7.7:
  * Release 4.7.7
  * Fix open redirect if Adminer is accessible at //adminer.php%2F@ (thanks to Prakash Sharma)
  * Update Finnish translation
  * Fix typo in Greek translation
  * Add missing translation
  * Fix forwarded IP comparison in login-ip plugin
  * Release 4.7.6</changelog>
  <changelog author="elimat@opensuse.org" date="1609848000">- Update to version 4.7.8:
  * Release 4.7.8
  * MySQL: Use renamed variable
  * Avoid PDO exceptions in PHP 8
  * Fix method call after #406
  * Improve check for numeric ports (bug #769)
  * Add missing method
  * Fix compatibility with PHP 8
  * Avoid each() not available in PHP 8
  * Fix style
  * Escape : also in remove_from_param</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610798400">- BuildRequires php-cli</changelog>
  <changelog author="Jimmy Berry &lt;jimmy@boombatower.com&gt;" date="1611835200">- Drop virtual firebird package since php-firebird was dropped.
  See sr#863764 for Factory decline.</changelog>
  <changelog author="jimmy@boombatower.com" date="1612785600">- Update to version 4.7.9:
  * Release 4.7.9
  * Reorder changes
  * Editor: Avoid trailing dot in export filename
  * Skip impossible condition ($link always contains ?username=)
  * Fix displayed foreign key columns from other DB (bug #766)
  * Do not display empty database in the list twice
  * Display CSRF logout error after connecting
  * Fix displaying type mapping for Elasticsearch &gt;= 6.0
  * MongoDB: Prefer modern extension
  * Fix MongoDB connect 'Database does not support password.' tips
  * Update bug numbers
  * Postgres - fix missing partitioned tables in navigation
  * Linkify URLs in SQL results
  * Title for select data link
  * Quote values with leading and trailing zeroes in CSV export (bug #777)
  * MySQL: Don't quote default value of text fields (bug #779)
  * fixed Unsupported operand types when $port is socket
  * Respect SQL command URL parameters
  * Fix XSS in browsers which don't encode URL parameters (bug #775)
  * SQLite: Set busy_timeout to 500
  * PostgreSQL 11: Create PRIMARY KEY for auto increment columns
  * PostgreSQL: Support smallserial
  * Add comment
  * PostgreSQL PDO: Support PgBouncer, unsupport PostgreSQL &lt; 9.1 (bug #771)
  * fix wrong hungarian translation
  * Editor: Cast to string when searching (bug #325)
  * Don't syntax highlight during IME composition (bug #747)
  * PostgreSQL: Use bigserial for bigint auto increment (bug #765, regression from 3.0.0)
  * MSSQL: Don't trucate displayed comments to 30 chars (use varchar maximum of 8000 upon casting)
  * Update Korean translation (thanks to B. Cansmile Cha)
  * add alternative design dracula theme
  * show correct collation for PostgresSQL
  * PostgreSQL: Fix current schema in view definition
  * Add external designs as submodules
  * Fixes to lucas-sandery theme
  * Do not export names in quotes with sql_mode='ANSI_QUOTES' (bug #749)
  * Fix PgSQL generated always as identity fix
  * Update Russian translation.
  * Update Ukrainian translation.
  * PostgreSQL: Export all FKs after all CREATE TABLE
  * MySQL, MariaDB: Fix doc links
  * Do not display SQL function for checkbox
  * Fix style (bug #743)
  * PostgreSQL: Fix dollar-quoted syntax highlighting (bug #738)
  * Elasticsearch, ClickHouse: Do not print response if HTTP code is not 200
  * Add basic Makefile.
  * Travis: add php 7.4 &amp;&amp; 8.0
  * Re-enable PHP warnings</changelog>
</package>
<package pkgid="c61fa26188433fe0c9d6d7a0efd757baa282f37eb19167ac5dfd42724ed8e9a6" name="adminer-sqlite" arch="noarch">
  <version epoch="0" ver="4.7.9" rel="lp152.2.3.1"/>
  <changelog author="jimmy@boombatower.com" date="1509192000">- Disable elasticsearch and mssql since the dependencies are no
  longer present in Factory.</changelog>
  <changelog author="jimmy@boombatower.com" date="1516190400">- s/or/OR/ in License.
- Update to version 4.4.0:
  * Release 4.4.0
  * Allow sending multiple CSP headers
  * Use __construct for constructor
  * Set session cache limiter only without session.auto_start (bug #586)
  * Add missing newline
  * Require specifying credentials in login-sqlite plugin
  * Avoid count(null)
  * Disallow PHP 5.3 in Travis
  * Disallow connecting to privileged ports (thanks to hyp3rlinx)
  * Rate limit password-less login attempts from the same IP address (thanks to hyp3rlinx)
  * Use HTTPS
  * Use HTTPS in doc_link()
  * Do not set '' for empty enum
  * Fix select function onchange
  * Clone all event handlers in cloneNode()
  * Use border-collapse to prevent unnecessary wrapping in Chrome
  * Fix whitespace
  * Fix selectCount() in information_schema
  * Fix SQL command toggle
  * Disallow scripts without nonce
  * Fix wrapping in Create table
  * Use script_src for &lt;script src&gt;
  * Fix typo in script()
  * Do not send empty CSP
  * Move inline event handlers to &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use the fact that we handle oninput in whisper()
  * Move inline event handlers to &lt;script&gt;
  * Editor: Fix Search data in tables
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler for skipping original
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingMoveRow()
  * Move inline event handlers to &lt;script&gt;
  * Use oninput instead of onchange
  * Move inline event handlers to &lt;script&gt;
  * Fix fieldChange() after 6353a898
  * Use oninput instead of onkeyup
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in on_help()
  * Move inline event handlers to &lt;script&gt;
  * Clone onchange in cloneNode()
  * Move inline event handlers to &lt;script&gt;
  * Allow searching data in tables by Ctrl+Enter
  * Move inline event handlers to &lt;script&gt;
  * Fix selectors in schema after 58b2904d
  * Rely on event always passed to handlers
  * Move inline event handlers to &lt;script&gt;
  * Return false from editingRemoveRow
  * Move inline event handlers to &lt;script&gt;
  * Use script() for &lt;script&gt;
  * Move inline event handlers to &lt;script&gt;
  * Use &lt;script&gt; instead of inline event handler in print_fieldset()
  * Use &lt;script&gt; instead of inline event handler in confirm()
  * Move inline event handlers to &lt;script&gt;
  * Return false from ajaxSetHtml()
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Move inline event handlers to &lt;script&gt;
  * Return false from toggle()
  * onchange='selectFieldChange
  * Use @this in selectFieldChange
  * Move inline event handlers to &lt;script&gt;
  * Fix indexesAddColumn after 14778165
  * Move inline event handlers to &lt;script&gt;
  * Revert using @this in formChecked
  * Allow customizing CSP
  * Allow img-src data: common in skins
  * Use JSON.parse if available
  * Add Content Security Policy
  * Always send security headers in customization
  * Add nosniff header
  * Use Referrer-Policy instead of &lt;meta name="referrer"&gt;
  * Editor: Fix doubleclick on database page
  * Fix a typo from 9cb28186
  * Use @this in JavaScript (prepares for removing inline event handlers)
  * Prevent PHP 7.1 warning about non-numeric values
  * Unindent doc-comments
  * Delete type="text/css" from &lt;style&gt; as it is the default in HTML5
  * Delete type="text/javascript" from &lt;script&gt; as it is the default in HTML5
  * Replace getElementsByTagName by shortcut for querySelectorAll
  * Use querySelector
  * Replace getElementById by shortcut for querySelector (requires IE8)
  * Fix skin for Chrome 61 (thanks to Dominik Ulrich)
  * Editor: Display field comment's text inside [] only in edit form
  * Fix hebrew typos (#228)
  * Add new Hebrew translations
  * Add Hebrew translation
  * Editor: Don't set time zone from PHP
  * Make sure all sidebar elements are pushed down, not just the form.
  * Update AdminerTablesFilter to produce li as per c9801e2e2418
  * MySQL: Remove dedicated view for replication status
  * Sort table names (bug #552)
  * Update es.inc.php
  * Add a donate link</changelog>
  <changelog author="jimmy@boombatower.com" date="1516881600">- Update to version 4.5.0:
  * Release 4.5.0
  * Fix tests after 95d02bb9
  * Simplify drop object confirmation questions
  * Translate message added in 4.4.0
  * Display name of the object in confirmation when dropping it
  * Display error when getting row to edit
  * Avoid CONVERT() except in MySQL (bug #509)
  * Bump version
  * MySQL: Support routines with comments in parameters (bug #460)
  * Verify if adminer.version was created on www.adminer.org
  * Store current Adminer version server-side to avoid excessive requests
  * Send token as last param
  * Allow using adminer.invalid by other users in a group
  * Extract file_open_lock and file_write_unlock
  * Display boolean values as code (bug #562)
  * MariaDB: Support fulltext and spatial indexes in InnoDB (bug #583)
  * PostgreSQL: Display foreign tables (bug #576)
  * Add designs.php
  * Fix compiled version after 5cc831c1
  * Hide window.opener from pages opened in a new window (bug #561)
  * Fix GPL version
  * Add plugin for switching designs
  * Display bold parts of error (bug #565)
  * Add bottom border to last cells
  * Editor: Fix displaying of false values in PostgreSQL (bug #568)
  * Decrease float precision (bug #578)
  * Add ability to override file name (path) when loading dump from webserver
  * Support current_timestamp() as default of time fields (bug #572)
  * Display newlines in column comments (bug #573)
  * MySQL: Support geometry in MySQL 8 (bug #574)
  * MSSQL driver fixed for freetds drivers. See bug #167, #291
  * Fix search focus (regression from 4.4.0)
  * Compatibility with PHP &lt; 5.3
  * Add mongodb as a possible driver
  * Save bytes
  * php7 support with minimal changes of original code
  * PostgreSQL: Export DROP SEQUENCE if dropping table
  * PostgreSQL: Do not export triggers if not requested
  * Ignore removed CREATE+ALTER mode in trigger_sql()
  * Fix whitespace
  * CSP: Allow any CSS
  * adminer-theme-mancave2-2.0.alpha
  * Fix NULL value in edit form with Postgres
  * Do not warn about MySQL specific functions
  * Fix single driver non-MySQL compiled versions (regression from 150301ed)
  * Hide driver selection in single-driver version (regression from e762a6aa)
  * Unify HTML for list of tables in Editor according to Adminer
  * Encapsulate fulltext part in search box into &lt;div&gt;
  * Enhance ElasticSearch integration
  * Allow PHP 5.6 in Travis
  * Select numeric database name in DB list (bug #580)
  * SQLite: Enable foreign key checks
  * CSP: Allow any images, media and fonts, disallow base-uri
  * Define JS functions in AdminerTablesFilter sooner
  * Adminer: Fix Search data in tables</changelog>
  <changelog author="jimmy@boombatower.com" date="1517832000">- Update to version 4.6.0:
  * Release 4.6.0
  * Fix affected rows after getting warnings
  * Fix number of affected rows after getting warnings
  * Fix test
  * Fix 5.1 being displayed as 5.09999...
  * PRIMARY KEY in SQLite
  * Add design Esterka
  * Disable autocompleting password on create user page
  * Use primary key to edit rows even if not selected
  * Space between DB and Use
  * Translate DB
  * Select converted fields only once
  * Don't count rows if we reached the end
  * Fix count_rows with more than one group by column
  * Use separator in limit1
  * SQLite: Limit rows in data manipulation without unique key
  * Document that tests don't work with oninput
  * PostgreSQL: Limit rows in data manipulation without unique key
  * Don't use ctid as it's not stable
  * Move variables close to their usage
  * Limit non-unique where updates
  * Use Oid as the name of the column
  * Save bytes
  * Update rmsoft design
  * MySQL: Add FIND_IN_SET search operator
  * Add rmsoft design
  * MySQL: Add floor and ceil functions
  * Fix links to PostgreSQL 10 documentation
  * Delete unused variable
  * Display options for timestamp columns when creating a new table (thanks to Robert Vlach)
  * Don't display warnings for failed queries
  * Fix variable name
  * Reorder variables
  * Use pg_last_notice only with pgsql
  * Print warnings in call
  * Pass start time to selectQuery
  * PostgreSQL: Display warnings
  * Return string from warnings()
  * Display warnings in messages
  * Show select warnings
  * Support X-Forwarded-Prefix (e.g. Traefik PathPrefixStrip feature)
  * Lowercase EXPLAIN but don't translate it
  * Move explain below warnings
  * Fix return type
  * MySQL: Display warnings in SQL command
  * Quote default values not starting with a letter
  * Stop redirecting links via adminer.org
  * Fix min_version use
  * Quote dates in default value
  * Fully support functions in default values
  * Fix min_version use
  * PostgreSQL: Allow now() as default value (bug #525)
  * Fix edit_type after 1f21cd43
  * PostgreSQL: Allow editing views with uppercase letters (bug #467)
  * PostgreSQL: Allow creating trigger functions
  * Add placeholders
  * PostgreSQL: Support functions
  * Add min_version to compile.php
  * SimpleDB: Document that allow_url_fopen is required (bug #340)
  * Focus correct field in selectSearch
  * Support JSON since MariaDB 10.2 (bug #590)
  * Use min_version
  * Add min_version
  * Save bytes
  * add malay translation
  * Added and translated missing keys in polish translation
  * Update compatibility with TinyMCE v4 (#247)
  * Fix elastic after ef5a7639
  * fix elastic.inc.php to work on PHP 5.2
  * Fix counting selected rows after going back to select page</changelog>
  <changelog author="jimmy@boombatower.com" date="1518177600">- Update to version 4.6.1:
  * Release 4.6.1
  * Round 9.2 to 9.2
  * MariaDB: Links to documentation in syntax highlighting
  * Display notification about performing action after relogin
  * Reorder changes
  * Allow specifying server name displayed in breadcrumbs
  * MariaDB: Links to documentation
  * Reorder changes
  * Remove .lcZ from timeFormat (bug #593)
  * Add todo
  * Add more system tables help links
  * Respect empty tableName in tablesPrint
  * Use tableName() in table.inc.php
  * Avoid qsl in a loop
  * Support Shift+click in server export
  * Avoid qsl in a loop
  * Sticky position of table actions
  * Document regression
  * Avoid qsl in check[]
  * Avoid qsl in a loop
  * Mark optional parameter
  * SQLite: Support ` in PRIMARY KEY
  * Avoid Invalid credentials with no credentials
  * SQLite: Allow deleting PRIMARY KEY from tables with auto increment
  * Do not wrap alter table thead
  * Add version() to use in plugins
  * Select original if nothing else is selected
  * Remove nested array
  * Support connecting to MySQL via SSL
  * Display Invalid credentials if connection error is empty
  * Delete unused functions
  * Ignore functions in Min_Driver
  * Remove unnecessary quotes
  * Add truncate_sql to PostgreSQL
  * PostgreSQL: Unescape bytea fields
  * Save bytes
  * Add missing function to compile.php
  * PostgreSQL: Upload binary files to bytea fields
  * Allow using number_type() as pattern
  * Translate thousands separator in JS
  * Editor: Use type=search for Search tables
  * Move tableCheck() below &lt;/form&gt;
  * Pass operator from db.inc.php
  * PostgreSQL: Cast to string when searching using LIKE (bug #325)
  * MySQL: Support non-utf8 charset in search in column
  * Use ST_GeomFromText in MySQL 8 (bug #574)
  * Do not modify $_GET["where"]
  * Display empty operator as LIKE %%
  * Fix whitespace
  * Avoid deprecated each()
  * PostgreSQL: Fix condition for selecting no rows
  * Fix error display in Search tables
  * PostgreSQL: Don't treat interval type as number (bug #474)
  * Pass required parameter
  * Use existing variable
  * Add class to use in designs
  * Use primary key instead of LIMIT 1 if available</changelog>
  <changelog author="jimmy@boombatower.com" date="1519128000">- Update to version 4.6.2:
  * Release 4.6.2
  * Fix test
  * Fix typo
  * Comment
  * Use function after declaring it
  * Remove test server
  * Make test works with MariaDB
  * Make test work on wide screen
  * Editor: Fix displaying of true boolean values
  * Comment
  * Store current version before authentication and in Editor
  * Update design (thanks to Jan)
  * Add missing fullstop
  * Version 4.6.1.1 (#254)
  * Turkish language file updated.
  * Align Whole result
  * Always hide import
  * Print email only with rows or page
  * Move import out of footer
  * Move pagination to fieldset
  * Update readme
  * Make Login test work with jush-textarea
  * Add SQLite test
  * Test warnings
  * Convert tests to Katalon
  * Promote MongoDB, demote Oracle and MS SQL
  * Capitalize Whole result
  * Fill footer to the right
  * Make footer smaller
  * Move pagination outside footer
  * Wrap more into if (!is_ajax)
  * Move &lt;p&gt;
  * PostgreSQL: Add IF EXISTS to DROP SEQUENCE in export (bug #595)
  * Make footer border more obvious
  * Make footer margin not transparent
  * Centralize oninput
  * Speed up alter table
  * Use Unicode arrows in alt
  * Avoid hiding column only to show it later
  * Respect unchecked Default values
  * Update UI when coming from history
  * PostgreSQL: Fix exporting string default values (thanks to PotatoPangolin)
  * Semi-transparent border on table actions
  * Fix exporting sequences in PostgreSQL 10
  * Do not append empty values
  * Shorten JSON values in select (bug #594)
  * Fix id in databases list
  * Suggest updating Git submodules
  * Declare MariaDB support</changelog>
  <changelog author="jimmy@boombatower.com" date="1530187200">- Update to version 4.6.3:
  * Release 4.6.3
  * Fix typo
  * Revert "PgSQL search operator "SQL" added"
  * Add TODO
  * MySQL: Disallow LOAD DATA LOCAL INFILE
  * PostgreSQL: Export false as 0 in PDO (bug #619)
  * mssql: ignore serverproperty error
  * Add spaces
  * Fix table list in sidebar in designs/pokorny (#278)
  * Allow AdminerTablesFilter plugin to be used with third-party table list plugins (#275)
  * Recommend inlining the hash
  * Improve error message
  * Escape \ in enum edit
  * Improve enum parsing
  * Order database names in MySQL 8(bug #613)
  * Respect 'session.cookie_secure' if it is On
  * Copy triggers when copying table
  * MS SQL: Support port with sqlsrc
  * PostgreSQL: Do not cast uuid searches to text (bug #608)
  * Editor: Do not check boolean checkboxes with false in PostgreSQL (bug #607)
  * Disallow using password-less databases
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Consolidate code
  * MongoDB: Report version
  * Document that Elasticsearch requires allow_url_fopen
  * PostgreSQL: Do not cast boolean to text on search (#264)
  * PostgreSQL: Do not cast number searches to text
  * PostgreSQL: Fix editing data in views (bug #605)
  * Elasticsearch: Fix PHP warning
  * PgSQL search operator "SQL" added
  * PostgreSQL: Fix slow query
  * Update JUSH
  * Display that *.gz files are supported in file upload
  * Save bytes
  * Stay on import page when switching database
  * Decrease timeout for running slow queries from 5 seconds to 2 seconds
  * Simplify running slow queries
  * Remove unused argument
  * Update JUSH
  * Use JUSH from GitHub
  * Clarify changelog
  * Display missing database in navigation
  * MongoDB driver: Add create_database methods.
  * Fix comment
  * Add $driver to global variables
  * Add $driver to global variables
  * Use $adminer-&gt;operators
  * PostgreSQL: Do not cast time search
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * Do not cast date/timestamp exact searches in PostgreSQL to text
  * MySQL: Use CONVERT() only when searching for non-ASCII (bug #603)
  * Remove optional submodule
  * Update adminer-design (rmsoft) to version 4.6.2.1
  * Wrap lines
  * Fix displaying info about non-alphabetical objects (bug #599)
  * Allow connecting to different drivers in login-servers
  * Wrap long line
  * Add login-otp plugin
  * Update translation
  * Comment
  * Centralize stopping session
  * Stop session before connecting (thanks to Kareem Zidane)
  * Update design (thanks to Jan)
  * PDO: Support binary fields download
  * Don't try to check missing checkboxes
  * Use file caching only in non-dev
  * Editor: Delete images from compiled version
  * Remove driver from file URLs (stored in path)
  * Fix image in compiled version
  * Use single \ in ' strings
  * &amp;nbsp; is not needed with border-collapse</changelog>
  <changelog author="jimmy@boombatower.com" date="1543147200">- Update to version 4.7.0:
  * Release 4.7.0
  * Fix whitespace
  * Clarify change description
  * Updated theme for v4.7 (#310)
  * Update zh-tw.inc.php (#299)
  * Fix a typo
  * Delete copy/pasted code
  * Change inline style to class name
  * Wrap `table.nowrap` with `div[style="overflow-x: auto"]`
  * Fix MariaDB link to numeric types
  * MySQL: Descending indexes in MySQL 8 (bug #643)
  * PostgreSQL: Support for GENERATED BY DEFAULT AS IDENTITY
  * Fix style
  * ClickHouse: support for decimal types, SQL operator
  * ClickHouse: Fix for drop multiple tables and views
  * ClickHouse ALTER DELETE and ALTER UPDATE support
  * ClickHouse fix select-like queries format postfix
  * Avoid overwriting existing tables when copying tables (bug #642)
  * PostgreSQL: Export DESC indexes (bug #639)
  * Recognize current_timestamp() in edit (bug #638)
  * Hide import from server if no path
  * Simplify storing executed SQL queries to bookmarks
  * fix editor theme (#302)
  * Remove unused code
  * MySQL: Recognize ON UPDATE current_timestamp() (bug #632)
  * PostgreSQL: Quote array values in export (bug #621)
  * Add plugin pretty-json-column
  * Update translation
  * DOM not ready when restoring `adminer_tables_filter` (#289)
  * Add Georgian translation
  * Update mvt design
  * Fix design (thanks to apmuthu)
  * ClickHouse: Fix escaping
  * ClickHouse support alpha version
  * Fix typo in Vietnamese translation
  * Add class 'layout' to all non-data tables
  * Set default db to sqlsrv connection
  * Warn when using password with leading or trailing spaces
  * Update donation link
  * Make maxlength in all fields a soft limit
  * Increase username maxlength to 80 (bug #623)
  * Fixes foreign key pattern in MySQL
  * Fix function change with set data type (thanks to osoba hrdelnata)
  * Adminer theme
  * Reset event handlers after cloning (thanks to Salko)
  * Fix inline editing of empty cells</changelog>
  <changelog author="jimmy@boombatower.com" date="1548331200">- Update to version 4.7.1:
  * Release 4.7.1
  * Remember visible columns in Create Table form (bug #493)
  * Editor: Allow disabling boolean fields in PostgreSQL (bug #640)
  * fix: haeckel adminer.css (#323)
  * SQLite: Hide server field in login form
  * Improve MariaDB status variables link (bug #658)
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Display the tables scrollbar (bug #647)
  * Document change
  * Fix PHP 7.3 compatibility (#318)
  * Position of the background database image changed. (#316)
  * Fix mvt theme (#315)
  * Use &lt;ul&gt; list for logins (#314)
  * Add missing Japanese translations (thanks to Shirai Takashi)
  * Change '...' to horizontal ellipsis character
  * php &lt;5.4 compat: array syntax (#313)
  * Add autocomplete attributes to login form</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Replace %__-type macro indirections.
- Replace bash-specific syntax in scriptlets by POSIX sh.</changelog>
  <changelog author="jimmy@boombatower.com" date="1563451200">- Update to version 4.7.2:
  * Release 4.7.2
  * MySQL: Fix getting foreign keys
  * Fix table status in PostgreSQL 12 (bug #683)
  * Fix displaying SQL command after Save and continue edit
  * PostgreSQL: Display definitions of materialized views (bug #682)
  * Support for viewing and editing of column comments in mssql driver
  * PostgreSQL: Fix setting column comments on new table
  * MySQL: Fix displaying multi-columns foreign keys (bug #675)
  * Check if PDO SSL Attributes are set within config, and only set them in PDO Options. otherwise Mysql PDO throws errors if attribute is set and empty
  * Elasticsearch: Show executed query as a json
  * MongoDB: number of records should be count on provide rows
  * Keep font size in all tables.
  * travis: test on php 5.6-7.3 (#330)
  * Cache busting for adminer.css
  * Always pass the SRID part of a geometry property with the GeomFromText function
  * Update rmsoft designs
  * Allow bruteForceKey to be overwritten (#342)
  * Allow overwriting tables when copying them
  * Update rmsoft design
  * Stretch footer over the whole table width (bug #624)
  * Do not attempt logging in without password (bug #676)
  * Fix typo in translation (bug #673)
  * missing translation DE
  * Fix too small #lang margin on pepa-linha design
  * Fix creating users and changing password in MySQL 8 (bug #663)
  * Fix #tables margin (#326)</changelog>
  <changelog author="jimmy@boombatower.com" date="1567080000">- Update to version 4.7.3:
  * Release 4.7.3
  * Fix blocking of concurrent instances in PHP &gt;7.2 (bug #703)
  * setup Mongo authSource by ENV
  * Reset table after changing DB
  * Move &lt;p&gt; after a possible error
  * Allow editing foreign keys pointing to tables in other database/schema (bug #694)
  * MS SQL: Support foreign keys to other DB
  * Do not display error for foreign keys to other databases
  * Save bytes
  * MSSQL: use textarea in edit form for Memo type (#357)
  * MySQL: Support STORED GENERATED
  * SQLite: Skip renaming when recreating table if not necessary
  * SQLite: Preserve auto increment when recreating table
  * SQLite: Allow setting auto increment for empty tables
  * Remove extra space in alter table command
  * SQLite: Handle error in altering table (bug #697)
  * init mancave-hever design
  * MySQL: Allow editing rows identified by negative floats (bug #695)
  * added floating footer css for adminer-theme-mancave2-2.1.alpha
  * Add a comment (bug #691)
  * Use is_numeric()
  * Support MariaDB virtual columns
  * MySQL: Speed up displaying tables in large databases (bug #700)
  * Support unquoted floats in export
  * SQLite: Quote strings stored in integer columns in export (bug #696)
  * MySQL: Skip editing generated columns
  * Add AdminerLoginIp
  * Close &lt;/ul&gt; of logins</changelog>
  <changelog author="jimmy@boombatower.com" date="1571745600">- Update to version 4.7.4:
  * Release 4.7.4
  * Fix XSS if Adminer is accessible at URL /data:
  * Do not put unused doc links to single driver compiled version
  * Fix PostgreSQL doc root
  * Save bytes
  * add links to oracle docs
  * add links to postgres docs
  * Bump version</changelog>
  <changelog author="jimmy@boombatower.com" date="1574856000">- Update to version 4.7.5:
  * Release 4.7.5
  * Re-apply https://github.com/vrana/adminer/pull/363/commits/89b6e9bb
  * Update zh-tw.inc.php
  * Update zh.inc.php
  * Stop using adsrc column
  * fixed: SQL command for insert, create table, etc. new: create/rename table, add/drop/change type for column
  * Fix brazilian portuguese translation
  * Swedish translation
  * Update hever design
  * Don't overwrite variable
  * Add id="" to cells with failed inline edit (bug #708)
  * Unify dumpTable declarations (bug #707)
  * PostgreSQL, Oracle: Set schema for EXPLAIN queries in SQL command (bug #706)
  * Initialize version-noverify sooner (bug #705)
  * Make context in qsa() optional
  * Delete extra newlines
  * correct complement of responsive media query
  * update lucas-sandery theme
  * Add funding</changelog>
  <changelog author="jimmy@boombatower.com" date="1580472000">- Update to version 4.7.6:
  * Release 4.7.6
  * Fix comparing IPs
  * Update readme
  * Add example for using SQLite with Editor
  * PostgreSQL: Support exporting views
  * Disallow connecting to ports &gt; 65535 (bug #730)
  * Display time of procedure execution
  * Hide columns when rendering
  * Speed up alter table form
  * Fix clicking on non-input fields in alter table
  * Editor: Fix focusing foreign key search in select
  * MySQL: Always set foreign_key_checks in export</changelog>
  <changelog author="jimmy@boombatower.com" date="1589198400">- Update to version 4.7.7:
  * Release 4.7.7
  * Fix open redirect if Adminer is accessible at //adminer.php%2F@ (thanks to Prakash Sharma)
  * Update Finnish translation
  * Fix typo in Greek translation
  * Add missing translation
  * Fix forwarded IP comparison in login-ip plugin
  * Release 4.7.6</changelog>
  <changelog author="elimat@opensuse.org" date="1609848000">- Update to version 4.7.8:
  * Release 4.7.8
  * MySQL: Use renamed variable
  * Avoid PDO exceptions in PHP 8
  * Fix method call after #406
  * Improve check for numeric ports (bug #769)
  * Add missing method
  * Fix compatibility with PHP 8
  * Avoid each() not available in PHP 8
  * Fix style
  * Escape : also in remove_from_param</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610798400">- BuildRequires php-cli</changelog>
  <changelog author="Jimmy Berry &lt;jimmy@boombatower.com&gt;" date="1611835200">- Drop virtual firebird package since php-firebird was dropped.
  See sr#863764 for Factory decline.</changelog>
  <changelog author="jimmy@boombatower.com" date="1612785600">- Update to version 4.7.9:
  * Release 4.7.9
  * Reorder changes
  * Editor: Avoid trailing dot in export filename
  * Skip impossible condition ($link always contains ?username=)
  * Fix displayed foreign key columns from other DB (bug #766)
  * Do not display empty database in the list twice
  * Display CSRF logout error after connecting
  * Fix displaying type mapping for Elasticsearch &gt;= 6.0
  * MongoDB: Prefer modern extension
  * Fix MongoDB connect 'Database does not support password.' tips
  * Update bug numbers
  * Postgres - fix missing partitioned tables in navigation
  * Linkify URLs in SQL results
  * Title for select data link
  * Quote values with leading and trailing zeroes in CSV export (bug #777)
  * MySQL: Don't quote default value of text fields (bug #779)
  * fixed Unsupported operand types when $port is socket
  * Respect SQL command URL parameters
  * Fix XSS in browsers which don't encode URL parameters (bug #775)
  * SQLite: Set busy_timeout to 500
  * PostgreSQL 11: Create PRIMARY KEY for auto increment columns
  * PostgreSQL: Support smallserial
  * Add comment
  * PostgreSQL PDO: Support PgBouncer, unsupport PostgreSQL &lt; 9.1 (bug #771)
  * fix wrong hungarian translation
  * Editor: Cast to string when searching (bug #325)
  * Don't syntax highlight during IME composition (bug #747)
  * PostgreSQL: Use bigserial for bigint auto increment (bug #765, regression from 3.0.0)
  * MSSQL: Don't trucate displayed comments to 30 chars (use varchar maximum of 8000 upon casting)
  * Update Korean translation (thanks to B. Cansmile Cha)
  * add alternative design dracula theme
  * show correct collation for PostgresSQL
  * PostgreSQL: Fix current schema in view definition
  * Add external designs as submodules
  * Fixes to lucas-sandery theme
  * Do not export names in quotes with sql_mode='ANSI_QUOTES' (bug #749)
  * Fix PgSQL generated always as identity fix
  * Update Russian translation.
  * Update Ukrainian translation.
  * PostgreSQL: Export all FKs after all CREATE TABLE
  * MySQL, MariaDB: Fix doc links
  * Do not display SQL function for checkbox
  * Fix style (bug #743)
  * PostgreSQL: Fix dollar-quoted syntax highlighting (bug #738)
  * Elasticsearch, ClickHouse: Do not print response if HTTP code is not 200
  * Add basic Makefile.
  * Travis: add php 7.4 &amp;&amp; 8.0
  * Re-enable PHP warnings</changelog>
</package>
<package pkgid="c371ee828cb74adad25378bb2a04bd9020ebe95bdb5009e913bb7a5ddd0c837f" name="aide" arch="src">
  <version epoch="0" ver="0.16" rel="lp152.5.3.1"/>
  <changelog author="meissner@suse.de" date="1175169600">- buildrequires flex,bison</changelog>
  <changelog author="meissner@suse.de" date="1202817600">- Version 0.13.1
  * Fixed bug with reading gzipped aide.db files
  * Removed dead ustat code
- Version 0.13
  * Added support for selinux and xattr attributes
    (kindly contributed by Red Hat)
  * Added support for the Linux Audit System
    (kindly contributed by Red Hat)
  * Fixed usage of libgcrypt instead of libmhash
  * Added file locking for output files
  * Fixed bugs
- Version 0.12
  * Fixed bugs
  * Allow http/https/ftp URLs through libcurl
  * Support posix_fadvice() to avoid caching files
- enabled ACL and XATTR support</changelog>
  <changelog author="meissner@suse.de" date="1219406400">- enabled SELinux support [Fate#303662]
- enabled curl
- disable static (does not make much sense)</changelog>
  <changelog author="meissner@suse.de" date="1231156800">- fixed abort on check/update by removing the hash requirement bnc#406597
- fixed version output bnc#463511
- enhanced testcase to also run one aide --check</changelog>
  <changelog author="crrodriguez@suse.de" date="1245240000">- fix build when as-needed is a default liker option</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="ro@suse.de" date="1272542400">- make aide check verbose to get started
- add sleep and sync to fix build</changelog>
  <changelog author="meissner@suse.de" date="1281441600">- updated to 0.15
  - lots of fixes and some new stuff</changelog>
  <changelog author="freespacer@gmx.de" date="1285934400">- updated to version 0.15.1
  - Ignore changed file name if attributes does not match
  - Allow absence of DB_CHECKINODE if file name has changed
- renew patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add missing call to make
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1610020800">- aide-0.15-syslog-format.patch: Add a syslog_format to aide (bsc#1180165)</changelog>
</package>
<package pkgid="b9d545844a7aacc639c9d1598a8d3f923604a703bf43e93854af0702514939bc" name="aide" arch="x86_64">
  <version epoch="0" ver="0.16" rel="lp152.5.3.1"/>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1610020800">- aide-0.15-syslog-format.patch: Add a syslog_format to aide (bsc#1180165)</changelog>
</package>
<package pkgid="0c1c90830020865b38f5c4ab7941e7a3b3206e3b1cb75ea3c07c9aca9b6b9cf5" name="aide-test" arch="x86_64">
  <version epoch="0" ver="0.16" rel="lp152.5.3.1"/>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1610020800">- aide-0.15-syslog-format.patch: Add a syslog_format to aide (bsc#1180165)</changelog>
</package>
<package pkgid="69cc40aeea5af118a2aa2cefc601be0cad947180bbcc87f5ae57440c19144e31" name="akonadi-server" arch="src">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="ccb46a1c661bca326928e5dc3d35db72cc8c375abe2eacff7ba2d88a09401484" name="akonadi-server" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="0bce15d8a2899733bb64415b503e971f98346eb0a70a183d8434e5642c9b3123" name="akonadi-server" arch="src">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="e988127085ace5ebf939aadcd17f9f97e9953a4636b3fe4b350ca505faefb0c3" name="akonadi-server" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="29175fed00b8e8212fb8132496aba0a655fdb45b03da202d299897115c7a9713" name="akonadi-server-devel" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="78532b95b5723f07dc9e7ca9d7057d814f67c6fd07c6e43dab6886780b0f07e8" name="akonadi-server-devel" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="8223f168f2219b23ae574cdee580e09964c5988e950475f26353f15dee6fe140" name="akonadi-server-lang" arch="noarch">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="edeec8141168005979ef0f31d52f3df5d57a8c1fa1f458d9cf72cae414666c0f" name="akonadi-server-lang" arch="noarch">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="fff790f7cfcb4f081c9176afaac9075a5b0e1c9c1c9d4475ecf36572fdc81376" name="akonadi-server-sqlite" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="fce1a47a4c5f68f0097f799aee5f5602b5d655644320b85786514060cb726052" name="akonadi-server-sqlite" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="53cb939601872b0b6033846c3e1e07f1dc9524f617eb534abc40a01bfad59563" name="akregator" arch="src">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- No code change since 19.08.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes since 19.08.3, only listing bugfixes:
  * Fix Bug 412182 - Missing date for new articles (kde#412182)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Too many changes since 19.11.80, only listing bugfixes:
  * Fix Bug 177511 - inline article view in new-opened-article
    scrolls to "same" position as previous opened article in same feed (kde#177511)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release
  * Make it compile with qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579003200">- Drop the unneeded python2 requirement.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes since 19.12.3, only listing bugfixes:
  * Don't translate file extension (kde#416983)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- Changes since 20.03.80:
  * Fix clazy warning/cppcheck warning
  * Use correct namespace</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Inform when loading was done
  * Fix display userfeedback config in kontact config dialogbox</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Fix Bug 422193 - start page don't display properly with qt 5.15 (kde#422193)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1610366400">- Add akregator-fix_systray.patch (fixes boo#1177572)</changelog>
</package>
<package pkgid="68b66bc34ff1c2fefa1792ab4459f9f8e7272856e145d8a2dabd8059d0127de4" name="akregator" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- No code change since 19.08.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes since 19.08.3, only listing bugfixes:
  * Fix Bug 412182 - Missing date for new articles (kde#412182)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Too many changes since 19.11.80, only listing bugfixes:
  * Fix Bug 177511 - inline article view in new-opened-article
    scrolls to "same" position as previous opened article in same feed (kde#177511)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release
  * Make it compile with qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579003200">- Drop the unneeded python2 requirement.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes since 19.12.3, only listing bugfixes:
  * Don't translate file extension (kde#416983)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- Changes since 20.03.80:
  * Fix clazy warning/cppcheck warning
  * Use correct namespace</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Inform when loading was done
  * Fix display userfeedback config in kontact config dialogbox</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Fix Bug 422193 - start page don't display properly with qt 5.15 (kde#422193)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1610366400">- Add akregator-fix_systray.patch (fixes boo#1177572)</changelog>
</package>
<package pkgid="dd866fd0d58bc2352d1bd8bab16721faa66eab6bdd8a087c1a42c24190321563" name="akregator-lang" arch="noarch">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- No code change since 19.08.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes since 19.08.3, only listing bugfixes:
  * Fix Bug 412182 - Missing date for new articles (kde#412182)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Too many changes since 19.11.80, only listing bugfixes:
  * Fix Bug 177511 - inline article view in new-opened-article
    scrolls to "same" position as previous opened article in same feed (kde#177511)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release
  * Make it compile with qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579003200">- Drop the unneeded python2 requirement.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes since 19.12.3, only listing bugfixes:
  * Don't translate file extension (kde#416983)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- Changes since 20.03.80:
  * Fix clazy warning/cppcheck warning
  * Use correct namespace</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Inform when loading was done
  * Fix display userfeedback config in kontact config dialogbox</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Fix Bug 422193 - start page don't display properly with qt 5.15 (kde#422193)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1610366400">- Add akregator-fix_systray.patch (fixes boo#1177572)</changelog>
</package>
<package pkgid="317dbd99b9e59e0800a6971d4ced006879cddb6c5cea6f024123f14d569f2369" name="alpine" arch="src">
  <version epoch="0" ver="2.24" rel="lp152.5.3.1"/>
  <changelog author="aj@suse.de" date="1343390400">- Include sys/resource.h for getrlimit.</changelog>
  <changelog author="jengelh@inai.de" date="1369224000">- Remove old SUSE definitions</changelog>
  <changelog author="jengelh@inai.de" date="1369224001">- Update to new upstream release 2.10
  * Quota report for IMAP folders that support it
  (press the "@" command in the index screen of such folder).
  * Search a folder for the content of any header with the ";"
  command.
  * Foreign characters are decoded correctly in IMAP folders.
  * Recognition of proper mime type for docx, xlsx, and pptx files.
  * When composing a message, Alpine will create a new thread when
  the subject is erased.
- Uncompress patches, since quilt does not like working with them
- Remove because merged upstream: chappa-filterflagbug.patch(.gz),
  chappa-nlinfobug.patch(.gz), chappa-replacebug.patch(.gz),
  chappa-searchheader.patch(.gz), chappa-streamlock.patch(.gz)
- Rediff to clear fuzz: alpine-no-add-needed.patch,
  pine-nonvoid-function.patch
- Remove because no longer applies and total lack of description
  as per Patch Guidelines:
  alpine-no-add-needed.patch</changelog>
  <changelog author="jengelh@inai.de" date="1378123200">- Update to new upstream release 2.11
  * Increase encryption of S/MIME encrypted messages.
  * Pico: Improvements in justification of paragraphs: lines that
  begin with a quote string, followed by a space were considered
  individual paragraphs, now they are considered part of a paragraph.
  * Unix Alpine: Allow local .pinerc file to be a symbolic link.
  * Experimental extended support of recognition of UTF-8 in urls
  * Added recognition of ws and wss URIs.
  * Add ability to color folder names, directory names, and text in
  the FOLDER SCREEN.
  * Add the ability to color any token used in the display of the
  INDEX SCREEN.
  * New option preserve-original-fields that adds the ability to
  preserve To: and Cc: fields when replying to a message, as
  specified by original sender.
  * Added Quota subcommands for printing, forwarding, saving, etc.
- Refresh from homepage (and save as unified): chappa-*.patch
- Refresh for -p1: operation-may-be-undefined-warning.diff,
  fix-implicit.patch, alpine-gcc44.diff
- Drop quilt-patches/alpine-2.00-as_needed.patch (merged upstream)</changelog>
  <changelog author="max@suse.com" date="1390392000">- Add alpine-mime-type-workaround.patch:
  Send mime type in lowercase to work around MUAs that can't cope
  with upper case mime type strings in the Content-Type header
  such as the webmailer of GMX.  This is a backport from the
  current development release and will become obsolete with the
  next version upgrade.</changelog>
  <changelog author="jengelh@inai.de" date="1393848000">- The pico and pilot standalone programs have version numbers of
  their own; expose these in the .spec file</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
  <changelog author="Michal Svec &lt;msvec@suse.com&gt;" date="1541678400">- updated upstream URL</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1556798400">- Fix initialisation of encrypted password store (bsc#1133597,
  alpine-pinepw.patch).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add return-values.diff to unbreak build.
- Use more macros for standard dirs in the build recipe.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1588852800">- Update to release 2.22
  * Support for XOAUTH2 authentication method in Gmail.
  * NTLM authentication support with the ntlm library.
  * Added the "/tls1_3" flag for servers that support it.
  * Add the "g" option to the select command that works in IMAP
    servers that implement the X-GM-EXT-1 capability (such as the
    one offered by Gmail).
  * Added "/auth=XYZ" to the way to define a server. This allows
    users to select the method to authenticate to an IMAP, SMTP
    or POP3 server. Examples are /auth=plain, or /auth=gssapi,
    etc.
  * When a message is of type multipart/mixed, and its first part
    is multipart/signed, Alpine will include the text of the
    original message in a reply message, instead of including a
    multipart attachment.
  * Added backward search in the index screen.
  * pico: Add -dict option to Pico, which allows users to choose a
    dictionary when spelling.
- Drop /usr/bin/mailutil, it is not built by default anymore.
- Remove alpine-pinepw.patch (merged upstream)
- Add description files for patches 600-616. These live in a
  separate file because (a) upstream does not offer the description
  as part of the patch file, (b) redownloading the patches would
  nuke any added description due to &lt;a&gt;.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591531200">- Add extern.diff.
- Mark license texts as %license.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599480000">- Update to release 2.23
  * Fixes bsc#1173281, CVE-2020-14929: Alpine silently proceeds to
    use an insecure connection after a /tls is sent in certain
    circumstances.
  * Implementation of XOAUTH2 authentication support for Outlook.
  * Add support for the OAUTHBEARER authentication method in Gmail.
  * Support for the SASL-IR IMAP extension.
  * Alpine can pass an HTML message to an external web browser,
    by using the "External" command in the ATTACHMENT INDEX
    screen.
- Drop extern.diff (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 2.23.2
  * Expansion of the configuration screen for XOAUTH2 to include
    username, and tenant.
  * Alpine uses the domain in the From: header of a message
    to generate a message-id and suppresses all information
    about Alpine, version, revision, and time of generation
    of the message-id from this header.
  * Alpine does not generate Sender or X-X-Sender by default by
    enabling [X] Disable Sender as the default.
  * Alpine does not disclose User Agent by default by enabling
    [X] Suppress User Agent by default.
  * When messages are selected, pressing the ';' command to
    broaden or narrow a search, now offers the possibility to
    completely replace the search, and is almost equivalent to
    being a shortcut to "unselect all messages, and select
    again".</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1610712000">- Update to release 2.24
  * A few crash fixes
  * Implementation of XOAUTH2 for Yahoo! Mail.</changelog>
</package>
<package pkgid="fa5ee2c40a6294d1d104d2e204a0809dae4a2845bfc8863ac0a7a91a17089049" name="alpine" arch="x86_64">
  <version epoch="0" ver="2.24" rel="lp152.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
  <changelog author="Michal Svec &lt;msvec@suse.com&gt;" date="1541678400">- updated upstream URL</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1556798400">- Fix initialisation of encrypted password store (bsc#1133597,
  alpine-pinepw.patch).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add return-values.diff to unbreak build.
- Use more macros for standard dirs in the build recipe.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1588852800">- Update to release 2.22
  * Support for XOAUTH2 authentication method in Gmail.
  * NTLM authentication support with the ntlm library.
  * Added the "/tls1_3" flag for servers that support it.
  * Add the "g" option to the select command that works in IMAP
    servers that implement the X-GM-EXT-1 capability (such as the
    one offered by Gmail).
  * Added "/auth=XYZ" to the way to define a server. This allows
    users to select the method to authenticate to an IMAP, SMTP
    or POP3 server. Examples are /auth=plain, or /auth=gssapi,
    etc.
  * When a message is of type multipart/mixed, and its first part
    is multipart/signed, Alpine will include the text of the
    original message in a reply message, instead of including a
    multipart attachment.
  * Added backward search in the index screen.
  * pico: Add -dict option to Pico, which allows users to choose a
    dictionary when spelling.
- Drop /usr/bin/mailutil, it is not built by default anymore.
- Remove alpine-pinepw.patch (merged upstream)
- Add description files for patches 600-616. These live in a
  separate file because (a) upstream does not offer the description
  as part of the patch file, (b) redownloading the patches would
  nuke any added description due to &lt;a&gt;.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591531200">- Add extern.diff.
- Mark license texts as %license.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599480000">- Update to release 2.23
  * Fixes bsc#1173281, CVE-2020-14929: Alpine silently proceeds to
    use an insecure connection after a /tls is sent in certain
    circumstances.
  * Implementation of XOAUTH2 authentication support for Outlook.
  * Add support for the OAUTHBEARER authentication method in Gmail.
  * Support for the SASL-IR IMAP extension.
  * Alpine can pass an HTML message to an external web browser,
    by using the "External" command in the ATTACHMENT INDEX
    screen.
- Drop extern.diff (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 2.23.2
  * Expansion of the configuration screen for XOAUTH2 to include
    username, and tenant.
  * Alpine uses the domain in the From: header of a message
    to generate a message-id and suppresses all information
    about Alpine, version, revision, and time of generation
    of the message-id from this header.
  * Alpine does not generate Sender or X-X-Sender by default by
    enabling [X] Disable Sender as the default.
  * Alpine does not disclose User Agent by default by enabling
    [X] Suppress User Agent by default.
  * When messages are selected, pressing the ';' command to
    broaden or narrow a search, now offers the possibility to
    completely replace the search, and is almost equivalent to
    being a shortcut to "unselect all messages, and select
    again".</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1610712000">- Update to release 2.24
  * A few crash fixes
  * Implementation of XOAUTH2 for Yahoo! Mail.</changelog>
</package>
<package pkgid="964175c9ec74808279b673735ce4180b6025277a74e4422e41c85a1927fbb72c" name="alsa" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp152.9.4.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="86791ba3cdd1f5d831c1f6f749e8f67c9a283bd644ba92d396100269f23b9975" name="alsa" arch="src">
  <version epoch="0" ver="1.1.5" rel="lp152.9.4.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="cb6a3ac9fcf9de39d016902f66242813cfe79a5b5a5c23f202e85a0c44c97137" name="alsa" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp152.9.4.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="a7ede038809db1dd8728c884fc8f863715135203eef660c9d4820f80da6e17a4" name="alsa-devel" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp152.9.4.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="770acb6c695a3ea7f6f3b43d7fbb8af8560d0f9782dd0a5b4a0efc9bd7f83ff6" name="alsa-devel" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp152.9.4.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="c57480576d5d90664b62c19beef0a95e43de85d5288e6b0805ea0098550e612d" name="alsa-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp152.9.4.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="94ca7072a533b2e52ba392f99c963926379ac40547e87cf79268a33496951cde" name="alsa-docs" arch="noarch">
  <version epoch="0" ver="1.1.5" rel="lp152.9.4.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="9909bde7c0c046eff9fa77e988ce6ada1fcadd93b40cf7410effe19cdb57ee14" name="alsa-oss" arch="i586">
  <version epoch="0" ver="1.1.8" rel="lp152.4.3.1"/>
  <changelog author="tiwai@suse.de" date="1398686400">- Fix for dmix with unaligned sample rate:
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-oss 1.0.28:
  All pervious fix patches are obsoleted:
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>
  <changelog author="tiwai@suse.de" date="1522843200">- Update to alsa-oss 1.1.6:
  * Change FSF address (Franklin Street)
- Use %license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1522843201">- Remove old kludges
- Run spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1533556800">- remove-libio.patch: don't use obsolete &lt;libio.h&gt;</changelog>
  <changelog author="tiwai@suse.de" date="1546948800">- Update to alsa-oss 1.1.8 (bsc#1181571):
  Fix the build with the recent glibc
- Remove obsoleted patch:
  remove-libio.patch:</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Avoid repetition of name in summary. Update description.</changelog>
  <changelog author="tiwai@suse.de" date="1574337600">- Fix build breakage by the new alsa update; now it requires
  alsa-topology-devel</changelog>
  <changelog author="tiwai@suse.de" date="1574856000">- Drop the superfluous buildreq alsa-topology-devel again;
  it's no longer mandatory</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614254400">- use https for urls</changelog>
</package>
<package pkgid="7856ce3d888db43c5321b7b98b30384c64ffaa2344a26b4624398a2dffe59d06" name="alsa-oss" arch="src">
  <version epoch="0" ver="1.1.8" rel="lp152.4.3.1"/>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="olh@suse.de" date="1210852800">- remove unneeded Recommends: -64bit on ppc (bnc#390761)</changelog>
  <changelog author="tiwai@suse.de" date="1216123200">- updated to version 1.0.17:
  * just a version bump</changelog>
  <changelog author="jengelh@medozas.de" date="1264593600">- package baselibs.conf</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25;
  pcm: check for XRUN state for GETxSPACE and GETxPTR ioctls
  select: better check for null bit arrays</changelog>
  <changelog author="reddwarf@opensuse.org" date="1333022400">- stop recommending alsa-oss-32bit</changelog>
  <changelog author="tiwai@suse.de" date="1369310400">- Backport upstream fixes:
  0001-Fix-path-to-libaoss.so.patch
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch</changelog>
  <changelog author="tiwai@suse.de" date="1398686400">- Revert 0001-Fix-path-to-libaoss.so.patch, as this causes
  regressions on multi-arch (bnc#874331)</changelog>
  <changelog author="tiwai@suse.de" date="1398686401">- Fix for dmix with unaligned sample rate:
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-oss 1.0.28:
  All pervious fix patches are obsoleted:
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>
  <changelog author="tiwai@suse.de" date="1522843200">- Update to alsa-oss 1.1.6:
  * Change FSF address (Franklin Street)
- Use %license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1522843201">- Remove old kludges
- Run spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1533556800">- remove-libio.patch: don't use obsolete &lt;libio.h&gt;</changelog>
  <changelog author="tiwai@suse.de" date="1546948800">- Update to alsa-oss 1.1.8 (bsc#1181571):
  Fix the build with the recent glibc
- Remove obsoleted patch:
  remove-libio.patch:</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Avoid repetition of name in summary. Update description.</changelog>
  <changelog author="tiwai@suse.de" date="1574337600">- Fix build breakage by the new alsa update; now it requires
  alsa-topology-devel</changelog>
  <changelog author="tiwai@suse.de" date="1574856000">- Drop the superfluous buildreq alsa-topology-devel again;
  it's no longer mandatory</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614254400">- use https for urls</changelog>
</package>
<package pkgid="c8b1a6b54dcd379b8a9a429bedadcbf95334d22ce357643c1f3c072f7c8f0f63" name="alsa-oss" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="lp152.4.3.1"/>
  <changelog author="tiwai@suse.de" date="1398686400">- Fix for dmix with unaligned sample rate:
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-oss 1.0.28:
  All pervious fix patches are obsoleted:
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>
  <changelog author="tiwai@suse.de" date="1522843200">- Update to alsa-oss 1.1.6:
  * Change FSF address (Franklin Street)
- Use %license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1522843201">- Remove old kludges
- Run spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1533556800">- remove-libio.patch: don't use obsolete &lt;libio.h&gt;</changelog>
  <changelog author="tiwai@suse.de" date="1546948800">- Update to alsa-oss 1.1.8 (bsc#1181571):
  Fix the build with the recent glibc
- Remove obsoleted patch:
  remove-libio.patch:</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Avoid repetition of name in summary. Update description.</changelog>
  <changelog author="tiwai@suse.de" date="1574337600">- Fix build breakage by the new alsa update; now it requires
  alsa-topology-devel</changelog>
  <changelog author="tiwai@suse.de" date="1574856000">- Drop the superfluous buildreq alsa-topology-devel again;
  it's no longer mandatory</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614254400">- use https for urls</changelog>
</package>
<package pkgid="1c4c9b175c56374cbfe8ab84dd9355939237e85cd425c5a7d6b571205c3e53b6" name="alsa-oss-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="lp152.4.3.1"/>
  <changelog author="tiwai@suse.de" date="1398686400">- Fix for dmix with unaligned sample rate:
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-oss 1.0.28:
  All pervious fix patches are obsoleted:
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>
  <changelog author="tiwai@suse.de" date="1522843200">- Update to alsa-oss 1.1.6:
  * Change FSF address (Franklin Street)
- Use %license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1522843201">- Remove old kludges
- Run spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1533556800">- remove-libio.patch: don't use obsolete &lt;libio.h&gt;</changelog>
  <changelog author="tiwai@suse.de" date="1546948800">- Update to alsa-oss 1.1.8 (bsc#1181571):
  Fix the build with the recent glibc
- Remove obsoleted patch:
  remove-libio.patch:</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Avoid repetition of name in summary. Update description.</changelog>
  <changelog author="tiwai@suse.de" date="1574337600">- Fix build breakage by the new alsa update; now it requires
  alsa-topology-devel</changelog>
  <changelog author="tiwai@suse.de" date="1574856000">- Drop the superfluous buildreq alsa-topology-devel again;
  it's no longer mandatory</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1614254400">- use https for urls</changelog>
</package>
<package pkgid="7ed59afd3f4cb0f32e35b19e4d9d5d541584f54de06f18c0512c4f139987bf0c" name="alsa-utils" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp152.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
  <changelog author="tiwai@suse.de" date="1607688000">- Fix alsactl restore behavior during locking (boo#1179904):
  0010-alsactl-Fix-double-decrease-of-lock-timeout.patch
  0011-alsactl-Fix-race-at-creating-a-lock-file.patch
- Remove unnecessary condition for alsa-restore.service
  0012-alsactl-Remove-asound.state-file-check-from-alsa-res.patch</changelog>
</package>
<package pkgid="b9346072861bad534a5075d9a81a16ed4bd24fc359ae7178502e141da6875d87" name="alsa-utils" arch="src">
  <version epoch="0" ver="1.1.5" rel="lp152.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
  <changelog author="tiwai@suse.de" date="1607688000">- Fix alsactl restore behavior during locking (boo#1179904):
  0010-alsactl-Fix-double-decrease-of-lock-timeout.patch
  0011-alsactl-Fix-race-at-creating-a-lock-file.patch
- Remove unnecessary condition for alsa-restore.service
  0012-alsactl-Remove-asound.state-file-check-from-alsa-res.patch</changelog>
</package>
<package pkgid="e9ba23a7500ef34b19a08dee83f78b00d09c370873fff9fccaf0035e92ac083e" name="alsa-utils" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp152.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
  <changelog author="tiwai@suse.de" date="1607688000">- Fix alsactl restore behavior during locking (boo#1179904):
  0010-alsactl-Fix-double-decrease-of-lock-timeout.patch
  0011-alsactl-Fix-race-at-creating-a-lock-file.patch
- Remove unnecessary condition for alsa-restore.service
  0012-alsactl-Remove-asound.state-file-check-from-alsa-res.patch</changelog>
</package>
<package pkgid="6b4402ee21a491cb3c7e53e6c00318f661f74ec36e7930af62f095783980c106" name="alsabat" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp152.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
  <changelog author="tiwai@suse.de" date="1607688000">- Fix alsactl restore behavior during locking (boo#1179904):
  0010-alsactl-Fix-double-decrease-of-lock-timeout.patch
  0011-alsactl-Fix-race-at-creating-a-lock-file.patch
- Remove unnecessary condition for alsa-restore.service
  0012-alsactl-Remove-asound.state-file-check-from-alsa-res.patch</changelog>
</package>
<package pkgid="aae1d9f0b00c0fbf91f770049709a07e996c9aaf3f97d746bcc898a286ee491b" name="alsabat" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp152.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
  <changelog author="tiwai@suse.de" date="1607688000">- Fix alsactl restore behavior during locking (boo#1179904):
  0010-alsactl-Fix-double-decrease-of-lock-timeout.patch
  0011-alsactl-Fix-race-at-creating-a-lock-file.patch
- Remove unnecessary condition for alsa-restore.service
  0012-alsactl-Remove-asound.state-file-check-from-alsa-res.patch</changelog>
</package>
<package pkgid="52e2955a680afd6f336a481acd26aabd1269511977c4d04f05fde7e1c29a68a8" name="amazon-ecs-init" arch="src">
  <version epoch="0" ver="1.50.1" rel="lp152.4.3.1"/>
  <changelog author="rjschwei@suse.com" date="1439208000">- Include in SLE 12 (fate#319338)
  + Also related to fate#318337</changelog>
  <changelog author="lchiquitto@suse.de" date="1442923200">- Set ExclusiveArch to disable building on architectures not
  supported by Go.</changelog>
  <changelog author="rjschwei@suse.com" date="1442923201">- Update to version 1.4.0.2 (1.4.0-2 upstream)
  + Enhancement - Add support for Docker 1.7.1
  + Enhancement: Cache Agent version 1.4.0
  + Feature: Read Docker endpoint from environment variable
    DOCKER_HOST if present</changelog>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
</package>
<package pkgid="52dd3fd38b772c1e4b78fd9612684fa168bde6586320acebd6ba3dab2bd02161" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.50.1" rel="lp152.4.3.1"/>
  <changelog author="rjschwei@suse.com" date="1439208000">- Include in SLE 12 (fate#319338)
  + Also related to fate#318337</changelog>
  <changelog author="lchiquitto@suse.de" date="1442923200">- Set ExclusiveArch to disable building on architectures not
  supported by Go.</changelog>
  <changelog author="rjschwei@suse.com" date="1442923201">- Update to version 1.4.0.2 (1.4.0-2 upstream)
  + Enhancement - Add support for Docker 1.7.1
  + Enhancement: Cache Agent version 1.4.0
  + Feature: Read Docker endpoint from environment variable
    DOCKER_HOST if present</changelog>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
</package>
<package pkgid="e19ed3c65079b13294c8052a657c6f7698ee70d92027baf54127cb2fbf2b7924" name="amazon-ecs-init" arch="src">
  <version epoch="0" ver="1.52.1" rel="lp152.4.6.1"/>
  <changelog author="rjschwei@suse.com" date="1442923200">- Update to version 1.4.0.2 (1.4.0-2 upstream)
  + Enhancement - Add support for Docker 1.7.1
  + Enhancement: Cache Agent version 1.4.0
  + Feature: Read Docker endpoint from environment variable
    DOCKER_HOST if present</changelog>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
</package>
<package pkgid="3a7e22664b8efa968f99c9aab896b432badd33128311410da550f0aecd452171" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.52.1" rel="lp152.4.6.1"/>
  <changelog author="rjschwei@suse.com" date="1442923200">- Update to version 1.4.0.2 (1.4.0-2 upstream)
  + Enhancement - Add support for Docker 1.7.1
  + Enhancement: Cache Agent version 1.4.0
  + Feature: Read Docker endpoint from environment variable
    DOCKER_HOST if present</changelog>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
</package>
<package pkgid="19a5bdeba16e52d7c093ca8233fc843c07c65f8a12882608c7f9c58d1b0a8db1" name="amazon-ecs-init" arch="src">
  <version epoch="0" ver="1.53.0" rel="lp152.4.9.1"/>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1624449600">- Update to version 1.53.0-1 (bsc#1187661, bsc#1187662)
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
</package>
<package pkgid="ed5eef111c0c743e66b4719c1f89cfb674294a975c9faa96e7e81cfd52dfbcd8" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.53.0" rel="lp152.4.9.1"/>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1624449600">- Update to version 1.53.0-1 (bsc#1187661, bsc#1187662)
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
</package>
<package pkgid="211a3a8b144be4083a0c934cfce100273a4ec854bf12b85a7c1c50cf5db9c91c" name="amazon-ssm-agent" arch="src">
  <version epoch="0" ver="3.0.1209.0" rel="lp152.2.3.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="Sean Marlow &lt;sean.marlow@suse.com&gt;" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="8de95851fbf21fa2a692b9f7b68996eb259f463589d344f56ec4e61b444a6d83" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="3.0.1209.0" rel="lp152.2.3.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="Sean Marlow &lt;sean.marlow@suse.com&gt;" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="9b3266e6f25557c3d3529de637ab9f8b2225d65a0daa284976cf0bcdbe603577" name="android-udev-rules" arch="noarch">
  <version epoch="0" ver="20191103" rel="lp152.2.3.1"/>
  <changelog author="munix9@googlemail.com" date="1573214400">- initial package for version 20191103</changelog>
  <changelog author="olaf@aepfle.de" date="1595937600">- This package replaces android-tools-udev version 5
  add the missing Provides/Obsoletes to avoid fileconflicts</changelog>
</package>
<package pkgid="81ccf73a3555275107d5a3ad9995c31c6c646dd3f900306079598e39b8168f63" name="android-udev-rules" arch="src">
  <version epoch="0" ver="20191103" rel="lp152.2.3.1"/>
  <changelog author="munix9@googlemail.com" date="1573214400">- initial package for version 20191103</changelog>
  <changelog author="olaf@aepfle.de" date="1595937600">- This package replaces android-tools-udev version 5
  add the missing Provides/Obsoletes to avoid fileconflicts</changelog>
</package>
<package pkgid="33cd7b3568c7cac9909f9bba1024f370b6b57393f1dff93523e30e3a282533dc" name="ansible" arch="noarch">
  <version epoch="0" ver="2.9.21" rel="lp152.2.4.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284800">- update to version 2.9.8
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284801">- update to version 2.9.9
  * fix for a regression introduced in 2.9.8</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590494400">- Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733
  (bsc#1164140)
- Add metadata information to this file to mark which SUSE
  bugzilla have been already fixed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620129600">- update to 2.9.21</changelog>
</package>
<package pkgid="5b6df81ccf4407c9b3c2b054cd33dd36a71fef8e947dac62136353589510328a" name="ansible" arch="src">
  <version epoch="0" ver="2.9.21" rel="lp152.2.4.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284800">- update to version 2.9.8
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284801">- update to version 2.9.9
  * fix for a regression introduced in 2.9.8</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590494400">- Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733
  (bsc#1164140)
- Add metadata information to this file to mark which SUSE
  bugzilla have been already fixed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620129600">- update to 2.9.21</changelog>
</package>
<package pkgid="1bc66d3aabb5d7803f31233d42872fa142feccfbd7d0edb8bc295ef33d740b39" name="ansible" arch="noarch">
  <version epoch="0" ver="2.9.21" rel="lp152.2.7.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284800">- update to version 2.9.8
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284801">- update to version 2.9.9
  * fix for a regression introduced in 2.9.8</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590494400">- Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733
  (bsc#1164140)
- Add metadata information to this file to mark which SUSE
  bugzilla have been already fixed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620129600">- update to 2.9.21</changelog>
</package>
<package pkgid="4da01a5a8a2397de2624c50c919b61454816ca40558bf859d94ebd289cf1cabd" name="ansible" arch="src">
  <version epoch="0" ver="2.9.21" rel="lp152.2.7.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284800">- update to version 2.9.8
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284801">- update to version 2.9.9
  * fix for a regression introduced in 2.9.8</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590494400">- Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733
  (bsc#1164140)
- Add metadata information to this file to mark which SUSE
  bugzilla have been already fixed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620129600">- update to 2.9.21</changelog>
</package>
<package pkgid="56376a31d39baabbc55d55e176d1adfe81bd7bca8198822abec9696ba8be237a" name="ansible-doc" arch="noarch">
  <version epoch="0" ver="2.9.21" rel="lp152.2.4.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284800">- update to version 2.9.8
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284801">- update to version 2.9.9
  * fix for a regression introduced in 2.9.8</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590494400">- Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733
  (bsc#1164140)
- Add metadata information to this file to mark which SUSE
  bugzilla have been already fixed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620129600">- update to 2.9.21</changelog>
</package>
<package pkgid="1b6e9d9065f3f20a4d95868927dd8a60a7aa4bd14a83ee0cb79771279e8c296e" name="ansible-doc" arch="noarch">
  <version epoch="0" ver="2.9.21" rel="lp152.2.7.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284800">- update to version 2.9.8
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284801">- update to version 2.9.9
  * fix for a regression introduced in 2.9.8</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590494400">- Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733
  (bsc#1164140)
- Add metadata information to this file to mark which SUSE
  bugzilla have been already fixed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620129600">- update to 2.9.21</changelog>
</package>
<package pkgid="f65bcdf13eab37581bce50ea2a4c9ab3762973dcfb273b5d02fca7f1b94ebfb8" name="ansible-test" arch="noarch">
  <version epoch="0" ver="2.9.21" rel="lp152.2.4.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284800">- update to version 2.9.8
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284801">- update to version 2.9.9
  * fix for a regression introduced in 2.9.8</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590494400">- Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733
  (bsc#1164140)
- Add metadata information to this file to mark which SUSE
  bugzilla have been already fixed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620129600">- update to 2.9.21</changelog>
</package>
<package pkgid="d2417c29ecaa1745252133140a2cb104c0b114dd17f63ce65273102e5a684702" name="ansible-test" arch="noarch">
  <version epoch="0" ver="2.9.21" rel="lp152.2.7.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284800">- update to version 2.9.8
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1589284801">- update to version 2.9.9
  * fix for a regression introduced in 2.9.8</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590494400">- Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733
  (bsc#1164140)
- Add metadata information to this file to mark which SUSE
  bugzilla have been already fixed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620129600">- update to 2.9.21</changelog>
</package>
<package pkgid="4f8ea070f2cb999a15c57444f6dae015677cfa146b0ff1caecfdb1301a831573" name="ant" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="f551b7b6e01d26c30f50888ee9c843d55b2af59297f1c961b6df6d5a90ccbc02" name="ant" arch="src">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="b49aae5ea15b2aa5416ca5ebae3047f90cbd81eb1e44837e3b42f1663dcadc5d" name="ant-antlr" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="6627f4167df2543c7741b0b02771efe35a475c605dd9a572195cc7feaf35bdaf" name="ant-antlr" arch="src">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="7d78369fe6c285e6ef0ee891197f36064d5438e46b71143f163bb520627f5cbf" name="ant-apache-bcel" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="c64fd1847ae3d8890dd80096155d40d314e9897a9239eb82d620314281ba4451" name="ant-apache-bsf" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="8e48b3eb97b46306afd31b615c2246309b086b68269d76352016f6845d6edf50" name="ant-apache-log4j" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="ef3b8d8ec3a0cf726398c6c44081b4e25314afc417f1aa07872c718bb94f95a3" name="ant-apache-oro" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="c2555a653297ab5e91784f78d75f25b930ba71d91c6b40d4bde3e87dc6f9d135" name="ant-apache-regexp" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="2cf02aadaec45ab4f7e21c09c23960ddbe47a0a4259a4311f6a6c487cf4606db" name="ant-apache-resolver" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="dd4a7c0e51a3d69400da30299b7fa7901921220a42a825a664d77a1ae3416a0f" name="ant-apache-xalan2" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="a73a678d627860811404386a0d131d8b966e04f6d1eca5e91f38c4db325727e9" name="ant-commons-logging" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="42e1e139d3f18e4b3b6cc2b0eca336ac8bf06d0792125672491b013e0742cbd9" name="ant-commons-net" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="b0ffcca07bfc4ea75c6e4957ee5085061f2f4a60cbe7ff1ebc0dcc995eb48e1d" name="ant-imageio" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="6487bb360cd7a78c92017c331035b7d541a801044e347cb19f7dd846aef4b345" name="ant-javamail" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="45c5ec1b9964001adb69a8d6a485e164474d1b66ca11696e5e77fb6037f0249c" name="ant-jdepend" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="0f314201270e13d9fe91ed239d5f879040987844e3b4bf989729803961a57196" name="ant-jmf" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="38c10e8d65c484dfe0b0bd36af40a2f56798f276cc1efba7f71ef28d4aecff64" name="ant-jsch" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="f10fe911adb0448d68a1798e4a96dabe02235372061dca07dd10511a3407f1a1" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="df9218d90593a9cf926fcfe0d4a81eeca9103d53d5e11ad0beac3cef583d62e9" name="ant-junit" arch="src">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="02c154ce0e6f9b76091d9e290479010e525bc12c4747c8dd0f5cb59ab41d601e" name="ant-junit5" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="98b1f9177b6e7bb853c9ab357857647fc0368a97e3c24c96a9d5a5190d660468" name="ant-junit5" arch="src">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="73ef65bc8c66c3d21a86cd3aed3370b688e944082789cc9ed5fa92ac92ab7718" name="ant-manual" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="7793b9e44ebfd8c0bfaeff9e5f676c50f5cdd4d6b923d1a6560fa34adfd0e498" name="ant-scripts" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="2ae5716a800fa4ceecfc9b61ce4408a398ccb512a970d621b677444aa66e9598" name="ant-swing" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="a4ba64650eda7baa7d76f842ce0ef375e3b990296622465b34b76c6466c9ef28" name="ant-testutil" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="d9c3a8e6eb7a68bec0945d206e347d127b87dd467fa1c7157e20df500e1c80f3" name="ant-xz" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
</package>
<package pkgid="fb3c36737409ed2e61188d882e0bdbc1e221c123b1a98df4f4218a3b8cc87b82" name="anthy" arch="i586">
  <version epoch="0" ver="9100h" rel="lp152.6.3.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="tiwai@suse.de" date="1373630400">- work around the build error with xemacs 21.5.33</changelog>
  <changelog author="tiwai@suse.de" date="1383739200">- Fix breakage on GNU Emacs on openSUSE 13.1 (bnc#849211)
- Added patch: anthy-use-last-command-event.diff</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Drop unused build-time requirements on libpng, libgif, libtiff,
  krb5, openldap2</changelog>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
</package>
<package pkgid="8a9e5ab3db3a515371a75707c59c1ba15d088209cf50c5e1e99dfb8345f41d6c" name="anthy" arch="src">
  <version epoch="0" ver="9100h" rel="lp152.6.3.1"/>
  <changelog author="mfabian@suse.de" date="1196769600">- remove openldap2 from BuildRequires.
- use fdupes.</changelog>
  <changelog author="mfabian@suse.de" date="1200052800">- use fdupes only for openSUSE &gt;= 10.3 to make it work for the
  older versions in the openSUSE build service.</changelog>
  <changelog author="ro@suse.de" date="1228132800">- added baselibs.conf for anthy (needed by uim)</changelog>
  <changelog author="crrodriguez@suse.de" date="1231416000">- remove static libraries and "la" files</changelog>
  <changelog author="tiwai@suse.de" date="1244116800">- updated to anthy-9100h
  * auto-tools fixes
  * corpus updates
  * alt-cannadic updates
  * other many fixes; see ChangeLog</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="meissner@suse.de" date="1323604800">- does not need openldap2 direct dependency, libraries are enough</changelog>
  <changelog author="i@marguerite.su" date="1338724800">- fix sles builds.</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="tiwai@suse.de" date="1373630400">- work around the build error with xemacs 21.5.33</changelog>
  <changelog author="tiwai@suse.de" date="1383739200">- Fix breakage on GNU Emacs on openSUSE 13.1 (bnc#849211)
- Added patch: anthy-use-last-command-event.diff</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Drop unused build-time requirements on libpng, libgif, libtiff,
  krb5, openldap2</changelog>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
</package>
<package pkgid="0cf1de6a143a302a7f21bfcd10373348cadfc9a8bfb7fd75580306661e2593fc" name="anthy" arch="x86_64">
  <version epoch="0" ver="9100h" rel="lp152.6.3.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="tiwai@suse.de" date="1373630400">- work around the build error with xemacs 21.5.33</changelog>
  <changelog author="tiwai@suse.de" date="1383739200">- Fix breakage on GNU Emacs on openSUSE 13.1 (bnc#849211)
- Added patch: anthy-use-last-command-event.diff</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Drop unused build-time requirements on libpng, libgif, libtiff,
  krb5, openldap2</changelog>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
</package>
<package pkgid="afae97240cf2c2daeaa938f25f241d5298149da988b2d5d062e7d95cb2e640a6" name="anthy-devel" arch="i586">
  <version epoch="0" ver="9100h" rel="lp152.6.3.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="tiwai@suse.de" date="1373630400">- work around the build error with xemacs 21.5.33</changelog>
  <changelog author="tiwai@suse.de" date="1383739200">- Fix breakage on GNU Emacs on openSUSE 13.1 (bnc#849211)
- Added patch: anthy-use-last-command-event.diff</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Drop unused build-time requirements on libpng, libgif, libtiff,
  krb5, openldap2</changelog>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
</package>
<package pkgid="f9401df6fd43a2d491c42513040f0f93fa2c7a5374dd25b4560b6e13ab9575e1" name="anthy-devel" arch="x86_64">
  <version epoch="0" ver="9100h" rel="lp152.6.3.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="tiwai@suse.de" date="1373630400">- work around the build error with xemacs 21.5.33</changelog>
  <changelog author="tiwai@suse.de" date="1383739200">- Fix breakage on GNU Emacs on openSUSE 13.1 (bnc#849211)
- Added patch: anthy-use-last-command-event.diff</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Drop unused build-time requirements on libpng, libgif, libtiff,
  krb5, openldap2</changelog>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
</package>
<package pkgid="f2e5f53853afecd618aaa282b0c30b8508f8fb718fc88b91d37a0d99145a5e04" name="aom-tools" arch="i586">
  <version epoch="0" ver="1.0.0" rel="lp152.3.3.1"/>
  <changelog author="9+suse@cirno.systems" date="1532692800">- Init, v1.0.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532952000">- Pass conditional AOM_TARGET_CPU to cmake, fix build for arm and
  ppc, as well as optimize target cpu for other arches.</changelog>
  <changelog author="9+suse@cirno.systems" date="1533038400">- Enable CONFIG_LOWBITDEPTH. Makes 8-bit decoding faster. The only
  reason this confusingly-named option is not enabled by default
  is that its behavior might not match the 16-bit reference code
  path, and that hardware vendors want to be able to validate
  their designs against it. No actual mismatches have been found.
  See https://bugs.chromium.org/p/aomedia/issues/detail?id=2062</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
</package>
<package pkgid="ba605e13e7a0465a61c590d3f00a69d85522b7a05a1cea2191a225fbc54392f1" name="aom-tools" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="lp152.3.3.1"/>
  <changelog author="9+suse@cirno.systems" date="1532692800">- Init, v1.0.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532952000">- Pass conditional AOM_TARGET_CPU to cmake, fix build for arm and
  ppc, as well as optimize target cpu for other arches.</changelog>
  <changelog author="9+suse@cirno.systems" date="1533038400">- Enable CONFIG_LOWBITDEPTH. Makes 8-bit decoding faster. The only
  reason this confusingly-named option is not enabled by default
  is that its behavior might not match the 16-bit reference code
  path, and that hardware vendors want to be able to validate
  their designs against it. No actual mismatches have been found.
  See https://bugs.chromium.org/p/aomedia/issues/detail?id=2062</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
</package>
<package pkgid="826ab7beb11973e50b0bd768014f5f9d1a70d890206e4016cae7f39d49865f08" name="aom-tools" arch="i586">
  <version epoch="0" ver="1.0.0" rel="lp152.3.6.1"/>
  <changelog author="9+suse@cirno.systems" date="1532692800">- Init, v1.0.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532952000">- Pass conditional AOM_TARGET_CPU to cmake, fix build for arm and
  ppc, as well as optimize target cpu for other arches.</changelog>
  <changelog author="9+suse@cirno.systems" date="1533038400">- Enable CONFIG_LOWBITDEPTH. Makes 8-bit decoding faster. The only
  reason this confusingly-named option is not enabled by default
  is that its behavior might not match the 16-bit reference code
  path, and that hardware vendors want to be able to validate
  their designs against it. No actual mismatches have been found.
  See https://bugs.chromium.org/p/aomedia/issues/detail?id=2062</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631188800">- security update
- added patches
  fix CVE-2021-30474 [bsc#1186799], aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
  + libaom-CVE-2021-30474.patch</changelog>
</package>
<package pkgid="6047ab4b3efc4d19afdfa4628f8b4271fcf02728817776114f6be54aa0b5ca7d" name="aom-tools" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="lp152.3.6.1"/>
  <changelog author="9+suse@cirno.systems" date="1532692800">- Init, v1.0.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532952000">- Pass conditional AOM_TARGET_CPU to cmake, fix build for arm and
  ppc, as well as optimize target cpu for other arches.</changelog>
  <changelog author="9+suse@cirno.systems" date="1533038400">- Enable CONFIG_LOWBITDEPTH. Makes 8-bit decoding faster. The only
  reason this confusingly-named option is not enabled by default
  is that its behavior might not match the 16-bit reference code
  path, and that hardware vendors want to be able to validate
  their designs against it. No actual mismatches have been found.
  See https://bugs.chromium.org/p/aomedia/issues/detail?id=2062</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631188800">- security update
- added patches
  fix CVE-2021-30474 [bsc#1186799], aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
  + libaom-CVE-2021-30474.patch</changelog>
</package>
<package pkgid="a08d68ef7afd60d1d9168b3e1447a276cb989856ad647a8bea6e6f07c3385c9d" name="apache-commons-compress" arch="noarch">
  <version epoch="0" ver="1.21" rel="lp152.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- 'Initial SUSE packaging from jpackage.org 5.0'</changelog>
  <changelog author="mvyskocil@suse.com" date="1354190400">- use saxon and saxon-scripts only when using maven</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build under new javapackage-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Build also the javadoc package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548417600">- Rename package to apache-commons-compress
  * Upgrade to version 1.18
  * Use build.xml file generated ba mvn ant:ant and simplified
    manually after
    + Allows building with ant and considerably shortens build
    cycle
- Added patches
  * 0001-Remove-Brotli-compressor.patch
    + do not build Brotli compressor, since we don't have its
    dependencies
  * 0002-Remove-ZSTD-compressor.patch
    + do not build ZSTD compressor, since we don't have its
    dependencies
  * fix_java_8_compatibility.patch
    + restore Java 8 compatibility in java.nio.ByteBuffer use</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548590400">- Add missing RPM group for %name-javadoc.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1566993600">- Updated to 1.19 [bsc#1148475, CVE-2019-12402]
  * ZipFile could get stuck in an infinite loop when parsing ZIP archives
    with certain strong encryption headers (CVE-2019-12402).
  * ZipArchiveInputStream and ZipFile will no longer throw an exception if
    an extra field generally understood by Commons Compress is malformed
    but rather turn them into UnrecognizedExtraField instances.  You can
    influence the way extra fields are parsed in more detail by using the
    new getExtraFields(ExtraFieldParsingBehavior) method of ZipArchiveEntry now.
  * Some of the ZIP extra fields related to strong encryption will now
    throw ZipExceptions rather than ArrayIndexOutOfBoundsExceptions in
    certain cases when used directly. There is no practical difference
    when they are read via ZipArchiveInputStream or ZipFile.
  * ParallelScatterZipCreator now writes entries in the same order they have
    been added to the archive.
  * ZipArchiveInputStream and ZipFile are more forgiving when parsing extra
    fields by default now.
  * TarArchiveInputStream has a new lenient mode that may allow it to read
    certain broken archives.
- Rebased patch fix_java_8_compatibility.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1626782400">- Updated to 1.21
  * When reading a specially crafted 7Z archive, the construction of
    the list of codecs that decompress an entry can result in an
    infinite loop. This could be used to mount a denial of service
    attack against services that use Compress' sevenz package.
    (CVE-2021-35515, bsc#1188463)
  * When reading a specially crafted 7Z archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' sevenz package. (CVE-2021-35516, bsc#1188464)
  * When reading a specially crafted TAR archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could be
    used to mount a denial of service attack against services that
    use Compress' tar package. (CVE-2021-35517, bsc#1188465)
  * When reading a specially crafted ZIP archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' zip package. (CVE-2021-36090, bsc#1188466)
- New dependency on asm3 for Pack200 compressor
- Rebased patch fix_java_8_compatibility.patch to a new context and
  added some new ocurrences</changelog>
</package>
<package pkgid="8c620148037b58bfeb5c452b3af81f8518338bebbad188a703a96467b49b9234" name="apache-commons-compress" arch="src">
  <version epoch="0" ver="1.21" rel="lp152.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- 'Initial SUSE packaging from jpackage.org 5.0'</changelog>
  <changelog author="mvyskocil@suse.com" date="1354190400">- use saxon and saxon-scripts only when using maven</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build under new javapackage-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Build also the javadoc package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548417600">- Rename package to apache-commons-compress
  * Upgrade to version 1.18
  * Use build.xml file generated ba mvn ant:ant and simplified
    manually after
    + Allows building with ant and considerably shortens build
    cycle
- Added patches
  * 0001-Remove-Brotli-compressor.patch
    + do not build Brotli compressor, since we don't have its
    dependencies
  * 0002-Remove-ZSTD-compressor.patch
    + do not build ZSTD compressor, since we don't have its
    dependencies
  * fix_java_8_compatibility.patch
    + restore Java 8 compatibility in java.nio.ByteBuffer use</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548590400">- Add missing RPM group for %name-javadoc.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1566993600">- Updated to 1.19 [bsc#1148475, CVE-2019-12402]
  * ZipFile could get stuck in an infinite loop when parsing ZIP archives
    with certain strong encryption headers (CVE-2019-12402).
  * ZipArchiveInputStream and ZipFile will no longer throw an exception if
    an extra field generally understood by Commons Compress is malformed
    but rather turn them into UnrecognizedExtraField instances.  You can
    influence the way extra fields are parsed in more detail by using the
    new getExtraFields(ExtraFieldParsingBehavior) method of ZipArchiveEntry now.
  * Some of the ZIP extra fields related to strong encryption will now
    throw ZipExceptions rather than ArrayIndexOutOfBoundsExceptions in
    certain cases when used directly. There is no practical difference
    when they are read via ZipArchiveInputStream or ZipFile.
  * ParallelScatterZipCreator now writes entries in the same order they have
    been added to the archive.
  * ZipArchiveInputStream and ZipFile are more forgiving when parsing extra
    fields by default now.
  * TarArchiveInputStream has a new lenient mode that may allow it to read
    certain broken archives.
- Rebased patch fix_java_8_compatibility.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1626782400">- Updated to 1.21
  * When reading a specially crafted 7Z archive, the construction of
    the list of codecs that decompress an entry can result in an
    infinite loop. This could be used to mount a denial of service
    attack against services that use Compress' sevenz package.
    (CVE-2021-35515, bsc#1188463)
  * When reading a specially crafted 7Z archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' sevenz package. (CVE-2021-35516, bsc#1188464)
  * When reading a specially crafted TAR archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could be
    used to mount a denial of service attack against services that
    use Compress' tar package. (CVE-2021-35517, bsc#1188465)
  * When reading a specially crafted ZIP archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' zip package. (CVE-2021-36090, bsc#1188466)
- New dependency on asm3 for Pack200 compressor
- Rebased patch fix_java_8_compatibility.patch to a new context and
  added some new ocurrences</changelog>
</package>
<package pkgid="8e1d5e598a7302a0e6565fde9f7ca53faf9af4531c9a72fd3d5b022655e3803a" name="apache-commons-compress-javadoc" arch="noarch">
  <version epoch="0" ver="1.21" rel="lp152.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- 'Initial SUSE packaging from jpackage.org 5.0'</changelog>
  <changelog author="mvyskocil@suse.com" date="1354190400">- use saxon and saxon-scripts only when using maven</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build under new javapackage-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Build also the javadoc package</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548417600">- Rename package to apache-commons-compress
  * Upgrade to version 1.18
  * Use build.xml file generated ba mvn ant:ant and simplified
    manually after
    + Allows building with ant and considerably shortens build
    cycle
- Added patches
  * 0001-Remove-Brotli-compressor.patch
    + do not build Brotli compressor, since we don't have its
    dependencies
  * 0002-Remove-ZSTD-compressor.patch
    + do not build ZSTD compressor, since we don't have its
    dependencies
  * fix_java_8_compatibility.patch
    + restore Java 8 compatibility in java.nio.ByteBuffer use</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548590400">- Add missing RPM group for %name-javadoc.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1566993600">- Updated to 1.19 [bsc#1148475, CVE-2019-12402]
  * ZipFile could get stuck in an infinite loop when parsing ZIP archives
    with certain strong encryption headers (CVE-2019-12402).
  * ZipArchiveInputStream and ZipFile will no longer throw an exception if
    an extra field generally understood by Commons Compress is malformed
    but rather turn them into UnrecognizedExtraField instances.  You can
    influence the way extra fields are parsed in more detail by using the
    new getExtraFields(ExtraFieldParsingBehavior) method of ZipArchiveEntry now.
  * Some of the ZIP extra fields related to strong encryption will now
    throw ZipExceptions rather than ArrayIndexOutOfBoundsExceptions in
    certain cases when used directly. There is no practical difference
    when they are read via ZipArchiveInputStream or ZipFile.
  * ParallelScatterZipCreator now writes entries in the same order they have
    been added to the archive.
  * ZipArchiveInputStream and ZipFile are more forgiving when parsing extra
    fields by default now.
  * TarArchiveInputStream has a new lenient mode that may allow it to read
    certain broken archives.
- Rebased patch fix_java_8_compatibility.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1626782400">- Updated to 1.21
  * When reading a specially crafted 7Z archive, the construction of
    the list of codecs that decompress an entry can result in an
    infinite loop. This could be used to mount a denial of service
    attack against services that use Compress' sevenz package.
    (CVE-2021-35515, bsc#1188463)
  * When reading a specially crafted 7Z archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' sevenz package. (CVE-2021-35516, bsc#1188464)
  * When reading a specially crafted TAR archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could be
    used to mount a denial of service attack against services that
    use Compress' tar package. (CVE-2021-35517, bsc#1188465)
  * When reading a specially crafted ZIP archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' zip package. (CVE-2021-36090, bsc#1188466)
- New dependency on asm3 for Pack200 compressor
- Rebased patch fix_java_8_compatibility.patch to a new context and
  added some new ocurrences</changelog>
</package>
<package pkgid="aa2db8266581223178665722a2ea81f2300b43b347e995f8b643750a7b752721" name="apache-commons-el" arch="noarch">
  <version epoch="0" ver="1.0" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555070400">- Initial packaging of apache-commons-el 1.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1607515200">- Provide and Obsolete jakarta-commons-el (bsc#1179637)</changelog>
</package>
<package pkgid="12363691ce9d2b946cd62d84ae00e8707533faef5d1aba408e9781937fd2b616" name="apache-commons-el" arch="src">
  <version epoch="0" ver="1.0" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555070400">- Initial packaging of apache-commons-el 1.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1607515200">- Provide and Obsolete jakarta-commons-el (bsc#1179637)</changelog>
</package>
<package pkgid="a9f22b0d3e95700a5333e2eb5248b6900e5be3904c1fcc9abfc5c495acb8ca69" name="apache-commons-el-javadoc" arch="noarch">
  <version epoch="0" ver="1.0" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555070400">- Initial packaging of apache-commons-el 1.0</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1607515200">- Provide and Obsolete jakarta-commons-el (bsc#1179637)</changelog>
</package>
<package pkgid="d7dfe827c3eb3f285f92924ec1ef391ff9a4ae949076e639e201e323a40b0b8e" name="apache-commons-httpclient" arch="noarch">
  <version epoch="0" ver="3.1" rel="lp152.6.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548072000">- Add maven pom file and clean-up the spec file</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Trim conjecture from description.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="c724bc8fcba1f2623d0f888c757832c916168c871775d412c3c4cc18991d735e" name="apache-commons-httpclient" arch="src">
  <version epoch="0" ver="3.1" rel="lp152.6.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1359892800">- Initial release</changelog>
  <changelog author="mvyskocil@suse.com" date="1360843200">- fix bnc#803332: no ssl certificate hostname checking (CVE-2012-5783)
  * commons-httpclient-CVE-2012-5783.patch
- add jakarta- compat symlinks</changelog>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548072000">- Add maven pom file and clean-up the spec file</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Trim conjecture from description.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="cb5df4c3740d12d0157c2cf813a7936d8a2f672bc268087c7387b7c0ec74fa3b" name="apache-commons-httpclient-demo" arch="noarch">
  <version epoch="0" ver="3.1" rel="lp152.6.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548072000">- Add maven pom file and clean-up the spec file</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Trim conjecture from description.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="c2ec33de3464ee2ce2ff0950a78a342818bccbc946253cca23936e387425f0e3" name="apache-commons-httpclient-javadoc" arch="noarch">
  <version epoch="0" ver="3.1" rel="lp152.6.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548072000">- Add maven pom file and clean-up the spec file</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Trim conjecture from description.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="e707901dffcd33cdfc18198476baf1f7c47780cf2ea573b3b8c01a3833dde027" name="apache-commons-httpclient-manual" arch="noarch">
  <version epoch="0" ver="3.1" rel="lp152.6.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1364472000">- enhance fix of bnc#803332 / CVE-2012-5783
  * add a check for subjectAltNames for instance</changelog>
  <changelog author="mvyskocil@suse.com" date="1382702400">- really apply CVE-2012-5783 patch
- build with java 6 and higher</changelog>
  <changelog author="darin@darins.net" date="1397476800">- disable bytecode test on SLES</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Redo the bytcode disabling properly.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Build with java source and target versions 1.6
  * fixes build with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1548072000">- Add maven pom file and clean-up the spec file</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Trim conjecture from description.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800000">- Security fix [bsc#1178171, CVE-2014-3577]
  * org.apache.http.conn.ssl.AbstractVerifier does not properly
    verify that the server hostname matches a domain name in the
    subject's Common Name (CN) or subjectAltName field of the X.509
    certificate, which allows MITM attackers to spoof SSL servers
    via a "CN=" string in a field in the distinguished name (DN)
    of a certificate.
- Add apache-commons-httpclient-CVE-2014-3577.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603800001">- Security fix [bsc#945190, CVE-2015-5262]
  * http/conn/ssl/SSLConnectionSocketFactory.java ignores the
    http.socket.timeout configuration setting during an SSL handshake,
    which allows remote attackers to cause a denial of service (HTTPS
    call hang) via unspecified vectors.
- Add apache-commons-httpclient-CVE-2015-5262.patch</changelog>
</package>
<package pkgid="8ddefa8da74b34af9a4272c8c65308768435c82b5d402b4195163bfa7977fe84" name="apache-commons-io" arch="noarch">
  <version epoch="0" ver="2.6" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Use junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Remove unused depedencies</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix build with jdk9 by specifying source and target level 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551182400">- Update to upstream version 2.6
  * many bugfixes, features and enhancenments, like
    Automatic-Module-Name entry in manifest
  * requires jdk7 or later
  * see RELEASE-NOTES.txt for details
- Generated a build.xml to be able to build with ant
- Build with tests is now optional
- Removed patch:
  * commons-io-version-property.patch
    + not needed anymore in this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1553688000">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1618401600">- Security fix: [bsc#1184755, CVE-2021-29425]
  * Limited path traversal when invoking the method
    FileNameUtils.normalize with an improper input string
  * Add apache-commons-io-CVE-2021-29425.patch</changelog>
</package>
<package pkgid="8da17183fbc1fffb0b4e1ebc3e48f237b15b49ee1781fce0199e143329448fd7" name="apache-commons-io" arch="src">
  <version epoch="0" ver="2.6" rel="lp152.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1205409600">- Initial package created with version 1.3.2 (JPackage 1.7)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1219665600">- target=1.5
- removed a build gcj support
- removed a javadoc %post/postun
- fixed a wrong end of line encoding</changelog>
  <changelog author="mvyskocil@suse.com" date="1351166400">- update to the latest upstream version 2.4 (needed by fop 1.1)
  * many bugfixes, features and enhancenments, like
  * XmlStreamReader support for UTF-32
  * requires jdk6 or later
  * see RELEASE-NOTES.txt for details
- rename to apache-commons-io to stay compatible with upstream and fedora
- add commons-io-version-property.patch to fix the version in build.xml</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Use junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Remove unused depedencies</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix build with jdk9 by specifying source and target level 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551182400">- Update to upstream version 2.6
  * many bugfixes, features and enhancenments, like
    Automatic-Module-Name entry in manifest
  * requires jdk7 or later
  * see RELEASE-NOTES.txt for details
- Generated a build.xml to be able to build with ant
- Build with tests is now optional
- Removed patch:
  * commons-io-version-property.patch
    + not needed anymore in this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1553688000">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1618401600">- Security fix: [bsc#1184755, CVE-2021-29425]
  * Limited path traversal when invoking the method
    FileNameUtils.normalize with an improper input string
  * Add apache-commons-io-CVE-2021-29425.patch</changelog>
</package>
<package pkgid="de4f04faaad53d1af8ffd9f7b37d0eeeef8bf00461b249ec8111dfe698acde56" name="apache-commons-io-javadoc" arch="noarch">
  <version epoch="0" ver="2.6" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Use junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="tchvatal@suse.com" date="1495368000">- Remove unused depedencies</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Fix build with jdk9 by specifying source and target level 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Run fdupes on documentation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551182400">- Update to upstream version 2.6
  * many bugfixes, features and enhancenments, like
    Automatic-Module-Name entry in manifest
  * requires jdk7 or later
  * see RELEASE-NOTES.txt for details
- Generated a build.xml to be able to build with ant
- Build with tests is now optional
- Removed patch:
  * commons-io-version-property.patch
    + not needed anymore in this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1553688000">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1618401600">- Security fix: [bsc#1184755, CVE-2021-29425]
  * Limited path traversal when invoking the method
    FileNameUtils.normalize with an improper input string
  * Add apache-commons-io-CVE-2021-29425.patch</changelog>
</package>
<package pkgid="dee664cfdeb9eed6f136419fcf7e51b95557fbe7c1a68d60042ced48664da90f" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="6c6b2638872e301b7b6a739f7654fc64de839e4fd6917fe33962f3965338f2a5" name="apache2" arch="src">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="7710fb26edf90ebbee1c8f677f564e5543f9cd173baeed41ad9c56efe70f6530" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="faa09ae0d8bfb80d3ede1a21dec1eef3238b0798e143a8961cb7b313ce4ad96d" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="f148824fefd2d98660ef41c0d0edf568c52f291b521a2eebd9e2b1a459d9420d" name="apache2" arch="src">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="2606a102475f32049cfc1a93c82ebd2d35feae42654fc53d4ef0a04321b9c8ae" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="325926a709e4abf61b266b9c90c0d0d30a619f074bb80be9ecc409c34c7b3eeb" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="d34aa68a2057b38e5ccaab48ae4fe397021677bb2a896eb787ce4194ee2df5d8" name="apache2" arch="src">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="d61ed13a191c3cf7f1ae70546fc0b996781c9cbb9f53e3e3324bc42c61272bc4" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="f7a0ff5bb4d2f287ff159905f3397521cfbd7c2607bb5450b2c49143f288e1c7" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="b7ab7abee5becddf5041c70acadf2782142507c08aec9ef5654bc123fb8ff614" name="apache2" arch="src">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="b8107934322bf4468e18e8c1a543dc3329bf3d25d30a52bbf0ed97ac5808fb23" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="21334b001af9eb95a7328f38c73275c5d89fc92f10c94de8f6c10ea8e6456c9d" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="a927ba2ecba7871e9521f9bbb151fb05428d7e36c75d1452c203b8ee2af4906d" name="apache2" arch="src">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="22d314eca8240f0ad93e315b3a0a689b952a96da227ffe60ec37154de1594a56" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="fd01bf9e685c8833dac0ff1aa3e0b4d1675b4bbaec486b4931f6dd1a6741f438" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="af4dcdf58e2601c1b4d1ae6c0a50c520955595bb2701557db4964e2330998776" name="apache2" arch="src">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="77913771143b8f515136ba08997b54539ea9e732de379d15ccaa67f598286855" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="01b0e3899596b47f30b77adb866a7470aea82859b06ab892297a42ba7bdc8812" name="apache2" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="af57dfc3050a309abb1bcee8c0bcd5180b54f8144ded2e8820fee7c842627b59" name="apache2" arch="src">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="be284f8631c4186fa0279fb748bb14209832924f24bac533d981d373b2b130f4" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="667cbae633812b0dcf09efd7e892bb3ff3b09393c8f62756e8f6ffd15d9249ba" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="52a049ddfc2dc38d05335a7aedb0f71dfed1972eefd6d44fcbf6edd948bccd8f" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="c72f6a91439e49a83513373105464eecb2b1308170b5c50d602b00dd4e3af322" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="91610cac348f056df781842aaf14ecff98327c0a3f6aee481efd16aee785cfab" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="f0a4b0799ed25f7b491e534f81920f4f17d2da4828a78ef23ba90b520dfc54cd" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="8ae414047651c5fae5d3cb1400cd79702ec7ba993c58b29836c17d5be2082cdf" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="462610274a419c9aa6905894204e01273df0a049e9a47785d7118be7777b7267" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="f6328a72d6644a2ff8a6e03ce3acbf91150f7b0dd9d2fbd9eaa7ce7303e7f967" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="651a02f1b96e84bf32ecb2d852837c7a7c7c08fb6af8d4991cad6ff3e201e2a3" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="511849cef8de6fd82408f72308d33f6508c098f2a477b67ffde4990e9974d5c8" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="8cc18460e4b1d5f8cbe8a2051109853aa5af5a2fbf3389eda79809901d7a64a1" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="2e853c92bd1c81801964f4f79d417663057eaa8951f72018419731087b355540" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="f00b74e964f54d03692e533957e150650f2dc72613999cf0a818d2975e6a24dd" name="apache2-devel" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="68624d4697fbac328bf06bd7130f4a2996f839de9aa08cbe094fa07e9bd9043d" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="ce5872b1c94fdcb0283be55272de598a722162cf821d2a66182a5c761a8b347d" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="37765f7aedfe0b59183e914cb9a5748d3f96642a533638a03ad3bbeb31533bdd" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="25b899fcd91f2030e7e46ed7f93e3874f145ad015572e11497f2f1cacfb6d3e6" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="8257a09730535b1a1f1364a3f1955d5ae5719a2aded4e81c044771bfb1569fe1" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="981500e9adafc6ff5ec58fb0647d1b0b2a3362f29daf530a3658bed0b8ac6dfa" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="ef6fbc44afb0a446179173b9f1ba2f1b20aaf055a3a6f75a160d6c2eeeb91be7" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="16d1b2dc995950e291517e3fa28e97eb583f3bf490b395f41df48ba3c64489c6" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="7734c6fd2c1536c08cc25b901368d72428da69c5c268aa0a1ccba0564d44ed1a" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="8ec6cd6507b5881648ca18610d5831d3dd4d2409833ad784d14eab679230e028" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="3d16cff53cea908df4480a0ec8de888c0046bed32bc54f8998131d87bac4534e" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="988354a56279dad41524a1fa15b20b1130151ca73b8302d89529badaa0cf8cd1" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="6ca657350b800e7e390f90446816d3043f56fd778329f92779981e1179363f4f" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="a929b7bd288a3ee8ab1fc7c5e49710d76dbb7bfbe47173d347c97cc62314dd58" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="36c9aa86fbea4db7d0ac6fddd1d57ba8c3be51c55dda2ff8097cbeb44c5414f7" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="4c1a6399d85a79afebe8584a1cc64b971b9029db7ac5d469598903135eefed7e" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="47c94db84467381f15f60d6d59e374ed874db5835634eaa427bebfda3be9d50f" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="f1859e329d8b98aea3f7edc651daebb4e2960e8e19a754a892a714e0c9d3d019" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="a5cbbe31b8d7f89c409cced3b6c10aae0457a2fc4a2d882eeb6ca51607e188d8" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="3f2505a7fbabfea4821dd3024b09b4c5f5b5b832b16b19fda8a8290f8479428e" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="f4ca029be498b8fef0fa8f664225abbc4e23258d31b20e1003f1d3e7c470834c" name="apache2-event" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="ce3ab155bd1886c98be125d0f2b8af5d064c72edf27e386768ac08cd459dd773" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="01418d50bd198d4d66d116d01e10369072b7717df9db0857deae8b1bd869e5ce" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="da33eb697e86ee49e875830a78aa46f8e214eb3618e74f3d7ec51c832e9a1786" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="2b914daf9c6d6686cb8717714dfd941e3df89480243233907a249128db482bac" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="20e8fdd7f839c35f23d3563fc9de68b2dac5a9ff388ef05afc60622c1a76600d" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="3fc47f76eb55e7478b3b8ce841e7dd08384bf5f277a6b0a95c59a968c5fb0c10" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="c2d10629458b68730de076fd2f787b7a5642a5854107950d887589ac2d04bea3" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="2641b1680d0bd1568e0b1c7c9ee2015898e8367c83aba0f1362d6df26a84eb2b" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="da3661fb91ba06c642ae643174d9619477f20c733a173ce09acc7d2b48d1eb45" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="ff9fb6c82f45d8855352d94a70ca141345eb46fe3ed1a7fcef813efaeeb28e52" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="3c63124cbee80fb630b5f0f856823a7112a88d045aff3989367625f6f3fe3953" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="374aa5f246de508b1b36e1b0869586aac621d0933c14a2bf3f6b5fc8523c2966" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="b347fdbd42edc01a05c8563b1b57423ef424751ea926e069290688cbe0baf468" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="4f1d8c79a0c357863090a1c28f61a4097ffefac75afda791514c6b1100d0ada1" name="apache2-example-pages" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="837b5d71ac22181ef4ba3dbdcb46227a6e396e3f05aa621015ad147746d29882" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="5f614b8900c6e26dfcb240f09395c0aa80a496a86076c7ee974587e03c8bd518" name="apache2-mod_apparmor" arch="i586">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="d16d3166b9322cb9ddd30dced5534a443bc4a027d514c14a3cd827947b72199f" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="764b28d583ec4e6427d37b8dff16e38d356c00c53636e3b146909be4d19c2af3" name="apache2-mod_apparmor" arch="i586">
  <version epoch="0" ver="2.13.4" rel="lp152.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
</package>
<package pkgid="d5f5d6f70499c98465e8478fb251228603d0441f8e15a148ccfde6f755493292" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="2.13.4" rel="lp152.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
</package>
<package pkgid="76c0cdcfcc86f30105af1ab9e2bd3198d62e4cde0e70584496cf4e892f2e3075" name="apache2-mod_auth_openidc" arch="src">
  <version epoch="0" ver="2.3.8" rel="lp152.5.3.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1583323200">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix
  open redirect issue that exists in URLs with a slash and
  backslash at the beginning [bsc#1164459], [CVE-2019-20479]</changelog>
  <changelog author="pgajdos@suse.com" date="1617278400">- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]</changelog>
</package>
<package pkgid="2b3c54f513c01b06438ce530b51bc3f4f46bb382c17b6ceda7622979007cc55e" name="apache2-mod_auth_openidc" arch="x86_64">
  <version epoch="0" ver="2.3.8" rel="lp152.5.3.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1583323200">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix
  open redirect issue that exists in URLs with a slash and
  backslash at the beginning [bsc#1164459], [CVE-2019-20479]</changelog>
  <changelog author="pgajdos@suse.com" date="1617278400">- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]</changelog>
</package>
<package pkgid="755af3d7780ba356fbc93524e6bb69fe26e146a7787f855e26b05e705d1d316c" name="apache2-mod_auth_openidc" arch="src">
  <version epoch="0" ver="2.3.8" rel="lp152.5.6.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1583323200">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix
  open redirect issue that exists in URLs with a slash and
  backslash at the beginning [bsc#1164459], [CVE-2019-20479]</changelog>
  <changelog author="pgajdos@suse.com" date="1617278400">- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1627041600">- Fix CVE-2021-32785 format string bug via hiredis
  (CVE-2021-32785, bsc#1188638)
  * fix-CVE-2021-32785.patch
- Fix CVE-2021-32786 open redirect in logout functionality
  (CVE-2021-32786, bsc#1188639)
  * fix-CVE-2021-32786.patch
- Refresh apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1627473600">- Fix CVE-2021-32791 Hardcoded static IV and AAD with a reused key in AES GCM encryption
  (CVE-2021-32791, bsc#1188849)
  * fix-CVE-2021-32791.patch
- Fix CVE-2021-32792 XSS when using OIDCPreservePost On
  (CVE-2021-32792, bsc#1188848)
  * fix-CVE-2021-32792-1.patch
  * fix-CVE-2021-32792-2.patch</changelog>
</package>
<package pkgid="1472f995f305be586e6a914b26ae69057be36d3f1d723524cf9a614898586ef7" name="apache2-mod_auth_openidc" arch="x86_64">
  <version epoch="0" ver="2.3.8" rel="lp152.5.6.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1583323200">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix
  open redirect issue that exists in URLs with a slash and
  backslash at the beginning [bsc#1164459], [CVE-2019-20479]</changelog>
  <changelog author="pgajdos@suse.com" date="1617278400">- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1627041600">- Fix CVE-2021-32785 format string bug via hiredis
  (CVE-2021-32785, bsc#1188638)
  * fix-CVE-2021-32785.patch
- Fix CVE-2021-32786 open redirect in logout functionality
  (CVE-2021-32786, bsc#1188639)
  * fix-CVE-2021-32786.patch
- Refresh apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1627473600">- Fix CVE-2021-32791 Hardcoded static IV and AAD with a reused key in AES GCM encryption
  (CVE-2021-32791, bsc#1188849)
  * fix-CVE-2021-32791.patch
- Fix CVE-2021-32792 XSS when using OIDCPreservePost On
  (CVE-2021-32792, bsc#1188848)
  * fix-CVE-2021-32792-1.patch
  * fix-CVE-2021-32792-2.patch</changelog>
</package>
<package pkgid="9b63051fefdc1dfbbb68ff933af363e340834908ee7af9582ff3bb8f52ef5cd2" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.4.6" rel="lp152.2.12.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1610366400">- security update
- added patches
  fix CVE-2020-7071 [bsc#1180706], FILTER_VALIDATE_URL accepts URLs with invalid userinfo
  + php7-CVE-2020-7071.patch</changelog>
</package>
<package pkgid="f8cfa5f58342124a78c7969ff88fb118864a7a6434b1220efacae3a21c649d6a" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.6" rel="lp152.2.12.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1610366400">- security update
- added patches
  fix CVE-2020-7071 [bsc#1180706], FILTER_VALIDATE_URL accepts URLs with invalid userinfo
  + php7-CVE-2020-7071.patch</changelog>
</package>
<package pkgid="22ddd03a080a6b3e9f871fb691d4f80507e6ff791def8a604d55c3145f8ae35d" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.4.6" rel="lp152.2.15.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1610366400">- security update
- added patches
  fix CVE-2020-7071 [bsc#1180706], FILTER_VALIDATE_URL accepts URLs with invalid userinfo
  + php7-CVE-2020-7071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1613044800">- security update
- added patches
  fix CVE-2021-21702 [bsc#1182049], NULL pointer dereference in SoapClient
  + php7-CVE-2021-21702.patch</changelog>
</package>
<package pkgid="9aa1917c861bfe8b705fb7b2be6a78d3731eb57d6c96fa113ad39d5dfbbc3552" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.6" rel="lp152.2.15.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1610366400">- security update
- added patches
  fix CVE-2020-7071 [bsc#1180706], FILTER_VALIDATE_URL accepts URLs with invalid userinfo
  + php7-CVE-2020-7071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1613044800">- security update
- added patches
  fix CVE-2021-21702 [bsc#1182049], NULL pointer dereference in SoapClient
  + php7-CVE-2021-21702.patch</changelog>
</package>
<package pkgid="3d92236511e7f419d4bb039c299c6d1b756890b23a14663ad181425c9dd67f55" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.4.6" rel="lp152.2.18.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1610366400">- security update
- added patches
  fix CVE-2020-7071 [bsc#1180706], FILTER_VALIDATE_URL accepts URLs with invalid userinfo
  + php7-CVE-2020-7071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1613044800">- security update
- added patches
  fix CVE-2021-21702 [bsc#1182049], NULL pointer dereference in SoapClient
  + php7-CVE-2021-21702.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1625832000">- security update
- added patches
  fix CVE-2021-21705 [bsc#1188037], SSRF bypass in FILTER_VALIDATE_URL
  + php7-CVE-2021-21705.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- added patches
  fix CVE-2021-21704 [bsc#1188035], security issues in pdo_firebase module
  + php7-CVE-2021-21704.patch</changelog>
</package>
<package pkgid="3e603ac3a28e6355b8dda3056f723fcbb869641a7513c5abfea98693288c9546" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.6" rel="lp152.2.18.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1610366400">- security update
- added patches
  fix CVE-2020-7071 [bsc#1180706], FILTER_VALIDATE_URL accepts URLs with invalid userinfo
  + php7-CVE-2020-7071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1613044800">- security update
- added patches
  fix CVE-2021-21702 [bsc#1182049], NULL pointer dereference in SoapClient
  + php7-CVE-2021-21702.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1625832000">- security update
- added patches
  fix CVE-2021-21705 [bsc#1188037], SSRF bypass in FILTER_VALIDATE_URL
  + php7-CVE-2021-21705.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- added patches
  fix CVE-2021-21704 [bsc#1188035], security issues in pdo_firebase module
  + php7-CVE-2021-21704.patch</changelog>
</package>
<package pkgid="911cacad7b8f442a59d7abb220015795ebd7e476d4fae1cc42e03b272d640b9a" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.4.6" rel="lp152.2.3.2"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574942400">- update to 7.4.0:
  * Typed Properties
  * Arrow Functions
  * Limited Return Type Covariance and Argument Type Contravariance
  * Unpacking Inside Arrays
  * Numeric Literal Separator
  * Weak References
  * Allow Exceptions from __toString()
  * Opcache Preloading
  * The interbase and wddx extensions are removed and now
    available through PECL
  * PEAR is now packaged separately in php7-pear source package
    (https://externals.io/message/103977)
  * See https://www.php.net/ChangeLog-7.php#7.4.0 for a complete
    list of changes
- deleted patches
  - php-suse-addons.tar.bz
  - php-systzdata-v18.patch
- added patches
  + php-fix-mysqlnd-compression-library.patch
  + php-systzdata-v19.patch
  + mod_php7.conf
- modified files/patches
  % php-no-build-date.patch
  % php-systemd-unit.patch
  % php7.keyring (use keys of the PHP-7.4 release managers)
  % php7.rpmlintrc</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1575547200">- relax systemd restrictions for FPM as they were too strict in
  some applications
- change leftover Requires php7-&lt;extension&gt; to php-&lt;extension&gt;
- remove external libraries from -devel subpackage
- added patches
  + php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1575979200">- php7-devel requires glibc-devel, libxml2-devel, pcre2-devel
  again</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
</package>
<package pkgid="6b7ffb18e19baf69a44bbdf96523bf5faf4755f2da45f55d83e49e31ce4c8f74" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.6" rel="lp152.2.3.2"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574942400">- update to 7.4.0:
  * Typed Properties
  * Arrow Functions
  * Limited Return Type Covariance and Argument Type Contravariance
  * Unpacking Inside Arrays
  * Numeric Literal Separator
  * Weak References
  * Allow Exceptions from __toString()
  * Opcache Preloading
  * The interbase and wddx extensions are removed and now
    available through PECL
  * PEAR is now packaged separately in php7-pear source package
    (https://externals.io/message/103977)
  * See https://www.php.net/ChangeLog-7.php#7.4.0 for a complete
    list of changes
- deleted patches
  - php-suse-addons.tar.bz
  - php-systzdata-v18.patch
- added patches
  + php-fix-mysqlnd-compression-library.patch
  + php-systzdata-v19.patch
  + mod_php7.conf
- modified files/patches
  % php-no-build-date.patch
  % php-systemd-unit.patch
  % php7.keyring (use keys of the PHP-7.4 release managers)
  % php7.rpmlintrc</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1575547200">- relax systemd restrictions for FPM as they were too strict in
  some applications
- change leftover Requires php7-&lt;extension&gt; to php-&lt;extension&gt;
- remove external libraries from -devel subpackage
- added patches
  + php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1575979200">- php7-devel requires glibc-devel, libxml2-devel, pcre2-devel
  again</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
</package>
<package pkgid="67bb4e424ae9b27af3da0702c5918e0d87e6ea72ad5fcf698ab15a477441ac5c" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.4.6" rel="lp152.2.6.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1575547200">- relax systemd restrictions for FPM as they were too strict in
  some applications
- change leftover Requires php7-&lt;extension&gt; to php-&lt;extension&gt;
- remove external libraries from -devel subpackage
- added patches
  + php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1575979200">- php7-devel requires glibc-devel, libxml2-devel, pcre2-devel
  again</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
</package>
<package pkgid="b4c676223fbcd8f8461f0b7abe9a22c5bf6d0e3163e272991aaf757b3e8a43db" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.6" rel="lp152.2.6.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1575547200">- relax systemd restrictions for FPM as they were too strict in
  some applications
- change leftover Requires php7-&lt;extension&gt; to php-&lt;extension&gt;
- remove external libraries from -devel subpackage
- added patches
  + php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1575979200">- php7-devel requires glibc-devel, libxml2-devel, pcre2-devel
  again</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
</package>
<package pkgid="c157fd4f8b06343d0d7e8948f23a909a88f9826c606eda8b96b17ab1fd06b7fe" name="apache2-mod_php7" arch="i586">
  <version epoch="0" ver="7.4.6" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1575979200">- php7-devel requires glibc-devel, libxml2-devel, pcre2-devel
  again</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
</package>
<package pkgid="b02e1800ceaf63b700440a4ede2059e6c6c2283395c36358d012ae39bb0b3a0f" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.6" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1575979200">- php7-devel requires glibc-devel, libxml2-devel, pcre2-devel
  again</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
</package>
<package pkgid="01514183ad4693378a6977317acd4f6498aaa29756959900aede3901aafa7b35" name="apache2-mod_security2" arch="src">
  <version epoch="0" ver="2.9.2" rel="lp152.4.3.1"/>
  <changelog author="thomas.worm@sicsec.de" date="1398945600">- Raised to version 2.8.0.
- updated patches:
  * modsecurity-apache_2.8.0-build_fix_pcre.diff
  - &gt; modsecurity-apache_2.7.7-build_fix_pcre.diff</changelog>
  <changelog author="draht@suse.de" date="1402574400">- OWASP rule set. [bnc#876878]
  new in 2.8.0 (more complete changelog to add to last changelog):
  * Connection limits (SecConnReadStateLimit/SecConnWriteStateLimit)
    now support white and suspicious list
  * New variables: FULL_REQUEST and FULL_REQUEST_LENGTH
  * GPLv2 replaced by Apache License v2
  * rules are not part of the source tarball any longer, but
    maintaned upstream externally, and included in this package.
  * documentation was externalized to a wiki. Package contains
    the FAQ and the reference manual in html form.
  * renamed the term "Encryption" in directives that actually refer
    to hashes. See CHANGES file for more details.
  * byte conversion issues on s390x when logging fixed.
  * many small issues fixed that were discovered by a Coverity scanner
  * updated reference manual
  * wrong time calculation when logging for some timezones fixed.
  * replaced time-measuring mechanism with finer granularity for
    measured request/answer phases. (Stopwatch remains for compat.)
  * cookie parser memory leak fix
  * parsing of quoted strings in multipart Content-Disposition
    headers fixed.</changelog>
  <changelog author="draht@suse.de" date="1402920000">- apache2-mod_security2-no_rpath.diff: avoid the usage of -rpath
  in autoconf m4 macros. Obsoletes patch
  modsecurity-apache_2.8.0-build_fix_pcre.diff
- use automake for build, add autoconf and automake to
  BuildRequires:. This fix is combined with [bnc#876878].
- turn on --enable-htaccess-config
- use %{?_smp_mflags} for build</changelog>
  <changelog author="draht@suse.de" date="1402920001">- apache2-mod_security2-libtool-fix.diff: initialize libtool.</changelog>
  <changelog author="draht@suse.de" date="1402920002">- BuildRequires: libtool missing</changelog>
  <changelog author="draht@suse.de" date="1404734400">- last changelog does not say that
  apache2-mod_security2-libtool-fix.diff was obsoleted.</changelog>
  <changelog author="thomas.worm@sicsec.de" date="1408968000">- Fixed spec file to work with older distribution versions.
  Before openSuSE 13.1 aclocal doesn't work, instead autoreconf
  has to be called.</changelog>
  <changelog author="draht@suse.de" date="1409140800">- Portability: provide /etc/apache2/mod_security2.d/empty.conf
  to avoid a non-match of the file-glob in the Include statement
  from /etc/apache2/conf.d/mod_security2.conf . This restores
  the Include back from the IncludeOptional, which is not portable.
- Source URL set to (expanded)
  https://www.modsecurity.org/tarball/2.8.0/modsecurity-2.8.0.tar.gz</changelog>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="thomas.worm@sicsec.de" date="1423915200">- Raised to version 2.9.0
- Updated patch: apache2-mod_security2-no_rpath.diff
  (adapted lines)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424779200">- spec, build: Respect optflags
- spec: buildrequire pkgconfig
- modsecurity-fixes.patch: mod_security fails at:
  * building with optflags enabled due to undefined behaviour
    and implicit declarations.
  * It abuses it apr_allocator api, creating one allocator
    per request and then destroying it, flooding the system
    with mmap() , munmap requests, this is particularly nasty
    with threaded mpms. it should instead use the allocator
    from the request pool.</changelog>
  <changelog author="tchvatal@suse.com" date="1425297600">- Remove useless comment lines/whitespace</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1438171200">- fix build for lua 5.3
  + apache2-mod_security2-lua-5.3.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1498046400">- Update modsecurity-fixes.patch: additionally include netdb.h in
  order to have gethostbyname defined.</changelog>
  <changelog author="kstreitova@suse.com" date="1506945600">- update to 2.9.2
  * release notes
    https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.2
  * refresh apache2-mod_security2-no_rpath.diff
  * remove apache2-mod_security2-lua-5.3.patch that was applied
    upstream
- remove outdated html pages and diagram (they can be accessed
  online at https://github.com/SpiderLabs/ModSecurity/wiki)
  * Reference-Manual.html.bz2
  * ModSecurity-Frequently-Asked-Questions-FAQ.html.bz2
  * modsecurity_diagram_apache_request_cycle.jpg
- don't pack the whole doc directory as it contains also Makefiles
  or doxygen configuration files
- disable mlogc as we don't pack it and it also can't be built for
  curl &lt;=7.34
- add basic and regression test suite (but disabled for now)
  * add apache2-mod_security2_tests_conf.patch for apache2
    configuration file used for tests that was trying to load
    mpm_worker_module (it's static for our apache2 package)
  * add "BuildRequires: perl-libwww-perl" needed for the test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- fix build for SLE_11_SP4: BuildRoot and %deffattr have to be
  present</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Trim advertisement and filler wording from descriptions.</changelog>
  <changelog author="pgajdos@suse.com" date="1614772800">- modified patches [bsc#1180830]
  % modsecurity-fixes.patch (fix crash caused by our patch)
- added patches
  fix https://github.com/SpiderLabs/ModSecurity/issues/2514
  + modsecurity-2.9.3-input_filtering_errors.patch</changelog>
</package>
<package pkgid="7f17bd3eb73289c59df822c3b7ea0d82e3c0c5d54b8212234b8f9ffc2fd18373" name="apache2-mod_security2" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="thomas.worm@sicsec.de" date="1423915200">- Raised to version 2.9.0
- Updated patch: apache2-mod_security2-no_rpath.diff
  (adapted lines)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424779200">- spec, build: Respect optflags
- spec: buildrequire pkgconfig
- modsecurity-fixes.patch: mod_security fails at:
  * building with optflags enabled due to undefined behaviour
    and implicit declarations.
  * It abuses it apr_allocator api, creating one allocator
    per request and then destroying it, flooding the system
    with mmap() , munmap requests, this is particularly nasty
    with threaded mpms. it should instead use the allocator
    from the request pool.</changelog>
  <changelog author="tchvatal@suse.com" date="1425297600">- Remove useless comment lines/whitespace</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1438171200">- fix build for lua 5.3
  + apache2-mod_security2-lua-5.3.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1498046400">- Update modsecurity-fixes.patch: additionally include netdb.h in
  order to have gethostbyname defined.</changelog>
  <changelog author="kstreitova@suse.com" date="1506945600">- update to 2.9.2
  * release notes
    https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.2
  * refresh apache2-mod_security2-no_rpath.diff
  * remove apache2-mod_security2-lua-5.3.patch that was applied
    upstream
- remove outdated html pages and diagram (they can be accessed
  online at https://github.com/SpiderLabs/ModSecurity/wiki)
  * Reference-Manual.html.bz2
  * ModSecurity-Frequently-Asked-Questions-FAQ.html.bz2
  * modsecurity_diagram_apache_request_cycle.jpg
- don't pack the whole doc directory as it contains also Makefiles
  or doxygen configuration files
- disable mlogc as we don't pack it and it also can't be built for
  curl &lt;=7.34
- add basic and regression test suite (but disabled for now)
  * add apache2-mod_security2_tests_conf.patch for apache2
    configuration file used for tests that was trying to load
    mpm_worker_module (it's static for our apache2 package)
  * add "BuildRequires: perl-libwww-perl" needed for the test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- fix build for SLE_11_SP4: BuildRoot and %deffattr have to be
  present</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Trim advertisement and filler wording from descriptions.</changelog>
  <changelog author="pgajdos@suse.com" date="1614772800">- modified patches [bsc#1180830]
  % modsecurity-fixes.patch (fix crash caused by our patch)
- added patches
  fix https://github.com/SpiderLabs/ModSecurity/issues/2514
  + modsecurity-2.9.3-input_filtering_errors.patch</changelog>
</package>
<package pkgid="63f58c804f770c3bd40ac29b87da1474902a35a9d54997dd7b07838aecb03b9a" name="apache2-mod_wsgi" arch="src">
  <version epoch="0" ver="4.5.18" rel="lp152.5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
  <changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1398686400">- Fix module name sent to a2enmod/a2dismod and fix/cleanup
  post/postun scripts.</changelog>
  <changelog author="mc@suse.com" date="1400932800">- fix Local privilege escalation (bnc#878550)
  CVE-2014-0240</changelog>
  <changelog author="mc@suse.de" date="1404907200">- Update to version 4.2.5
  - remove mod_wsgi-3.4-connsbh.patch - included in upstream version
  - remove mod_wsgi-setuid-patch.diff - included in upstream version
  - No longer support the use of mod_python in conjunction with
    mod_wsgi
  - Adding a lot of new configuration option
  - fix off-by-one error in setgroups (bnc#883229)</changelog>
  <changelog author="mc@suse.de" date="1404907201">- provide short module name</changelog>
  <changelog author="mc@suse.de" date="1404993600">- change URL to new location</changelog>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1629115200">- Enable installation of Python sitelib wrapper
  This enabled Python Projects to require mod_wsgi in the install_requires
  without receiving a "DistributionNotFound" error on entrypoint script
  generated by setuptools
- Backport of https://build.opensuse.org/request/show/794038
- Fixes bsc#1189467</changelog>
</package>
<package pkgid="27f2563febe6a536a65f57fcbeef1f0f7c0f18cde0cd10de6b4d169b88a4bedb" name="apache2-mod_wsgi" arch="x86_64">
  <version epoch="0" ver="4.5.18" rel="lp152.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1629115200">- Enable installation of Python sitelib wrapper
  This enabled Python Projects to require mod_wsgi in the install_requires
  without receiving a "DistributionNotFound" error on entrypoint script
  generated by setuptools
- Backport of https://build.opensuse.org/request/show/794038
- Fixes bsc#1189467</changelog>
</package>
<package pkgid="e320edcf68b96cbde1dd6dfd83c0330ffe417c8acad67c1c1dd8ad391326c997" name="apache2-mod_wsgi-python3" arch="src">
  <version epoch="0" ver="4.5.18" rel="lp152.5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
  <changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1398686400">- Fix module name sent to a2enmod/a2dismod and fix/cleanup
  post/postun scripts.</changelog>
  <changelog author="mc@suse.com" date="1400932800">- fix Local privilege escalation (bnc#878550)
  CVE-2014-0240</changelog>
  <changelog author="mc@suse.de" date="1404907200">- Update to version 4.2.5
  - remove mod_wsgi-3.4-connsbh.patch - included in upstream version
  - remove mod_wsgi-setuid-patch.diff - included in upstream version
  - No longer support the use of mod_python in conjunction with
    mod_wsgi
  - Adding a lot of new configuration option
  - fix off-by-one error in setgroups (bnc#883229)</changelog>
  <changelog author="mc@suse.de" date="1404907201">- provide short module name</changelog>
  <changelog author="mc@suse.de" date="1404993600">- change URL to new location</changelog>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1629115200">- Enable installation of Python sitelib wrapper
  This enabled Python Projects to require mod_wsgi in the install_requires
  without receiving a "DistributionNotFound" error on entrypoint script
  generated by setuptools
- Backport of https://build.opensuse.org/request/show/794038
- Fixes bsc#1189467</changelog>
</package>
<package pkgid="fdcb9022663a5270ccac3aef8c986f072da2655c0c0ac3b4febbb6f101a49649" name="apache2-mod_wsgi-python3" arch="x86_64">
  <version epoch="0" ver="4.5.18" rel="lp152.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1629115200">- Enable installation of Python sitelib wrapper
  This enabled Python Projects to require mod_wsgi in the install_requires
  without receiving a "DistributionNotFound" error on entrypoint script
  generated by setuptools
- Backport of https://build.opensuse.org/request/show/794038
- Fixes bsc#1189467</changelog>
</package>
<package pkgid="b6c71e6d1a7eaa3e57f7b321adce18e665c9df3f2a22270c98e0da14f63fb158" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="2536b5b70979c1be0ffc40c8c2452384c206de4600498f0dbbef7f1b0dbf8df2" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="4b2ef86ad088afddd3d51cd96ab313d5294ba5fa0ae96faf50d831f4e84e232e" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="101cef50e1d810dd96166c0db59a1a25107001a670d8757558527b475a8c1814" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="600afcd386fb9342d3fc992128644f0cf40af3169e492cab85edd99596b23704" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="0c683b5500738a6216c567c9f7e112912efefe1e03213d0000ae94e12f548d94" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="351c7583555a157abe4177593b6ec9c03d33d4fe7293b7d32c232a3f558b9598" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="8546f544b838d8fe0299047ea9c8d909d3c037a09f9911b266ecac93a0eccdf6" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="bef8d4db7525bb1fa417b6ba920d9da81aa6d7db96a0fa581e69e0e25614364b" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="e7ea390f91fafe3a059aedd64e80f1a1631025a7e92cdcc14e3f855bc5f0861f" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="6f3a74fd20c4ecbe805deadaae9fa490db84b9fc1148a05f518ca6a88a56d02c" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="2092d4669ee8c8f5b778adcebdcb290d6fffac13ee16bafa25931079231d59b3" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="759fc87ffeec5c2faaf6be316f077dfa81939efaaec4647bf410a8ec2074f8de" name="apache2-prefork" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="7916661d2b5f6b887f3e3bcaa31a64813bfd9ea05fb9d6b36b7f7b098fe292bd" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="ff3eaa0f4b795e80c6324e2712932472e3040cbde0e800da1ae245355e448a86" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="78aa89cbd5fac8c92a075bd91aae2a867f9a358bf67c7ee24a048719432ee485" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="540e793e740b50dd4c19343bea26f7b93533e5fe7eb7437ee9c848d2c3cc12a6" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="47b14a13eb466a49f09eadd60e53b6fea02af05b62a38909d61b59096a9cebe4" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="51692df62c224712df01487c976a916b7dee6615e146e951539fec0c4546f16c" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="c497dfb9d7013f1d5306a96662e8285030fda15fc906a66cdb3a219f55cfb721" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="53d16a5626c17093e2b4ca37efbc4bc2a3c068a78feebf4d6449c4e7623b0498" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="d847533eeb24d46b87475ea0e3c440a9ad5b06c5ebe7801b2b239e961ff7bb7b" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="e413085b96e3d11d4b8316a3c5cba00adb8a57df7ee54a1a09cf57de1a8fc3b5" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="1d61319a6e62096b69a5cd8daf713b168c6d8e9108eea407a90cbc2e3b47aa79" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="e7da1f317f2f82da15bb2b4b9e8e9a9d15e9d5d980d8a7006315f075d9dc5d16" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="b421419db5be7f6d57bd40550c3df22744576ac5517b3fb5ba42ff013ce6f916" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="e59c20783190202c4137d4eb045176357ed03ed00e78bfb8d682e8d521d0755f" name="apache2-utils" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="3b9ef966c1d82c55c10fd99490a231806d5a38152351fe0e1c6d0f7844558603" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="a10841638ece44338295907bdd47eed769348ae679321d48f977ccbaf95c5c02" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="c6ae8e385ab3c2b9442c6d5ba16836658cdd70f2d2632dd9c87952cbbc3662d9" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="9e39e82a9e29511c0cdd583c0049da1d3ea9a60de8c12a2e816391df9c1e2db1" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="2129194dece0acfbeaf5295b8176f0d0b213ef8600a15b5bfae4d9810a00880f" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="a0cb0328d5fd517b675691563a7d381cd5b0d6fcd8999b2a5e73ccd606db037f" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="97662a340260aa7bfb14152efe3099a2dfdb7e77fbe111f003b0edf4bef16659" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
</package>
<package pkgid="a3819bad8de95fa834c7b32c675e14d3a0173cd73529b8dd5415b30e2e7f384a" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="f2d41b6d445af700ec2070d9c546f16baca6035a77c93a51e5250c240fe913fe" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1632312000">- security update
- added patches
  fix CVE-2021-40438 [bsc#1190703], SSRF via a crafted request uri-path
  + apache2-CVE-2021-40438.patch
  fix CVE-2021-36160 [bsc#1190702], out-of-bounds read via a crafted request uri-path
  + apache2-CVE-2021-36160.patch
  fix CVE-2021-39275 [bsc#1190666], out-of-bounds write in ap_escape_quotes() via malicious input
  + apache2-CVE-2021-39275.patch
  fix CVE-2021-34798 [bsc#1190669], NULL pointer dereference via malformed requests
  + apache2-CVE-2021-34798.patch</changelog>
</package>
<package pkgid="2ef5d050c30343e6bb931559e0589ca1fdbaa6d3f056d6ccfdbbc4a2fe1e29d2" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="2d7be47d4bc84335521eee4d79723c19d80a820a6cca6fa3746fa04756701ff6" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="424a54805f44779190c0b7be07252d2783edfe5377934c69b67ce2bebe6d43a9" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="4f8b2df92675343a3a2b2863ecd9714776ca79579042861a666f0593ff5ca8ce" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="db35d8efea68065a804585e1a2c4746c5a6176a2d5ca27ff57f03a2f085c8c91" name="apache2-worker" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="7db6d4edf1b7e821d479bf5cce3e1dfbc55d5b7cb567b176a9b84a97525d8bdb" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="3748d2ea1f71cb8fa3b44d01647a885c6a7700dbd1bc67f38266cbfcbfa323e7" name="apparmor" arch="src">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="31c3717eb2edfc7a12fb580c155ebd4eabccb4b09341934febafc1d9073d4c56" name="apparmor" arch="src">
  <version epoch="0" ver="2.13.4" rel="lp152.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
</package>
<package pkgid="de52150da7e1c66cfca588410e5ac3ae8cbe716573e63c69b1ebeadb31e5e52a" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="ab5cdb7d60091221518b930cc8ef5d03166a736ee5c46027ec9b82e391a30ced" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="2.13.4" rel="lp152.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
</package>
<package pkgid="1e3d8423e738b67da18e559a1c601b237d9d43fc82175db564406c4bccb3f07a" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="3eb6eecd24f947c614a3802bf8db3d982840d73f0e5432917f00610b208e4ce7" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="2.13.4" rel="lp152.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
</package>
<package pkgid="adee8652b9e866932ef2876acaa85c7ff31987ebb02649a7a792de89007d8309" name="apparmor-parser" arch="i586">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="7632b1981dd6990d2be57faeee1731ee876d483e53d999d545c38d4d235ba9e5" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="9e5821c8de53f4463a58bb3a854aebc0c375464313a72fc583cc0194c6f51886" name="apparmor-parser" arch="i586">
  <version epoch="0" ver="2.13.4" rel="lp152.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
</package>
<package pkgid="ef6cc2555be13317bbd4accb06f85b90c14bddc4a47542fcf03d31b67fc465b4" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.13.4" rel="lp152.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
</package>
<package pkgid="c1c5de4d4fbb15652fdae3c3fce9d472308da8390e859360ace0557bb91673ee" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="dc31ffa54c1535b91c0df9d7dcf539e83db61e0bae7c6c20ab41508430705b09" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="2.13.4" rel="lp152.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
</package>
<package pkgid="2ab1415ace3796dc8c68d648ca65f71432a5ca5b2f7f7893f23b6e7ff4a122f6" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="62ececf10eed0fa0b7f4eae42d6a5b977b5822fc6cd5f118db15f59341d97fb0" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="2.13.4" rel="lp152.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
</package>
<package pkgid="6b5d8d8545810ae9bd49f5dc587d10d88bbb23fb3fee966ac1a0681228d4396c" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="ccd40a9e05da494d89ff2cda2e1242a49c5c041b68291afb60924d41f46cbf6e" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="2.13.4" rel="lp152.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
</package>
<package pkgid="6b8b9e8bf893e1211c63df804b83dfabb5f598d09270408e6c15ad9c832af67c" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="280f73dcd72f0e11c2f23ca394739431da54219d8f3a43930f1611666a1d75b3" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="2.13.4" rel="lp152.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
</package>
<package pkgid="02e13bacf62ae2f87e917ee6a95a2fe20dc3c05a10934f7fada61690771b993b" name="aria2" arch="src">
  <version epoch="0" ver="1.35.0" rel="lp152.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 1.21.0
  * SessionSerializer: Fix bug that pause=true is added to wrong
    item
  * Add "following" to aria2.tellStatus response key as reverse
    link for followedBy
  * mingw: Add warning for falloc
  * Update ciphers in AppleTLS
  * OSX: Enable libssh2 and sftp
  * Update OSX dependencies
  * Fix compile error without TLS support
  * Add support for using gnutls system wide crypto policy
- Update project url</changelog>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="mpluskal@suse.com" date="1469448000">- Update to version 1.25.0:
  * Update third-party libraries for binary releases
  * Send have message without too much delay
  * Also send bitfield rather than have messages if bitfield
    message is equal to or less than the sum of have messages
    which otherwise would be sent.
  * Fix bug that causes bogus EOF connection failure in BitTorrent
    downloads
  * Fix frequent interested/not interested message transmission
  * Fix frequent choke/unchoke message transmission
  * Try to use available URI if all pooled requests are sleeping
  * Update expat in OSX build
  * aria2mon: Add --secret option
  * Set server status error on network failure in server
    performance profile
  * Disable AI_ADDRCONFIG if no IPv4/IPv6 address is configured for
    any interface
  * Russian manual: Update aria2c.rst
  * Apply --retry-wait on 503 only
  * Ensure that lowest speed check is done even when download speed
    is 0
  * Document that -o is always relative to -d option
  * Allow larger ut_metadata size
  * mingw: Change FD_SETSIZE to 32768
  * Fix compile error on OS X
- Add aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Trim filler phrases from description.
  Explicitly add BR:pkgconfig so pkgconfigdeps.sh can autocreate
  pkgconfig() symbols.</changelog>
  <changelog author="mpluskal@suse.com" date="1471780800">- Update to version 1.26.0:
  * aria2mon: Replace client.call with local method
  * Reorder a note section in aria2c.rst
  * bash_completion: Add missing options which takes one of
    pre-defined values
  * Replace "/" with "-" in magnet dn name when used as in-memory
    download name
  * Fix Dockerfile.raspberrypi to correctly decompress expat
    archive
  * Enable ccache in travis-ci
  * Enable OSX/macOS build for travis
  * Better auto-renaming
  * Log number of items loaded from input file
  * Link external libraries to libaria2 with --enable-libaria2
  * Allow seconds for seed-time (fractional minutes)
- Drop no longer needed aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1472731200">- Update to version 1.26.1:
  * Make assertion hold</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Update to version 1.27.1:
  * Add missing libssl_compat.h to SRCS
- Changes for version 1.27.0:
  * Fix possible cause of crash if UDP tracker is used
  * Remove custom ftruncate64 for Android
  * The latest NDK versions support ftruncate64, so building a
    local copy of ftruncate64 is no longer needed.
  * Also, the arm and x86 builds of ftruncate64 failed when
    targeting API level 21 or higher, as they include which are not
    present starting from API level 21.
  * Fix typo found by Debian's Lintian
  * Add --save-not-found option
  * Compile with openssl 1.1.0</changelog>
  <changelog author="mpluskal@suse.com" date="1476792000">- Update to version 1.28.0:
  * Restore LTLIBINTL in src/Makefile.am
  * Add --keep-unfinished-download-result option
  * Fix -Wexpansion-to-defined warning with clang-3.9
  * Fix bug that file name is not logged with --conditional-get</changelog>
  <changelog author="mpluskal@suse.com" date="1479384000">- Update to version 1.29.0:
  * WinTLS: Fix busy loop on write error
  * Support 1xx non-final response
  * Update wslay
  * Don't download piece which is filtered out (e.g., --select-file)</changelog>
  <changelog author="mpluskal@suse.com" date="1481976000">- Update to version 1.30.0:
  * Fix bug that --disable-websocket causes build error
  * Fix bug that lower bound of optimize-concurrent-downloads becomes 1
  * Print DHT nodes with -S option
  * Take into account address family when resolving DHT node address
  * Allow block device file to -i option
  * Expand ${HOME} to user's home directory in several options
  * The following options implement this substitution:
  - -ca-certificate
  - --certificate
  - -dht-file-path
  - -dht-file-path6
  - --dir
  - -input-file
  - -load-cookies
  - -log
  - -metalink-file
  - -netrc-path
  - -on-bt-download-complete
  - -on-download-complete
  - -on-download-error
  - -on-download-start
  - -on-download-stop
  - -on-download_pause
  - -out
  - -private-key
  - -rpc-certificate
  - -rpc-private-key
  - -save-cookies
  - -save-session
  - -server-stat-if
  - -server-stat-of
  - -torrent-file
  * Document that libaria2 is not thread safe
- Fix typos in changelog</changelog>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="avindra@opensuse.org" date="1526558400">- Update to version 1.34.0
  * UnknownLengthPieceStorage: return piece length show something
    in console status when downloading items with unknown content length
  * Fix bug that signal handler does not work with libaria2 when
    aria2::RUN_ONCE is passed to aria2::run().
  * Retry on HTTP 502
- cleanup with spec-cleaner</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch
- Move bash completion to better location</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570536000">- Update to version 1.35.0
  * Drop SSLv3.0 and TLSv1.0 and add TLSv1.3
  * TLSv1.3 support is added for GNUTLS and OpenSSL.
  * Platform: Fix compilation without deprecated OpenSSL APIs
  * Remove linux getrandom and use C++ stdlib instead
  * Don't send Accept Metalink header if Metalink is disabled
- Drop no longer needed aria2-CVE-2019-3500.patch</changelog>
</package>
<package pkgid="264628f55f8a334f0ed0b344e346d80d588c3a7da4c0949e8d5bf52f66948f1f" name="aria2" arch="x86_64">
  <version epoch="0" ver="1.35.0" rel="lp152.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 1.21.0
  * SessionSerializer: Fix bug that pause=true is added to wrong
    item
  * Add "following" to aria2.tellStatus response key as reverse
    link for followedBy
  * mingw: Add warning for falloc
  * Update ciphers in AppleTLS
  * OSX: Enable libssh2 and sftp
  * Update OSX dependencies
  * Fix compile error without TLS support
  * Add support for using gnutls system wide crypto policy
- Update project url</changelog>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="mpluskal@suse.com" date="1469448000">- Update to version 1.25.0:
  * Update third-party libraries for binary releases
  * Send have message without too much delay
  * Also send bitfield rather than have messages if bitfield
    message is equal to or less than the sum of have messages
    which otherwise would be sent.
  * Fix bug that causes bogus EOF connection failure in BitTorrent
    downloads
  * Fix frequent interested/not interested message transmission
  * Fix frequent choke/unchoke message transmission
  * Try to use available URI if all pooled requests are sleeping
  * Update expat in OSX build
  * aria2mon: Add --secret option
  * Set server status error on network failure in server
    performance profile
  * Disable AI_ADDRCONFIG if no IPv4/IPv6 address is configured for
    any interface
  * Russian manual: Update aria2c.rst
  * Apply --retry-wait on 503 only
  * Ensure that lowest speed check is done even when download speed
    is 0
  * Document that -o is always relative to -d option
  * Allow larger ut_metadata size
  * mingw: Change FD_SETSIZE to 32768
  * Fix compile error on OS X
- Add aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Trim filler phrases from description.
  Explicitly add BR:pkgconfig so pkgconfigdeps.sh can autocreate
  pkgconfig() symbols.</changelog>
  <changelog author="mpluskal@suse.com" date="1471780800">- Update to version 1.26.0:
  * aria2mon: Replace client.call with local method
  * Reorder a note section in aria2c.rst
  * bash_completion: Add missing options which takes one of
    pre-defined values
  * Replace "/" with "-" in magnet dn name when used as in-memory
    download name
  * Fix Dockerfile.raspberrypi to correctly decompress expat
    archive
  * Enable ccache in travis-ci
  * Enable OSX/macOS build for travis
  * Better auto-renaming
  * Log number of items loaded from input file
  * Link external libraries to libaria2 with --enable-libaria2
  * Allow seconds for seed-time (fractional minutes)
- Drop no longer needed aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1472731200">- Update to version 1.26.1:
  * Make assertion hold</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Update to version 1.27.1:
  * Add missing libssl_compat.h to SRCS
- Changes for version 1.27.0:
  * Fix possible cause of crash if UDP tracker is used
  * Remove custom ftruncate64 for Android
  * The latest NDK versions support ftruncate64, so building a
    local copy of ftruncate64 is no longer needed.
  * Also, the arm and x86 builds of ftruncate64 failed when
    targeting API level 21 or higher, as they include which are not
    present starting from API level 21.
  * Fix typo found by Debian's Lintian
  * Add --save-not-found option
  * Compile with openssl 1.1.0</changelog>
  <changelog author="mpluskal@suse.com" date="1476792000">- Update to version 1.28.0:
  * Restore LTLIBINTL in src/Makefile.am
  * Add --keep-unfinished-download-result option
  * Fix -Wexpansion-to-defined warning with clang-3.9
  * Fix bug that file name is not logged with --conditional-get</changelog>
  <changelog author="mpluskal@suse.com" date="1479384000">- Update to version 1.29.0:
  * WinTLS: Fix busy loop on write error
  * Support 1xx non-final response
  * Update wslay
  * Don't download piece which is filtered out (e.g., --select-file)</changelog>
  <changelog author="mpluskal@suse.com" date="1481976000">- Update to version 1.30.0:
  * Fix bug that --disable-websocket causes build error
  * Fix bug that lower bound of optimize-concurrent-downloads becomes 1
  * Print DHT nodes with -S option
  * Take into account address family when resolving DHT node address
  * Allow block device file to -i option
  * Expand ${HOME} to user's home directory in several options
  * The following options implement this substitution:
  - -ca-certificate
  - --certificate
  - -dht-file-path
  - -dht-file-path6
  - --dir
  - -input-file
  - -load-cookies
  - -log
  - -metalink-file
  - -netrc-path
  - -on-bt-download-complete
  - -on-download-complete
  - -on-download-error
  - -on-download-start
  - -on-download-stop
  - -on-download_pause
  - -out
  - -private-key
  - -rpc-certificate
  - -rpc-private-key
  - -save-cookies
  - -save-session
  - -server-stat-if
  - -server-stat-of
  - -torrent-file
  * Document that libaria2 is not thread safe
- Fix typos in changelog</changelog>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="avindra@opensuse.org" date="1526558400">- Update to version 1.34.0
  * UnknownLengthPieceStorage: return piece length show something
    in console status when downloading items with unknown content length
  * Fix bug that signal handler does not work with libaria2 when
    aria2::RUN_ONCE is passed to aria2::run().
  * Retry on HTTP 502
- cleanup with spec-cleaner</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch
- Move bash completion to better location</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570536000">- Update to version 1.35.0
  * Drop SSLv3.0 and TLSv1.0 and add TLSv1.3
  * TLSv1.3 support is added for GNUTLS and OpenSSL.
  * Platform: Fix compilation without deprecated OpenSSL APIs
  * Remove linux getrandom and use C++ stdlib instead
  * Don't send Accept Metalink header if Metalink is disabled
- Drop no longer needed aria2-CVE-2019-3500.patch</changelog>
</package>
<package pkgid="ca577a543880993e8ff22c7a7db1615ca027c8cba124616aeb68bbb326e67228" name="aria2" arch="src">
  <version epoch="0" ver="1.36.0" rel="lp152.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="mpluskal@suse.com" date="1469448000">- Update to version 1.25.0:
  * Update third-party libraries for binary releases
  * Send have message without too much delay
  * Also send bitfield rather than have messages if bitfield
    message is equal to or less than the sum of have messages
    which otherwise would be sent.
  * Fix bug that causes bogus EOF connection failure in BitTorrent
    downloads
  * Fix frequent interested/not interested message transmission
  * Fix frequent choke/unchoke message transmission
  * Try to use available URI if all pooled requests are sleeping
  * Update expat in OSX build
  * aria2mon: Add --secret option
  * Set server status error on network failure in server
    performance profile
  * Disable AI_ADDRCONFIG if no IPv4/IPv6 address is configured for
    any interface
  * Russian manual: Update aria2c.rst
  * Apply --retry-wait on 503 only
  * Ensure that lowest speed check is done even when download speed
    is 0
  * Document that -o is always relative to -d option
  * Allow larger ut_metadata size
  * mingw: Change FD_SETSIZE to 32768
  * Fix compile error on OS X
- Add aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Trim filler phrases from description.
  Explicitly add BR:pkgconfig so pkgconfigdeps.sh can autocreate
  pkgconfig() symbols.</changelog>
  <changelog author="mpluskal@suse.com" date="1471780800">- Update to version 1.26.0:
  * aria2mon: Replace client.call with local method
  * Reorder a note section in aria2c.rst
  * bash_completion: Add missing options which takes one of
    pre-defined values
  * Replace "/" with "-" in magnet dn name when used as in-memory
    download name
  * Fix Dockerfile.raspberrypi to correctly decompress expat
    archive
  * Enable ccache in travis-ci
  * Enable OSX/macOS build for travis
  * Better auto-renaming
  * Log number of items loaded from input file
  * Link external libraries to libaria2 with --enable-libaria2
  * Allow seconds for seed-time (fractional minutes)
- Drop no longer needed aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1472731200">- Update to version 1.26.1:
  * Make assertion hold</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Update to version 1.27.1:
  * Add missing libssl_compat.h to SRCS
- Changes for version 1.27.0:
  * Fix possible cause of crash if UDP tracker is used
  * Remove custom ftruncate64 for Android
  * The latest NDK versions support ftruncate64, so building a
    local copy of ftruncate64 is no longer needed.
  * Also, the arm and x86 builds of ftruncate64 failed when
    targeting API level 21 or higher, as they include which are not
    present starting from API level 21.
  * Fix typo found by Debian's Lintian
  * Add --save-not-found option
  * Compile with openssl 1.1.0</changelog>
  <changelog author="mpluskal@suse.com" date="1476792000">- Update to version 1.28.0:
  * Restore LTLIBINTL in src/Makefile.am
  * Add --keep-unfinished-download-result option
  * Fix -Wexpansion-to-defined warning with clang-3.9
  * Fix bug that file name is not logged with --conditional-get</changelog>
  <changelog author="mpluskal@suse.com" date="1479384000">- Update to version 1.29.0:
  * WinTLS: Fix busy loop on write error
  * Support 1xx non-final response
  * Update wslay
  * Don't download piece which is filtered out (e.g., --select-file)</changelog>
  <changelog author="mpluskal@suse.com" date="1481976000">- Update to version 1.30.0:
  * Fix bug that --disable-websocket causes build error
  * Fix bug that lower bound of optimize-concurrent-downloads becomes 1
  * Print DHT nodes with -S option
  * Take into account address family when resolving DHT node address
  * Allow block device file to -i option
  * Expand ${HOME} to user's home directory in several options
  * The following options implement this substitution:
  - -ca-certificate
  - --certificate
  - -dht-file-path
  - -dht-file-path6
  - --dir
  - -input-file
  - -load-cookies
  - -log
  - -metalink-file
  - -netrc-path
  - -on-bt-download-complete
  - -on-download-complete
  - -on-download-error
  - -on-download-start
  - -on-download-stop
  - -on-download_pause
  - -out
  - -private-key
  - -rpc-certificate
  - -rpc-private-key
  - -save-cookies
  - -save-session
  - -server-stat-if
  - -server-stat-of
  - -torrent-file
  * Document that libaria2 is not thread safe
- Fix typos in changelog</changelog>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="avindra@opensuse.org" date="1526558400">- Update to version 1.34.0
  * UnknownLengthPieceStorage: return piece length show something
    in console status when downloading items with unknown content length
  * Fix bug that signal handler does not work with libaria2 when
    aria2::RUN_ONCE is passed to aria2::run().
  * Retry on HTTP 502
- cleanup with spec-cleaner</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch
- Move bash completion to better location</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570536000">- Update to version 1.35.0
  * Drop SSLv3.0 and TLSv1.0 and add TLSv1.3
  * TLSv1.3 support is added for GNUTLS and OpenSSL.
  * Platform: Fix compilation without deprecated OpenSSL APIs
  * Remove linux getrandom and use C++ stdlib instead
  * Don't send Accept Metalink header if Metalink is disabled
- Drop no longer needed aria2-CVE-2019-3500.patch</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1631534400">- Update to version 1.36.0
  * Update wslay
  * Fix segfault when time_t is 64bit on 32bit arch
  * Updates the make_bash_completion script to Python3
  * Prevent corrupt downloads after app and/or system crash
  * Reset sessionDownloadLength and sessionUploadLength on download start</changelog>
</package>
<package pkgid="05ba5df8f4084ce0df695d9b9d0b2c7ad38e52f28296501c6d1cf1d86d1b52bb" name="aria2" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp152.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="mpluskal@suse.com" date="1469448000">- Update to version 1.25.0:
  * Update third-party libraries for binary releases
  * Send have message without too much delay
  * Also send bitfield rather than have messages if bitfield
    message is equal to or less than the sum of have messages
    which otherwise would be sent.
  * Fix bug that causes bogus EOF connection failure in BitTorrent
    downloads
  * Fix frequent interested/not interested message transmission
  * Fix frequent choke/unchoke message transmission
  * Try to use available URI if all pooled requests are sleeping
  * Update expat in OSX build
  * aria2mon: Add --secret option
  * Set server status error on network failure in server
    performance profile
  * Disable AI_ADDRCONFIG if no IPv4/IPv6 address is configured for
    any interface
  * Russian manual: Update aria2c.rst
  * Apply --retry-wait on 503 only
  * Ensure that lowest speed check is done even when download speed
    is 0
  * Document that -o is always relative to -d option
  * Allow larger ut_metadata size
  * mingw: Change FD_SETSIZE to 32768
  * Fix compile error on OS X
- Add aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Trim filler phrases from description.
  Explicitly add BR:pkgconfig so pkgconfigdeps.sh can autocreate
  pkgconfig() symbols.</changelog>
  <changelog author="mpluskal@suse.com" date="1471780800">- Update to version 1.26.0:
  * aria2mon: Replace client.call with local method
  * Reorder a note section in aria2c.rst
  * bash_completion: Add missing options which takes one of
    pre-defined values
  * Replace "/" with "-" in magnet dn name when used as in-memory
    download name
  * Fix Dockerfile.raspberrypi to correctly decompress expat
    archive
  * Enable ccache in travis-ci
  * Enable OSX/macOS build for travis
  * Better auto-renaming
  * Log number of items loaded from input file
  * Link external libraries to libaria2 with --enable-libaria2
  * Allow seconds for seed-time (fractional minutes)
- Drop no longer needed aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1472731200">- Update to version 1.26.1:
  * Make assertion hold</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Update to version 1.27.1:
  * Add missing libssl_compat.h to SRCS
- Changes for version 1.27.0:
  * Fix possible cause of crash if UDP tracker is used
  * Remove custom ftruncate64 for Android
  * The latest NDK versions support ftruncate64, so building a
    local copy of ftruncate64 is no longer needed.
  * Also, the arm and x86 builds of ftruncate64 failed when
    targeting API level 21 or higher, as they include which are not
    present starting from API level 21.
  * Fix typo found by Debian's Lintian
  * Add --save-not-found option
  * Compile with openssl 1.1.0</changelog>
  <changelog author="mpluskal@suse.com" date="1476792000">- Update to version 1.28.0:
  * Restore LTLIBINTL in src/Makefile.am
  * Add --keep-unfinished-download-result option
  * Fix -Wexpansion-to-defined warning with clang-3.9
  * Fix bug that file name is not logged with --conditional-get</changelog>
  <changelog author="mpluskal@suse.com" date="1479384000">- Update to version 1.29.0:
  * WinTLS: Fix busy loop on write error
  * Support 1xx non-final response
  * Update wslay
  * Don't download piece which is filtered out (e.g., --select-file)</changelog>
  <changelog author="mpluskal@suse.com" date="1481976000">- Update to version 1.30.0:
  * Fix bug that --disable-websocket causes build error
  * Fix bug that lower bound of optimize-concurrent-downloads becomes 1
  * Print DHT nodes with -S option
  * Take into account address family when resolving DHT node address
  * Allow block device file to -i option
  * Expand ${HOME} to user's home directory in several options
  * The following options implement this substitution:
  - -ca-certificate
  - --certificate
  - -dht-file-path
  - -dht-file-path6
  - --dir
  - -input-file
  - -load-cookies
  - -log
  - -metalink-file
  - -netrc-path
  - -on-bt-download-complete
  - -on-download-complete
  - -on-download-error
  - -on-download-start
  - -on-download-stop
  - -on-download_pause
  - -out
  - -private-key
  - -rpc-certificate
  - -rpc-private-key
  - -save-cookies
  - -save-session
  - -server-stat-if
  - -server-stat-of
  - -torrent-file
  * Document that libaria2 is not thread safe
- Fix typos in changelog</changelog>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="avindra@opensuse.org" date="1526558400">- Update to version 1.34.0
  * UnknownLengthPieceStorage: return piece length show something
    in console status when downloading items with unknown content length
  * Fix bug that signal handler does not work with libaria2 when
    aria2::RUN_ONCE is passed to aria2::run().
  * Retry on HTTP 502
- cleanup with spec-cleaner</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch
- Move bash completion to better location</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570536000">- Update to version 1.35.0
  * Drop SSLv3.0 and TLSv1.0 and add TLSv1.3
  * TLSv1.3 support is added for GNUTLS and OpenSSL.
  * Platform: Fix compilation without deprecated OpenSSL APIs
  * Remove linux getrandom and use C++ stdlib instead
  * Don't send Accept Metalink header if Metalink is disabled
- Drop no longer needed aria2-CVE-2019-3500.patch</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1631534400">- Update to version 1.36.0
  * Update wslay
  * Fix segfault when time_t is 64bit on 32bit arch
  * Updates the make_bash_completion script to Python3
  * Prevent corrupt downloads after app and/or system crash
  * Reset sessionDownloadLength and sessionUploadLength on download start</changelog>
</package>
<package pkgid="cfc0adb8bd04853143294c1b8bcbca8bb35549118fc41b182924db41f9dcbad5" name="aria2-devel" arch="x86_64">
  <version epoch="0" ver="1.35.0" rel="lp152.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 1.21.0
  * SessionSerializer: Fix bug that pause=true is added to wrong
    item
  * Add "following" to aria2.tellStatus response key as reverse
    link for followedBy
  * mingw: Add warning for falloc
  * Update ciphers in AppleTLS
  * OSX: Enable libssh2 and sftp
  * Update OSX dependencies
  * Fix compile error without TLS support
  * Add support for using gnutls system wide crypto policy
- Update project url</changelog>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="mpluskal@suse.com" date="1469448000">- Update to version 1.25.0:
  * Update third-party libraries for binary releases
  * Send have message without too much delay
  * Also send bitfield rather than have messages if bitfield
    message is equal to or less than the sum of have messages
    which otherwise would be sent.
  * Fix bug that causes bogus EOF connection failure in BitTorrent
    downloads
  * Fix frequent interested/not interested message transmission
  * Fix frequent choke/unchoke message transmission
  * Try to use available URI if all pooled requests are sleeping
  * Update expat in OSX build
  * aria2mon: Add --secret option
  * Set server status error on network failure in server
    performance profile
  * Disable AI_ADDRCONFIG if no IPv4/IPv6 address is configured for
    any interface
  * Russian manual: Update aria2c.rst
  * Apply --retry-wait on 503 only
  * Ensure that lowest speed check is done even when download speed
    is 0
  * Document that -o is always relative to -d option
  * Allow larger ut_metadata size
  * mingw: Change FD_SETSIZE to 32768
  * Fix compile error on OS X
- Add aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Trim filler phrases from description.
  Explicitly add BR:pkgconfig so pkgconfigdeps.sh can autocreate
  pkgconfig() symbols.</changelog>
  <changelog author="mpluskal@suse.com" date="1471780800">- Update to version 1.26.0:
  * aria2mon: Replace client.call with local method
  * Reorder a note section in aria2c.rst
  * bash_completion: Add missing options which takes one of
    pre-defined values
  * Replace "/" with "-" in magnet dn name when used as in-memory
    download name
  * Fix Dockerfile.raspberrypi to correctly decompress expat
    archive
  * Enable ccache in travis-ci
  * Enable OSX/macOS build for travis
  * Better auto-renaming
  * Log number of items loaded from input file
  * Link external libraries to libaria2 with --enable-libaria2
  * Allow seconds for seed-time (fractional minutes)
- Drop no longer needed aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1472731200">- Update to version 1.26.1:
  * Make assertion hold</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Update to version 1.27.1:
  * Add missing libssl_compat.h to SRCS
- Changes for version 1.27.0:
  * Fix possible cause of crash if UDP tracker is used
  * Remove custom ftruncate64 for Android
  * The latest NDK versions support ftruncate64, so building a
    local copy of ftruncate64 is no longer needed.
  * Also, the arm and x86 builds of ftruncate64 failed when
    targeting API level 21 or higher, as they include which are not
    present starting from API level 21.
  * Fix typo found by Debian's Lintian
  * Add --save-not-found option
  * Compile with openssl 1.1.0</changelog>
  <changelog author="mpluskal@suse.com" date="1476792000">- Update to version 1.28.0:
  * Restore LTLIBINTL in src/Makefile.am
  * Add --keep-unfinished-download-result option
  * Fix -Wexpansion-to-defined warning with clang-3.9
  * Fix bug that file name is not logged with --conditional-get</changelog>
  <changelog author="mpluskal@suse.com" date="1479384000">- Update to version 1.29.0:
  * WinTLS: Fix busy loop on write error
  * Support 1xx non-final response
  * Update wslay
  * Don't download piece which is filtered out (e.g., --select-file)</changelog>
  <changelog author="mpluskal@suse.com" date="1481976000">- Update to version 1.30.0:
  * Fix bug that --disable-websocket causes build error
  * Fix bug that lower bound of optimize-concurrent-downloads becomes 1
  * Print DHT nodes with -S option
  * Take into account address family when resolving DHT node address
  * Allow block device file to -i option
  * Expand ${HOME} to user's home directory in several options
  * The following options implement this substitution:
  - -ca-certificate
  - --certificate
  - -dht-file-path
  - -dht-file-path6
  - --dir
  - -input-file
  - -load-cookies
  - -log
  - -metalink-file
  - -netrc-path
  - -on-bt-download-complete
  - -on-download-complete
  - -on-download-error
  - -on-download-start
  - -on-download-stop
  - -on-download_pause
  - -out
  - -private-key
  - -rpc-certificate
  - -rpc-private-key
  - -save-cookies
  - -save-session
  - -server-stat-if
  - -server-stat-of
  - -torrent-file
  * Document that libaria2 is not thread safe
- Fix typos in changelog</changelog>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="avindra@opensuse.org" date="1526558400">- Update to version 1.34.0
  * UnknownLengthPieceStorage: return piece length show something
    in console status when downloading items with unknown content length
  * Fix bug that signal handler does not work with libaria2 when
    aria2::RUN_ONCE is passed to aria2::run().
  * Retry on HTTP 502
- cleanup with spec-cleaner</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch
- Move bash completion to better location</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570536000">- Update to version 1.35.0
  * Drop SSLv3.0 and TLSv1.0 and add TLSv1.3
  * TLSv1.3 support is added for GNUTLS and OpenSSL.
  * Platform: Fix compilation without deprecated OpenSSL APIs
  * Remove linux getrandom and use C++ stdlib instead
  * Don't send Accept Metalink header if Metalink is disabled
- Drop no longer needed aria2-CVE-2019-3500.patch</changelog>
</package>
<package pkgid="219fe21d6fa14e516eab17f009370e3753323eb7894c7c3fd1cdfc9c7e02b499" name="aria2-devel" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp152.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="mpluskal@suse.com" date="1469448000">- Update to version 1.25.0:
  * Update third-party libraries for binary releases
  * Send have message without too much delay
  * Also send bitfield rather than have messages if bitfield
    message is equal to or less than the sum of have messages
    which otherwise would be sent.
  * Fix bug that causes bogus EOF connection failure in BitTorrent
    downloads
  * Fix frequent interested/not interested message transmission
  * Fix frequent choke/unchoke message transmission
  * Try to use available URI if all pooled requests are sleeping
  * Update expat in OSX build
  * aria2mon: Add --secret option
  * Set server status error on network failure in server
    performance profile
  * Disable AI_ADDRCONFIG if no IPv4/IPv6 address is configured for
    any interface
  * Russian manual: Update aria2c.rst
  * Apply --retry-wait on 503 only
  * Ensure that lowest speed check is done even when download speed
    is 0
  * Document that -o is always relative to -d option
  * Allow larger ut_metadata size
  * mingw: Change FD_SETSIZE to 32768
  * Fix compile error on OS X
- Add aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Trim filler phrases from description.
  Explicitly add BR:pkgconfig so pkgconfigdeps.sh can autocreate
  pkgconfig() symbols.</changelog>
  <changelog author="mpluskal@suse.com" date="1471780800">- Update to version 1.26.0:
  * aria2mon: Replace client.call with local method
  * Reorder a note section in aria2c.rst
  * bash_completion: Add missing options which takes one of
    pre-defined values
  * Replace "/" with "-" in magnet dn name when used as in-memory
    download name
  * Fix Dockerfile.raspberrypi to correctly decompress expat
    archive
  * Enable ccache in travis-ci
  * Enable OSX/macOS build for travis
  * Better auto-renaming
  * Log number of items loaded from input file
  * Link external libraries to libaria2 with --enable-libaria2
  * Allow seconds for seed-time (fractional minutes)
- Drop no longer needed aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1472731200">- Update to version 1.26.1:
  * Make assertion hold</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Update to version 1.27.1:
  * Add missing libssl_compat.h to SRCS
- Changes for version 1.27.0:
  * Fix possible cause of crash if UDP tracker is used
  * Remove custom ftruncate64 for Android
  * The latest NDK versions support ftruncate64, so building a
    local copy of ftruncate64 is no longer needed.
  * Also, the arm and x86 builds of ftruncate64 failed when
    targeting API level 21 or higher, as they include which are not
    present starting from API level 21.
  * Fix typo found by Debian's Lintian
  * Add --save-not-found option
  * Compile with openssl 1.1.0</changelog>
  <changelog author="mpluskal@suse.com" date="1476792000">- Update to version 1.28.0:
  * Restore LTLIBINTL in src/Makefile.am
  * Add --keep-unfinished-download-result option
  * Fix -Wexpansion-to-defined warning with clang-3.9
  * Fix bug that file name is not logged with --conditional-get</changelog>
  <changelog author="mpluskal@suse.com" date="1479384000">- Update to version 1.29.0:
  * WinTLS: Fix busy loop on write error
  * Support 1xx non-final response
  * Update wslay
  * Don't download piece which is filtered out (e.g., --select-file)</changelog>
  <changelog author="mpluskal@suse.com" date="1481976000">- Update to version 1.30.0:
  * Fix bug that --disable-websocket causes build error
  * Fix bug that lower bound of optimize-concurrent-downloads becomes 1
  * Print DHT nodes with -S option
  * Take into account address family when resolving DHT node address
  * Allow block device file to -i option
  * Expand ${HOME} to user's home directory in several options
  * The following options implement this substitution:
  - -ca-certificate
  - --certificate
  - -dht-file-path
  - -dht-file-path6
  - --dir
  - -input-file
  - -load-cookies
  - -log
  - -metalink-file
  - -netrc-path
  - -on-bt-download-complete
  - -on-download-complete
  - -on-download-error
  - -on-download-start
  - -on-download-stop
  - -on-download_pause
  - -out
  - -private-key
  - -rpc-certificate
  - -rpc-private-key
  - -save-cookies
  - -save-session
  - -server-stat-if
  - -server-stat-of
  - -torrent-file
  * Document that libaria2 is not thread safe
- Fix typos in changelog</changelog>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="avindra@opensuse.org" date="1526558400">- Update to version 1.34.0
  * UnknownLengthPieceStorage: return piece length show something
    in console status when downloading items with unknown content length
  * Fix bug that signal handler does not work with libaria2 when
    aria2::RUN_ONCE is passed to aria2::run().
  * Retry on HTTP 502
- cleanup with spec-cleaner</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch
- Move bash completion to better location</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570536000">- Update to version 1.35.0
  * Drop SSLv3.0 and TLSv1.0 and add TLSv1.3
  * TLSv1.3 support is added for GNUTLS and OpenSSL.
  * Platform: Fix compilation without deprecated OpenSSL APIs
  * Remove linux getrandom and use C++ stdlib instead
  * Don't send Accept Metalink header if Metalink is disabled
- Drop no longer needed aria2-CVE-2019-3500.patch</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1631534400">- Update to version 1.36.0
  * Update wslay
  * Fix segfault when time_t is 64bit on 32bit arch
  * Updates the make_bash_completion script to Python3
  * Prevent corrupt downloads after app and/or system crash
  * Reset sessionDownloadLength and sessionUploadLength on download start</changelog>
</package>
<package pkgid="defbf8d70dc6485ac955865a318863c94cdd9788eaec14b9d92ef6eb247ad097" name="aria2-lang" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="lp152.5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 1.21.0
  * SessionSerializer: Fix bug that pause=true is added to wrong
    item
  * Add "following" to aria2.tellStatus response key as reverse
    link for followedBy
  * mingw: Add warning for falloc
  * Update ciphers in AppleTLS
  * OSX: Enable libssh2 and sftp
  * Update OSX dependencies
  * Fix compile error without TLS support
  * Add support for using gnutls system wide crypto policy
- Update project url</changelog>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="mpluskal@suse.com" date="1469448000">- Update to version 1.25.0:
  * Update third-party libraries for binary releases
  * Send have message without too much delay
  * Also send bitfield rather than have messages if bitfield
    message is equal to or less than the sum of have messages
    which otherwise would be sent.
  * Fix bug that causes bogus EOF connection failure in BitTorrent
    downloads
  * Fix frequent interested/not interested message transmission
  * Fix frequent choke/unchoke message transmission
  * Try to use available URI if all pooled requests are sleeping
  * Update expat in OSX build
  * aria2mon: Add --secret option
  * Set server status error on network failure in server
    performance profile
  * Disable AI_ADDRCONFIG if no IPv4/IPv6 address is configured for
    any interface
  * Russian manual: Update aria2c.rst
  * Apply --retry-wait on 503 only
  * Ensure that lowest speed check is done even when download speed
    is 0
  * Document that -o is always relative to -d option
  * Allow larger ut_metadata size
  * mingw: Change FD_SETSIZE to 32768
  * Fix compile error on OS X
- Add aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Trim filler phrases from description.
  Explicitly add BR:pkgconfig so pkgconfigdeps.sh can autocreate
  pkgconfig() symbols.</changelog>
  <changelog author="mpluskal@suse.com" date="1471780800">- Update to version 1.26.0:
  * aria2mon: Replace client.call with local method
  * Reorder a note section in aria2c.rst
  * bash_completion: Add missing options which takes one of
    pre-defined values
  * Replace "/" with "-" in magnet dn name when used as in-memory
    download name
  * Fix Dockerfile.raspberrypi to correctly decompress expat
    archive
  * Enable ccache in travis-ci
  * Enable OSX/macOS build for travis
  * Better auto-renaming
  * Log number of items loaded from input file
  * Link external libraries to libaria2 with --enable-libaria2
  * Allow seconds for seed-time (fractional minutes)
- Drop no longer needed aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1472731200">- Update to version 1.26.1:
  * Make assertion hold</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Update to version 1.27.1:
  * Add missing libssl_compat.h to SRCS
- Changes for version 1.27.0:
  * Fix possible cause of crash if UDP tracker is used
  * Remove custom ftruncate64 for Android
  * The latest NDK versions support ftruncate64, so building a
    local copy of ftruncate64 is no longer needed.
  * Also, the arm and x86 builds of ftruncate64 failed when
    targeting API level 21 or higher, as they include which are not
    present starting from API level 21.
  * Fix typo found by Debian's Lintian
  * Add --save-not-found option
  * Compile with openssl 1.1.0</changelog>
  <changelog author="mpluskal@suse.com" date="1476792000">- Update to version 1.28.0:
  * Restore LTLIBINTL in src/Makefile.am
  * Add --keep-unfinished-download-result option
  * Fix -Wexpansion-to-defined warning with clang-3.9
  * Fix bug that file name is not logged with --conditional-get</changelog>
  <changelog author="mpluskal@suse.com" date="1479384000">- Update to version 1.29.0:
  * WinTLS: Fix busy loop on write error
  * Support 1xx non-final response
  * Update wslay
  * Don't download piece which is filtered out (e.g., --select-file)</changelog>
  <changelog author="mpluskal@suse.com" date="1481976000">- Update to version 1.30.0:
  * Fix bug that --disable-websocket causes build error
  * Fix bug that lower bound of optimize-concurrent-downloads becomes 1
  * Print DHT nodes with -S option
  * Take into account address family when resolving DHT node address
  * Allow block device file to -i option
  * Expand ${HOME} to user's home directory in several options
  * The following options implement this substitution:
  - -ca-certificate
  - --certificate
  - -dht-file-path
  - -dht-file-path6
  - --dir
  - -input-file
  - -load-cookies
  - -log
  - -metalink-file
  - -netrc-path
  - -on-bt-download-complete
  - -on-download-complete
  - -on-download-error
  - -on-download-start
  - -on-download-stop
  - -on-download_pause
  - -out
  - -private-key
  - -rpc-certificate
  - -rpc-private-key
  - -save-cookies
  - -save-session
  - -server-stat-if
  - -server-stat-of
  - -torrent-file
  * Document that libaria2 is not thread safe
- Fix typos in changelog</changelog>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="avindra@opensuse.org" date="1526558400">- Update to version 1.34.0
  * UnknownLengthPieceStorage: return piece length show something
    in console status when downloading items with unknown content length
  * Fix bug that signal handler does not work with libaria2 when
    aria2::RUN_ONCE is passed to aria2::run().
  * Retry on HTTP 502
- cleanup with spec-cleaner</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch
- Move bash completion to better location</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570536000">- Update to version 1.35.0
  * Drop SSLv3.0 and TLSv1.0 and add TLSv1.3
  * TLSv1.3 support is added for GNUTLS and OpenSSL.
  * Platform: Fix compilation without deprecated OpenSSL APIs
  * Remove linux getrandom and use C++ stdlib instead
  * Don't send Accept Metalink header if Metalink is disabled
- Drop no longer needed aria2-CVE-2019-3500.patch</changelog>
</package>
<package pkgid="640316fdf85f26e290583d1082bb4993d5299aa5f88da229f89cc2ae2112f8ba" name="aria2-lang" arch="noarch">
  <version epoch="0" ver="1.36.0" rel="lp152.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="mpluskal@suse.com" date="1469448000">- Update to version 1.25.0:
  * Update third-party libraries for binary releases
  * Send have message without too much delay
  * Also send bitfield rather than have messages if bitfield
    message is equal to or less than the sum of have messages
    which otherwise would be sent.
  * Fix bug that causes bogus EOF connection failure in BitTorrent
    downloads
  * Fix frequent interested/not interested message transmission
  * Fix frequent choke/unchoke message transmission
  * Try to use available URI if all pooled requests are sleeping
  * Update expat in OSX build
  * aria2mon: Add --secret option
  * Set server status error on network failure in server
    performance profile
  * Disable AI_ADDRCONFIG if no IPv4/IPv6 address is configured for
    any interface
  * Russian manual: Update aria2c.rst
  * Apply --retry-wait on 503 only
  * Ensure that lowest speed check is done even when download speed
    is 0
  * Document that -o is always relative to -d option
  * Allow larger ut_metadata size
  * mingw: Change FD_SETSIZE to 32768
  * Fix compile error on OS X
- Add aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Trim filler phrases from description.
  Explicitly add BR:pkgconfig so pkgconfigdeps.sh can autocreate
  pkgconfig() symbols.</changelog>
  <changelog author="mpluskal@suse.com" date="1471780800">- Update to version 1.26.0:
  * aria2mon: Replace client.call with local method
  * Reorder a note section in aria2c.rst
  * bash_completion: Add missing options which takes one of
    pre-defined values
  * Replace "/" with "-" in magnet dn name when used as in-memory
    download name
  * Fix Dockerfile.raspberrypi to correctly decompress expat
    archive
  * Enable ccache in travis-ci
  * Enable OSX/macOS build for travis
  * Better auto-renaming
  * Log number of items loaded from input file
  * Link external libraries to libaria2 with --enable-libaria2
  * Allow seconds for seed-time (fractional minutes)
- Drop no longer needed aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1472731200">- Update to version 1.26.1:
  * Make assertion hold</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Update to version 1.27.1:
  * Add missing libssl_compat.h to SRCS
- Changes for version 1.27.0:
  * Fix possible cause of crash if UDP tracker is used
  * Remove custom ftruncate64 for Android
  * The latest NDK versions support ftruncate64, so building a
    local copy of ftruncate64 is no longer needed.
  * Also, the arm and x86 builds of ftruncate64 failed when
    targeting API level 21 or higher, as they include which are not
    present starting from API level 21.
  * Fix typo found by Debian's Lintian
  * Add --save-not-found option
  * Compile with openssl 1.1.0</changelog>
  <changelog author="mpluskal@suse.com" date="1476792000">- Update to version 1.28.0:
  * Restore LTLIBINTL in src/Makefile.am
  * Add --keep-unfinished-download-result option
  * Fix -Wexpansion-to-defined warning with clang-3.9
  * Fix bug that file name is not logged with --conditional-get</changelog>
  <changelog author="mpluskal@suse.com" date="1479384000">- Update to version 1.29.0:
  * WinTLS: Fix busy loop on write error
  * Support 1xx non-final response
  * Update wslay
  * Don't download piece which is filtered out (e.g., --select-file)</changelog>
  <changelog author="mpluskal@suse.com" date="1481976000">- Update to version 1.30.0:
  * Fix bug that --disable-websocket causes build error
  * Fix bug that lower bound of optimize-concurrent-downloads becomes 1
  * Print DHT nodes with -S option
  * Take into account address family when resolving DHT node address
  * Allow block device file to -i option
  * Expand ${HOME} to user's home directory in several options
  * The following options implement this substitution:
  - -ca-certificate
  - --certificate
  - -dht-file-path
  - -dht-file-path6
  - --dir
  - -input-file
  - -load-cookies
  - -log
  - -metalink-file
  - -netrc-path
  - -on-bt-download-complete
  - -on-download-complete
  - -on-download-error
  - -on-download-start
  - -on-download-stop
  - -on-download_pause
  - -out
  - -private-key
  - -rpc-certificate
  - -rpc-private-key
  - -save-cookies
  - -save-session
  - -server-stat-if
  - -server-stat-of
  - -torrent-file
  * Document that libaria2 is not thread safe
- Fix typos in changelog</changelog>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="avindra@opensuse.org" date="1526558400">- Update to version 1.34.0
  * UnknownLengthPieceStorage: return piece length show something
    in console status when downloading items with unknown content length
  * Fix bug that signal handler does not work with libaria2 when
    aria2::RUN_ONCE is passed to aria2::run().
  * Retry on HTTP 502
- cleanup with spec-cleaner</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch
- Move bash completion to better location</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570536000">- Update to version 1.35.0
  * Drop SSLv3.0 and TLSv1.0 and add TLSv1.3
  * TLSv1.3 support is added for GNUTLS and OpenSSL.
  * Platform: Fix compilation without deprecated OpenSSL APIs
  * Remove linux getrandom and use C++ stdlib instead
  * Don't send Accept Metalink header if Metalink is disabled
- Drop no longer needed aria2-CVE-2019-3500.patch</changelog>
  <changelog author="Enrico Belleri &lt;idesmi@protonmail.com&gt;" date="1631534400">- Update to version 1.36.0
  * Update wslay
  * Fix segfault when time_t is 64bit on 32bit arch
  * Updates the make_bash_completion script to Python3
  * Prevent corrupt downloads after app and/or system crash
  * Reset sessionDownloadLength and sessionUploadLength on download start</changelog>
</package>
<package pkgid="a76591c4d9154e0a605192f3ce178180173f6661d154c856a2d202ee43148311" name="ark" arch="src">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563451200">- Use kf5_debugdir macro for specifying the logging categories location</changelog>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Add missing include
  * Remove unused includes
  * Fix ECM version comparison
  * Install in new logging directory when we use kf5 5.59.0
  * Fix forward declaration
  * ReadWriteLibarchivePlugin: always return false if jobs are killed
  * Part: reset UI after aborting creation of new archives
  * ReadWriteLibarchivePlugin: call archive_write_fail on fail
  * Simplify kill logic
  * Part: call updateWithDefaults() instead of setting an invalid index
  * ReadWriteLibarchivePlugin: stop calling QSaveFile::commit() on fail
  * ReadWriteLibarchivePlugin: bring back an old TODO
  * Promote m_operationMode as protected member of ReadWriteArchiveInterface
  * CMake: use proper construct to compare versions
  * Make it compile without foreach
  * clirar: Use switch-case instead of if-else
  * ReadWriteLibarchivePlugin: simplify error check
  * ReadWriteLibarchivePlugin: move declaration near to usage
  * ReadWriteLibarchivePlugin: rename variable
  * ReadWriteLibarchivePlugin: remove stale comment
  * BatchExtract: improve error reporting when a job fails</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Fix build with cmake &lt; 3.7</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * fall back to nummerical owner and group if no text representation exists</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Prevent drops from non-local URLs (kde#409835)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.
- Remove outdated minimum versions in spec</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Drop ark.cliexample debug category
  * Update HACKING file
  * Translate MIME type description</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.
- Add patch to allow building with libarchive 3.3.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch
- Dropped patches for obsolete distribution versions:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Forward errors from archive interface when batch-extracting
  * libzip: Enable progress when batch-extracting</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * libarchive: Improve error-handling when loading archive</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
</package>
<package pkgid="51ac1959a782fadd8002a106b5bb09dfd72f585a8d0795c2c68aae7292dc1d86" name="ark" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563451200">- Use kf5_debugdir macro for specifying the logging categories location</changelog>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Add missing include
  * Remove unused includes
  * Fix ECM version comparison
  * Install in new logging directory when we use kf5 5.59.0
  * Fix forward declaration
  * ReadWriteLibarchivePlugin: always return false if jobs are killed
  * Part: reset UI after aborting creation of new archives
  * ReadWriteLibarchivePlugin: call archive_write_fail on fail
  * Simplify kill logic
  * Part: call updateWithDefaults() instead of setting an invalid index
  * ReadWriteLibarchivePlugin: stop calling QSaveFile::commit() on fail
  * ReadWriteLibarchivePlugin: bring back an old TODO
  * Promote m_operationMode as protected member of ReadWriteArchiveInterface
  * CMake: use proper construct to compare versions
  * Make it compile without foreach
  * clirar: Use switch-case instead of if-else
  * ReadWriteLibarchivePlugin: simplify error check
  * ReadWriteLibarchivePlugin: move declaration near to usage
  * ReadWriteLibarchivePlugin: rename variable
  * ReadWriteLibarchivePlugin: remove stale comment
  * BatchExtract: improve error reporting when a job fails</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Fix build with cmake &lt; 3.7</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * fall back to nummerical owner and group if no text representation exists</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Prevent drops from non-local URLs (kde#409835)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.
- Remove outdated minimum versions in spec</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Drop ark.cliexample debug category
  * Update HACKING file
  * Translate MIME type description</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.
- Add patch to allow building with libarchive 3.3.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch
- Dropped patches for obsolete distribution versions:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Forward errors from archive interface when batch-extracting
  * libzip: Enable progress when batch-extracting</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * libarchive: Improve error-handling when loading archive</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
</package>
<package pkgid="a62cc95017d0cb1231abda17b06ffc394bb249f8e668ce6b8e31c45e90a782ff" name="ark" arch="src">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Add missing include
  * Remove unused includes
  * Fix ECM version comparison
  * Install in new logging directory when we use kf5 5.59.0
  * Fix forward declaration
  * ReadWriteLibarchivePlugin: always return false if jobs are killed
  * Part: reset UI after aborting creation of new archives
  * ReadWriteLibarchivePlugin: call archive_write_fail on fail
  * Simplify kill logic
  * Part: call updateWithDefaults() instead of setting an invalid index
  * ReadWriteLibarchivePlugin: stop calling QSaveFile::commit() on fail
  * ReadWriteLibarchivePlugin: bring back an old TODO
  * Promote m_operationMode as protected member of ReadWriteArchiveInterface
  * CMake: use proper construct to compare versions
  * Make it compile without foreach
  * clirar: Use switch-case instead of if-else
  * ReadWriteLibarchivePlugin: simplify error check
  * ReadWriteLibarchivePlugin: move declaration near to usage
  * ReadWriteLibarchivePlugin: rename variable
  * ReadWriteLibarchivePlugin: remove stale comment
  * BatchExtract: improve error reporting when a job fails</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Fix build with cmake &lt; 3.7</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * fall back to nummerical owner and group if no text representation exists</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Prevent drops from non-local URLs (kde#409835)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.
- Remove outdated minimum versions in spec</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Drop ark.cliexample debug category
  * Update HACKING file
  * Translate MIME type description</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.
- Add patch to allow building with libarchive 3.3.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch
- Dropped patches for obsolete distribution versions:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Forward errors from archive interface when batch-extracting
  * libzip: Enable progress when batch-extracting</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * libarchive: Improve error-handling when loading archive</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1598529600">- Add patch to prevent path traversal (boo#1175857, CVE-2020-24654):
  * 0001-Pass-the-ARCHIVE_EXTRACT_SECURE_SYMLINKS-flag-to-lib.patch</changelog>
</package>
<package pkgid="518a3cdfcee82e1985d04067af11e7f8b1c92cac353be796d8921729ad9b79ac" name="ark" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Add missing include
  * Remove unused includes
  * Fix ECM version comparison
  * Install in new logging directory when we use kf5 5.59.0
  * Fix forward declaration
  * ReadWriteLibarchivePlugin: always return false if jobs are killed
  * Part: reset UI after aborting creation of new archives
  * ReadWriteLibarchivePlugin: call archive_write_fail on fail
  * Simplify kill logic
  * Part: call updateWithDefaults() instead of setting an invalid index
  * ReadWriteLibarchivePlugin: stop calling QSaveFile::commit() on fail
  * ReadWriteLibarchivePlugin: bring back an old TODO
  * Promote m_operationMode as protected member of ReadWriteArchiveInterface
  * CMake: use proper construct to compare versions
  * Make it compile without foreach
  * clirar: Use switch-case instead of if-else
  * ReadWriteLibarchivePlugin: simplify error check
  * ReadWriteLibarchivePlugin: move declaration near to usage
  * ReadWriteLibarchivePlugin: rename variable
  * ReadWriteLibarchivePlugin: remove stale comment
  * BatchExtract: improve error reporting when a job fails</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Fix build with cmake &lt; 3.7</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * fall back to nummerical owner and group if no text representation exists</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Prevent drops from non-local URLs (kde#409835)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.
- Remove outdated minimum versions in spec</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Drop ark.cliexample debug category
  * Update HACKING file
  * Translate MIME type description</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.
- Add patch to allow building with libarchive 3.3.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch
- Dropped patches for obsolete distribution versions:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Forward errors from archive interface when batch-extracting
  * libzip: Enable progress when batch-extracting</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * libarchive: Improve error-handling when loading archive</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1598529600">- Add patch to prevent path traversal (boo#1175857, CVE-2020-24654):
  * 0001-Pass-the-ARCHIVE_EXTRACT_SECURE_SYMLINKS-flag-to-lib.patch</changelog>
</package>
<package pkgid="6c9fe4ac76d1a380efcb75a6b898b5c34c75fdb29e2ee467ce31adbe72420bcc" name="ark-lang" arch="noarch">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563451200">- Use kf5_debugdir macro for specifying the logging categories location</changelog>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Add missing include
  * Remove unused includes
  * Fix ECM version comparison
  * Install in new logging directory when we use kf5 5.59.0
  * Fix forward declaration
  * ReadWriteLibarchivePlugin: always return false if jobs are killed
  * Part: reset UI after aborting creation of new archives
  * ReadWriteLibarchivePlugin: call archive_write_fail on fail
  * Simplify kill logic
  * Part: call updateWithDefaults() instead of setting an invalid index
  * ReadWriteLibarchivePlugin: stop calling QSaveFile::commit() on fail
  * ReadWriteLibarchivePlugin: bring back an old TODO
  * Promote m_operationMode as protected member of ReadWriteArchiveInterface
  * CMake: use proper construct to compare versions
  * Make it compile without foreach
  * clirar: Use switch-case instead of if-else
  * ReadWriteLibarchivePlugin: simplify error check
  * ReadWriteLibarchivePlugin: move declaration near to usage
  * ReadWriteLibarchivePlugin: rename variable
  * ReadWriteLibarchivePlugin: remove stale comment
  * BatchExtract: improve error reporting when a job fails</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Fix build with cmake &lt; 3.7</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * fall back to nummerical owner and group if no text representation exists</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Prevent drops from non-local URLs (kde#409835)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.
- Remove outdated minimum versions in spec</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Drop ark.cliexample debug category
  * Update HACKING file
  * Translate MIME type description</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.
- Add patch to allow building with libarchive 3.3.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch
- Dropped patches for obsolete distribution versions:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Forward errors from archive interface when batch-extracting
  * libzip: Enable progress when batch-extracting</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * libarchive: Improve error-handling when loading archive</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
</package>
<package pkgid="c736ae87a6b974bc1e26b1af666d1afeb5d7c161e319aeb529621fe1ca54ce2d" name="ark-lang" arch="noarch">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Add missing include
  * Remove unused includes
  * Fix ECM version comparison
  * Install in new logging directory when we use kf5 5.59.0
  * Fix forward declaration
  * ReadWriteLibarchivePlugin: always return false if jobs are killed
  * Part: reset UI after aborting creation of new archives
  * ReadWriteLibarchivePlugin: call archive_write_fail on fail
  * Simplify kill logic
  * Part: call updateWithDefaults() instead of setting an invalid index
  * ReadWriteLibarchivePlugin: stop calling QSaveFile::commit() on fail
  * ReadWriteLibarchivePlugin: bring back an old TODO
  * Promote m_operationMode as protected member of ReadWriteArchiveInterface
  * CMake: use proper construct to compare versions
  * Make it compile without foreach
  * clirar: Use switch-case instead of if-else
  * ReadWriteLibarchivePlugin: simplify error check
  * ReadWriteLibarchivePlugin: move declaration near to usage
  * ReadWriteLibarchivePlugin: rename variable
  * ReadWriteLibarchivePlugin: remove stale comment
  * BatchExtract: improve error reporting when a job fails</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Fix build with cmake &lt; 3.7</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * fall back to nummerical owner and group if no text representation exists</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Prevent drops from non-local URLs (kde#409835)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.
- Remove outdated minimum versions in spec</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Drop ark.cliexample debug category
  * Update HACKING file
  * Translate MIME type description</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.
- Add patch to allow building with libarchive 3.3.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch
- Dropped patches for obsolete distribution versions:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Forward errors from archive interface when batch-extracting
  * libzip: Enable progress when batch-extracting</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * libarchive: Improve error-handling when loading archive</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1598529600">- Add patch to prevent path traversal (boo#1175857, CVE-2020-24654):
  * 0001-Pass-the-ARCHIVE_EXTRACT_SECURE_SYMLINKS-flag-to-lib.patch</changelog>
</package>
<package pkgid="906b75658b07be2008bd119014e3b80978a683c89c7ae4fe9f2d6abd7e0c5faa" name="arpwatch" arch="src">
  <version epoch="0" ver="2.1a15" rel="lp152.6.3.1"/>
  <changelog author="lmuelle@suse.de" date="1099742400">- Split off massagevendor script and required files as we only need them at
  build time to create the ethercodes.dat file from the IEEE.org meta data.</changelog>
  <changelog author="lmuelle@suse.de" date="1100174400">- Add %insserv_prereq %fillup_prereq to prereq.
- Add missing call to %stop_on_removal (%preun), %restart_on_update, and
  %insserv_cleanup (%postun).</changelog>
  <changelog author="meissner@suse.de" date="1113825600">- Use RPM_OPT_FLAGS.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="lrupp@suse.de" date="1179144000">- update to 2.1a15
  + let the database files belong to the package
  + build parallel
  + use rpm macros for configure and make</changelog>
  <changelog author="prusnak@suse.cz" date="1185451200">- changed libpcap to libpcap-devel in BuildRequires</changelog>
  <changelog author="draht@suse.de" date="1226491200">- start script tuned for multiple interface support and independent
  databases. #149003</changelog>
  <changelog author="draht@suse.de" date="1226491201">- arpwatch-2.1a11-emailaddr.dif for flexibility in sender and
  recipient addresses on commandline.
- arpwatch-2.1a11-drop-privs.dif to run arpwatch as different user
- arpwatch-2.1a11-drop-privs-manpage.dif for the manpage</changelog>
  <changelog author="mseben@novell.com" date="1259323200">- added ARPDIR to build section in spec file, to fix error message
  in logs</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
</package>
<package pkgid="6c0d363cfacadad801fd0c75ce34a4232bd8fcb48dfdb5b5d8d5c45da0f9f526" name="arpwatch" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="lp152.6.3.1"/>
  <changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
</package>
<package pkgid="3ef1428063ba2fecb69b25d5993eb09a5837709c62bada2394cae0e3164f5f12" name="arpwatch" arch="src">
  <version epoch="0" ver="2.1a15" rel="lp152.6.6.1"/>
  <changelog author="lmuelle@suse.de" date="1100174400">- Add %insserv_prereq %fillup_prereq to prereq.
- Add missing call to %stop_on_removal (%preun), %restart_on_update, and
  %insserv_cleanup (%postun).</changelog>
  <changelog author="meissner@suse.de" date="1113825600">- Use RPM_OPT_FLAGS.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="lrupp@suse.de" date="1179144000">- update to 2.1a15
  + let the database files belong to the package
  + build parallel
  + use rpm macros for configure and make</changelog>
  <changelog author="prusnak@suse.cz" date="1185451200">- changed libpcap to libpcap-devel in BuildRequires</changelog>
  <changelog author="draht@suse.de" date="1226491200">- start script tuned for multiple interface support and independent
  databases. #149003</changelog>
  <changelog author="draht@suse.de" date="1226491201">- arpwatch-2.1a11-emailaddr.dif for flexibility in sender and
  recipient addresses on commandline.
- arpwatch-2.1a11-drop-privs.dif to run arpwatch as different user
- arpwatch-2.1a11-drop-privs-manpage.dif for the manpage</changelog>
  <changelog author="mseben@novell.com" date="1259323200">- added ARPDIR to build section in spec file, to fix error message
  in logs</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
</package>
<package pkgid="7fffac76e69cac36c42f9b2f87f59bf38604543f4f7fa7d06c770eb6ad3f5421" name="arpwatch" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="lp152.6.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
</package>
<package pkgid="505530a93c2adf7231658507adfa2213791398129b096cc7ed7723a1ae10da68" name="arpwatch" arch="src">
  <version epoch="0" ver="2.1a15" rel="lp152.6.9.1"/>
  <changelog author="meissner@suse.de" date="1113825600">- Use RPM_OPT_FLAGS.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="lrupp@suse.de" date="1179144000">- update to 2.1a15
  + let the database files belong to the package
  + build parallel
  + use rpm macros for configure and make</changelog>
  <changelog author="prusnak@suse.cz" date="1185451200">- changed libpcap to libpcap-devel in BuildRequires</changelog>
  <changelog author="draht@suse.de" date="1226491200">- start script tuned for multiple interface support and independent
  databases. #149003</changelog>
  <changelog author="draht@suse.de" date="1226491201">- arpwatch-2.1a11-emailaddr.dif for flexibility in sender and
  recipient addresses on commandline.
- arpwatch-2.1a11-drop-privs.dif to run arpwatch as different user
- arpwatch-2.1a11-drop-privs-manpage.dif for the manpage</changelog>
  <changelog author="mseben@novell.com" date="1259323200">- added ARPDIR to build section in spec file, to fix error message
  in logs</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1623672000">- Fixed local privilege escalation from runtime user to root
  (bsc#1186240, CVE-2021-25321)</changelog>
</package>
<package pkgid="a77f2324b7280149fc195d449603c7aff991399689d75fa0c9c3f2d4066375d0" name="arpwatch" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="lp152.6.9.1"/>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1623672000">- Fixed local privilege escalation from runtime user to root
  (bsc#1186240, CVE-2021-25321)</changelog>
</package>
<package pkgid="34c9da75b9b8ffba04a44e769118fc07f20456d353eb61224b79715a1b610110" name="arpwatch-ethercodes-build" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="lp152.6.3.1"/>
  <changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
</package>
<package pkgid="9f4a0e8faa5ad96d6d365dc99c2506450e9bdaf6b685be3ae6faf5cb00bb9ecf" name="arpwatch-ethercodes-build" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="lp152.6.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
</package>
<package pkgid="9ed83255d30f33f2b955da2b6b230d422b8a31eb86b87981fb5f9a54cb9e9ddc" name="arpwatch-ethercodes-build" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="lp152.6.9.1"/>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1623672000">- Fixed local privilege escalation from runtime user to root
  (bsc#1186240, CVE-2021-25321)</changelog>
</package>
<package pkgid="ccce08367613d71589d3758249bab677d1d93c9797f7371ec1aefc84c33e5adb" name="aspell" arch="i586">
  <version epoch="0" ver="0.60.8" rel="lp152.2.3.1"/>
  <changelog author="cfarrell@suse.com" date="1362571200">- license update: GFDL-1.1+ and LGPL-2.1 and HPND and BSD-3-Clause
  SDPX</changelog>
  <changelog author="pgajdos@suse.com" date="1362571201">- license GFDL-1.1+ and LGPL-2.1 and HPND and SUSE-BSD-Mark-Modifications
  [bnc#777131]</changelog>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
</package>
<package pkgid="c877077526d937f34cc1de4bf2a125727b82ea0b5d37b10b556f005de0d54dd8" name="aspell" arch="src">
  <version epoch="0" ver="0.60.8" rel="lp152.2.3.1"/>
  <changelog author="pgajdos@suse.cz" date="1248091200">- fixed invalid iterator [bnc#523345]</changelog>
  <changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1317556800">- update to version 0.60.6.1
  * Update to Automake 1.10.3.
  * Fix a bug which caused a race condition (leading to a likely crash)
    when two threads try to update the dictionary cache at the same
    time.
  * Make it very clear that compiling Aspell with NDEBUG is a bad idea
    (see `http://aspell.net/ndebug.html') by outputting a warning when
    building with NDEBUG defined.
  * Numerous other minor updates and bug fixes.
- Spec file updates:
  * Changes based on spec-cleaner run.
  * Changed License: to LGPL-2.1+.
  * Splitted the package according to the shared library packaging policy
    (added libaspell15 and libpspell15 sub-packages).
  * Added descriptions for the patches based on openSUSE guidelines.
  * Suggest also aspell-spell sub-package.
  * Added versioned Provides:/Obsoletes: for pspell and pspell-devel (rpmlint
    warning fix).
  * Removed libstdc++-devel from Requires: of aspell-devel (not needed).
  * Improved summaries and descriptions.
  * Clean up in %build, %install and %files sections.
  * Install the "spell" script provided by the package for compatibility
    reasons (added a aspell-spell sub-package containing this script and moved
    the Provides: entry for "spell" into this package).
  * Use %fdupes macro to fix rpmlint warning about duplicate files.
  * Use %install_info_delete in %preun instead of %postun section.
  * Add pspell-config.1 man page to the aspell-devel sub-package instead of
    aspell.
- Removed the following patches (fixed upstream):
  * aspell-iterator-after-erase.patch
  * aspell-make-static-filters.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1321963200">- add -ltinfo</changelog>
  <changelog author="jengelh@medozas.de" date="1327752000">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1330084800">- Build C++ code with -fvisibility-inlines-hidden
- Fix ncurses linkage.</changelog>
  <changelog author="pgajdos@suse.com" date="1349784000">- license FDL-1.1+ and LGPL-2.1 and HPND and BSD-Mark-Modifications</changelog>
  <changelog author="pgajdos@suse.com" date="1362052800">- fix build with new automake
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1362398400">- license GFDL-1.1+ and LGPL-2.1 and HPND and BSD-Mark-Modifications</changelog>
  <changelog author="cfarrell@suse.com" date="1362571200">- license update: GFDL-1.1+ and LGPL-2.1 and HPND and BSD-3-Clause
  SDPX</changelog>
  <changelog author="pgajdos@suse.com" date="1362571201">- license GFDL-1.1+ and LGPL-2.1 and HPND and SUSE-BSD-Mark-Modifications
  [bnc#777131]</changelog>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
</package>
<package pkgid="7d22952bf6d907748fdc9038092fed227dea7247006a4879fd8f0222a29a07de" name="aspell" arch="x86_64">
  <version epoch="0" ver="0.60.8" rel="lp152.2.3.1"/>
  <changelog author="cfarrell@suse.com" date="1362571200">- license update: GFDL-1.1+ and LGPL-2.1 and HPND and BSD-3-Clause
  SDPX</changelog>
  <changelog author="pgajdos@suse.com" date="1362571201">- license GFDL-1.1+ and LGPL-2.1 and HPND and SUSE-BSD-Mark-Modifications
  [bnc#777131]</changelog>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
</package>
<package pkgid="eb9d1e3a25af03fade1e060177c0a6cab363102ffca792285e202e222498c68d" name="aspell-af" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="07cafdbd609b04a72489befd3ab7376d25d53cef82b1008470e20b44d6a0c039" name="aspell-agal" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="6e492e1b79e2ba423e475795e4e750a6d2436fe5d29c472187f34324c4e49948" name="aspell-am" arch="x86_64">
  <version epoch="0" ver="0.03.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="98bbe815c8c113a834ba572d405a23735b43b514913e735bbf410a4de295b0c8" name="aspell-ar" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="9efa083afda6f3c3584b2f18a4cb6189df8e6eea1df49055a817e3a9633bf249" name="aspell-ast" arch="x86_64">
  <version epoch="0" ver="0.01" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="407cd923627ab477a5ae2c76d0fd9b71b2f2fcdaba3e76fae7527456f70865f0" name="aspell-az" arch="x86_64">
  <version epoch="0" ver="0.02" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="974f4669f35bdb5588dabe2f691e6584574c7ef0a3e5cd675ef13ea839891510" name="aspell-be" arch="x86_64">
  <version epoch="0" ver="0.01" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="20b400ba2b1be393a566493ad8b05c21d61871fccbf1e95292e662659c678177" name="aspell-bg" arch="x86_64">
  <version epoch="0" ver="4.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="20cd5fe5baa121287c6f5ccc6d776cb3275c8facfcf0350b6433861b056e0a75" name="aspell-bn" arch="x86_64">
  <version epoch="0" ver="0.01.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="ecf4089446a1065eb3ec5d1fd754c40c69dd8351ebfee325d451b891eeae5b70" name="aspell-br" arch="x86_64">
  <version epoch="0" ver="0.50.2" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="ff21f4940bf3f6208f5fa3a992775e5705ac4e80325693bfe743f5fa7dbb180d" name="aspell-ca" arch="x86_64">
  <version epoch="0" ver="0.60.1.20090722" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="4fab454ce7cee431063c6222ab88acc0d1f7324676179d6e8802fb49efccb82f" name="aspell-cs" arch="x86_64">
  <version epoch="0" ver="0.60.0.20040614" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="ed899f58ab8d75921c94f8b39076a719e7e0501e79b914a434c3e7cfe571398c" name="aspell-csb" arch="x86_64">
  <version epoch="0" ver="0.02.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="c79d4a90bac8bcf02b626e7d6056b2787f55cbc27c8337ee6a35635133663501" name="aspell-cy" arch="x86_64">
  <version epoch="0" ver="0.50.3" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="3275afdb2be8ffee7369116c8060b641b8bcd6ae51a2fc977e81342d1452f9de" name="aspell-da" arch="x86_64">
  <version epoch="0" ver="1.6.20" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="2990b505b9958d40c1b83f30d0dca542466c47deb1b91ec052c3ce6a45c1b134" name="aspell-de" arch="x86_64">
  <version epoch="0" ver="20161207.7.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="488c64e0c9455d46f06c3b894d6c83b932f517977f287da40a6adccd91e8da25" name="aspell-devel" arch="i586">
  <version epoch="0" ver="0.60.8" rel="lp152.2.3.1"/>
  <changelog author="cfarrell@suse.com" date="1362571200">- license update: GFDL-1.1+ and LGPL-2.1 and HPND and BSD-3-Clause
  SDPX</changelog>
  <changelog author="pgajdos@suse.com" date="1362571201">- license GFDL-1.1+ and LGPL-2.1 and HPND and SUSE-BSD-Mark-Modifications
  [bnc#777131]</changelog>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
</package>
<package pkgid="5a0753f00fdf6c9d8aba5ab673b604a9ff9fe7c04225cd227ed47da1c66f775e" name="aspell-devel" arch="x86_64">
  <version epoch="0" ver="0.60.8" rel="lp152.2.3.1"/>
  <changelog author="cfarrell@suse.com" date="1362571200">- license update: GFDL-1.1+ and LGPL-2.1 and HPND and BSD-3-Clause
  SDPX</changelog>
  <changelog author="pgajdos@suse.com" date="1362571201">- license GFDL-1.1+ and LGPL-2.1 and HPND and SUSE-BSD-Mark-Modifications
  [bnc#777131]</changelog>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
</package>
<package pkgid="f1b1933238b9d8e59bf9837c8e20d7b7119448f1233d1080225608821e2e3103" name="aspell-dictionaries" arch="src">
  <version epoch="0" ver="0.50.6" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.cz" date="1284379200">- fixed url in aspell-pl [bnc#638655]
- updated dictionary: pl 20100913</changelog>
  <changelog author="pgajdos@novell.com" date="1286798400">- fixed locale provides for aspell-et [bnc#645093]</changelog>
  <changelog author="pgajdos@suse.cz" date="1290427200">- updated aspell-pl to 20101122</changelog>
  <changelog author="meissner@suse.de" date="1305806400">- disabled aspell-no, as it is obsoleted by aspell-nb</changelog>
  <changelog author="pgajdos@novell.com" date="1306238400">- added Kannada dictionary, version 0.01-1</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1327492800">- Updated aspell-el to version 0.08.
- Spec file updates:
  * Changes based on spec-cleaner run.
  * Unified summaries and descriptions for all subpackages.
  * The version numbering for aspell-el was changed so an Obsoletes: entry was
    added for the old version.
  * Added a Conflict between aspell-hi and aspell-mr subpackages since they
    both provide u-deva.cmap and u-deva.cset files.
  * Fixed the following rpmlint warnings for some subpackages:
  - wrong-file-end-of-line-encoding
  - zero-length
  - install-file-in-docs</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1328184000">- Changed version of aspell-el to 0.50.3+0.08 to fix package upgrades. Removed
  the Obsoletes: entry which doesn't work.</changelog>
  <changelog author="pgajdos@suse.com" date="1328616000">- fixed licenses [bnc#745038]</changelog>
  <changelog author="pgajdos@suse.com" date="1332936000">- fixed aspell-pt_BR summary and description [bnc#754392]</changelog>
  <changelog author="coolo@suse.com" date="1338811200">- fix encoding of -nds description</changelog>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="0efc1199a1149411f344cba3be78f85e94dc910df03ea56cea10a3fd073c8e3f" name="aspell-el" arch="x86_64">
  <version epoch="0" ver="0.50.3+0.08" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="a02e00b66d6087e9c3a6e2203d09d4c53f7c6922e255808b970f0bb448ba81b8" name="aspell-eo" arch="x86_64">
  <version epoch="0" ver="2.1.20000225" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="31f77f4aaf8204d956931cbbf96c2edbeed9a510a8e40ddb97bd4495238cd820" name="aspell-es" arch="x86_64">
  <version epoch="0" ver="1.11.2" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="4c0c5e08d90b69683005de4e20e1555ee08ec9d9c72b1932bf5448b162879d87" name="aspell-et" arch="x86_64">
  <version epoch="0" ver="0.1.21" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="536db331aa01b0b571ec551e1889b5f5540d77c3c163ae5978d8d8401884debe" name="aspell-fa" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="368cef70ea61dedc8a27e215528c8055d82320fac69e8574fd2dbe33d273d01c" name="aspell-fi" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="6f3d07034f29fb6150de36a29f167baad1ec98c074e51b9f2ef56aef76f235b2" name="aspell-fo" arch="x86_64">
  <version epoch="0" ver="0.2.16" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="5140d4c61ade6152aff518b897ec145a529df6c654895b21803d985ce0ab7b0a" name="aspell-fr" arch="x86_64">
  <version epoch="0" ver="0.50.3" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="e8229426a656c856a910e11a3b6486f1b3d11336e074607f74ac0022a84e9574" name="aspell-fy" arch="x86_64">
  <version epoch="0" ver="0.12" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="b17f188d6d72f0e9a556adde0051bcc027ef0c922df4233e2003bbb2bafe2d95" name="aspell-ga" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="0557e55e3a8e82995c53ae2405d64820daaf9ee4c04102f3b491c9a9e465aad3" name="aspell-gd" arch="x86_64">
  <version epoch="0" ver="0.7.1.1.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="1b7f9729635ec67c7b7b982a1d6356b773dae183d83737f0f21522582ee97db2" name="aspell-gl" arch="x86_64">
  <version epoch="0" ver="0.50a" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="3a557debeac48582fc6d614b044c7968fec06457fc46875c087d9b7972a4c5f3" name="aspell-grc" arch="x86_64">
  <version epoch="0" ver="0.02.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="911ab58a9d0c409b42b7306685cced48ddd0d13803f8e3af93bd6a581cc6a934" name="aspell-gu" arch="x86_64">
  <version epoch="0" ver="0.03" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="deedd7e722a146199f44f0f81cdb7f2a7a98f94c11c8f4f95c3e00d2c6d0591d" name="aspell-gv" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="8087122cb8e72bbcb6f4c3c35a62d8cabd5a2dbca750c76a5625bc6305558aa6" name="aspell-he" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="820f4e721589c827fb8b4177377f5ec523709564f4dc25373f3a3560c4d65818" name="aspell-hi" arch="x86_64">
  <version epoch="0" ver="0.02" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="410a8bb88caa826ef4308f7048b687aa5d54e6d5d8463543195d6c7eb5ec7935" name="aspell-hil" arch="x86_64">
  <version epoch="0" ver="0.11" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="6d96127d3526fc13e537109c8e9af9718bb0f8ff3d0e2dabe52a2ba94eac83c3" name="aspell-hr" arch="x86_64">
  <version epoch="0" ver="0.51.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="6da25d761cf2a1019157b57a6bf9701fade9b169d6cd32c7f19c52a36d0f76bb" name="aspell-hsb" arch="x86_64">
  <version epoch="0" ver="0.02.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="eac05ec966fe17a43e90f5ea994fe47f65a29bad415b9b94c6370c5bfd97ec29" name="aspell-hu" arch="x86_64">
  <version epoch="0" ver="0.99.4.2" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="4d6bf20167c8273b91498c09527f90eaa985b3ba8018fc7ff7cb62d57a41ca3d" name="aspell-hus" arch="x86_64">
  <version epoch="0" ver="0.03.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="108594ac5b4ca46d04e004b0db1b76ef08147fb0ec49efc47ffa88a47d2939c0" name="aspell-hy" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="957f91034d5cf38a86e0e10cfd41c3e0c6d5f4bb1c8761ef1c4b8f62518a0db0" name="aspell-ia" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="e18a4649bb2b507fdc61f31100cdd128c03a39c098cb85fa84a1b671d0947b89" name="aspell-id" arch="x86_64">
  <version epoch="0" ver="1.2" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="8a43f9f5aeb0a030b96303603a94ca2d2d7d532364b1b03a195c0bdebb8f0092" name="aspell-is" arch="x86_64">
  <version epoch="0" ver="0.51.10" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="dc12bc6d90e482ee76f5f452665c786769849634ba957fbdbc0f51433b323641" name="aspell-ispell" arch="i586">
  <version epoch="0" ver="0.60.8" rel="lp152.2.3.1"/>
  <changelog author="cfarrell@suse.com" date="1362571200">- license update: GFDL-1.1+ and LGPL-2.1 and HPND and BSD-3-Clause
  SDPX</changelog>
  <changelog author="pgajdos@suse.com" date="1362571201">- license GFDL-1.1+ and LGPL-2.1 and HPND and SUSE-BSD-Mark-Modifications
  [bnc#777131]</changelog>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
</package>
<package pkgid="24d1651ba9d4bd02ccc91ad58b1438679030a5b8c96deedd3e7df1fd5de659ed" name="aspell-ispell" arch="x86_64">
  <version epoch="0" ver="0.60.8" rel="lp152.2.3.1"/>
  <changelog author="cfarrell@suse.com" date="1362571200">- license update: GFDL-1.1+ and LGPL-2.1 and HPND and BSD-3-Clause
  SDPX</changelog>
  <changelog author="pgajdos@suse.com" date="1362571201">- license GFDL-1.1+ and LGPL-2.1 and HPND and SUSE-BSD-Mark-Modifications
  [bnc#777131]</changelog>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
</package>
<package pkgid="760598fd5b7379685db15fbdf855dec23900dbf600201040d8d4c4c25ee88aa5" name="aspell-it" arch="x86_64">
  <version epoch="0" ver="2.2_20050523" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="3dbd95468b748d1a61c3577059b5f544164d654afb18058aae46f26f19689bb7" name="aspell-kn" arch="x86_64">
  <version epoch="0" ver="0.01.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="d0acfd0e6d7b6ee693d101d4f91140afb662741f742fc3ac4b131de102c46ba4" name="aspell-ku" arch="x86_64">
  <version epoch="0" ver="0.20.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="36b746d7f674f3b368d994a9acc9779f311c656db3dfcb67327d4135e22542bb" name="aspell-ky" arch="x86_64">
  <version epoch="0" ver="0.01.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="998a30f83e2557e274ff139ba52d43917f183db129c55faf03cae97f4f70c73d" name="aspell-la" arch="x86_64">
  <version epoch="0" ver="20020503" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="b5bcaf9a87c4e1715ea41a1d4a49fafbe985dda9b301ebb85602704b8534280f" name="aspell-lt" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="5490753f5b1c3f00d0dc0998b7f38c5772e72114b6748a4c202573a3ad6583c4" name="aspell-lv" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="b9872bc9beca389acc587592cce7cf801c3901cb2ef651ef82da3c02365935ff" name="aspell-mg" arch="x86_64">
  <version epoch="0" ver="20040807" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="e6b9bea3157632b173e681ee384f8204a3d98767ecb54dbb4ddf5ad21a54e0d6" name="aspell-mi" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="dfa4b4f58c38cc5f47910adae58b0536301839ead94713d2d6560c5b6636743c" name="aspell-mk" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="2414f6ae2584171f8cb884385d8d879647dce192aee3db443e072b33edd2a87a" name="aspell-ml" arch="x86_64">
  <version epoch="0" ver="0.03" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="8ed7e38f77d6a27a92409c3df34b58ff9b0cc04dc916dea5b074434e20947d66" name="aspell-mn" arch="x86_64">
  <version epoch="0" ver="0.06.2" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="b1eecfc9904719c1bffeaa6c72f3c9473cedf90dc0e29744e476df5f23f38d92" name="aspell-mr" arch="x86_64">
  <version epoch="0" ver="0.10" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="612f950d8e6596437a47424b6e1e30cd27be265f48b891a7dd5dd5017136121a" name="aspell-ms" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="98dfe48305203156089f8db53d7f4ab6fd06b03dc6028195e7eca2f0e1ed73b8" name="aspell-mt" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="a04dc295691a4b93d57beeca3b3ee7c772e888f419455706e037cb95e0430dc4" name="aspell-nb" arch="x86_64">
  <version epoch="0" ver="0.50.10" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="c9b556417ad6a058bf9f40325d70063242dc90f7fee4116ca7e1beef3bc2817b" name="aspell-nds" arch="x86_64">
  <version epoch="0" ver="0.01" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="01b51bc06e4f0d7ff3df046950ceee20357d26fe68600b2c83ae4dea1daca8ef" name="aspell-nl" arch="x86_64">
  <version epoch="0" ver="1.00.7" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="dbeb788a21ef6ed097b94223327313bf84330d0f8a6cf84d92ccb5a271119c03" name="aspell-nn" arch="x86_64">
  <version epoch="0" ver="0.50.11" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="08d150b18ef323c798754967bfaa7a32e23338fa3084f652a871bbee76b4f0c9" name="aspell-ny" arch="x86_64">
  <version epoch="0" ver="0.01" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="df71d9441558df11587574931f11adb5071d4d3a594f0b66552f9e61bdbfb67d" name="aspell-or" arch="x86_64">
  <version epoch="0" ver="0.03" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="9c79ec2f2cf1cff21b0dbbad82d00f705595d2b1c72bb7e2cdb22d1ca07f8e78" name="aspell-pa" arch="x86_64">
  <version epoch="0" ver="0.01" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="03d25a30a689fd9f67f8aa4778611e1cc41688d43e6e1c94eee9ed4948567a44" name="aspell-pl" arch="x86_64">
  <version epoch="0" ver="0.60.2015.04.28" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="45eef89437c1c2eb9aba6e18081e279c625ecdb5e5d2e8e1948297a1a1b570e8" name="aspell-pt_BR" arch="x86_64">
  <version epoch="0" ver="20131030.12.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="d4976a56e6c2785af0d371aca207459f719ccf88fbeb6bd5990c439e46114655" name="aspell-pt_PT" arch="x86_64">
  <version epoch="0" ver="20190329" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="ea40641fd0d11d5f534374acd891fbce3e93f1e33468a8342097002f5fe8fc5d" name="aspell-qu" arch="x86_64">
  <version epoch="0" ver="0.02" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="a2f70a539da5e2b6d11d32d74cda6a470d66e9420f4a316150ba301799b42e9f" name="aspell-ro" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="a310416d8107da68a557900860d08ba21c67a4fe370a81a35226a29b9415e6df" name="aspell-ru" arch="x86_64">
  <version epoch="0" ver="0.99.f7.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="4d05d28a17736b71eb9044b021dcc2a6a201869af7fa26d662323d34d84811e8" name="aspell-rw" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="e79dbb8db60a0a6a0d837975015f879a7d533627ecfe2ffe9331d7af23b3fec8" name="aspell-sc" arch="x86_64">
  <version epoch="0" ver="1.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="01f16a863a968e97ef2bdb35f271b8ab9d9d096abe44e0a489261e7ebe7020d0" name="aspell-sk" arch="x86_64">
  <version epoch="0" ver="2.01" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="4aae7eec5975307565fbd58f89c02b132d392c90c0f376635f9d06ed827a8b56" name="aspell-sl" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="26a2d0b9a5e8cb68e2f718c2c80c5103127d5b4cf8c4a33d52e6f6d23934fbb9" name="aspell-spell" arch="i586">
  <version epoch="0" ver="0.60.8" rel="lp152.2.3.1"/>
  <changelog author="cfarrell@suse.com" date="1362571200">- license update: GFDL-1.1+ and LGPL-2.1 and HPND and BSD-3-Clause
  SDPX</changelog>
  <changelog author="pgajdos@suse.com" date="1362571201">- license GFDL-1.1+ and LGPL-2.1 and HPND and SUSE-BSD-Mark-Modifications
  [bnc#777131]</changelog>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
</package>
<package pkgid="ee6616932258eb794c09f4903f77d00af2bbaa0258d4ad1c6559ca6f7ce43b0f" name="aspell-spell" arch="x86_64">
  <version epoch="0" ver="0.60.8" rel="lp152.2.3.1"/>
  <changelog author="cfarrell@suse.com" date="1362571200">- license update: GFDL-1.1+ and LGPL-2.1 and HPND and BSD-3-Clause
  SDPX</changelog>
  <changelog author="pgajdos@suse.com" date="1362571201">- license GFDL-1.1+ and LGPL-2.1 and HPND and SUSE-BSD-Mark-Modifications
  [bnc#777131]</changelog>
  <changelog author="pgajdos@suse.com" date="1397476800">- baselibs.conf: libaspell15
  obsoletes "aspell-&lt;targettype&gt; &lt;= &lt;version&gt;"
  provides "aspell-&lt;targettype&gt; = &lt;version&gt;"</changelog>
  <changelog author="mpluskal@suse.com" date="1449057600">- Add gpg signature
- Remove old ppc provides/obsoletes
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix-warnings.patch - Fix warnings reported by GCC7.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Compact descriptions</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 0.60.8
  * Prevent a potentially unbounded buffer over-read by no longer
  supporting null-terminated UCS-2 and UCS-4 encoded strings with the
  original C API. @xref{Upgrading from Aspell 0.60.7}.
  * Ensure that possible typos are listed before other suggestions when
  typo analysis is used.  Also fix a bug so that suggestions that split
  a word using a space or hyphen are not always first.
  * Add Markdown filter.
  * Add new @option{wordlists} option, which is a list of UTF-8 files that
  contain additional words to accept.
  * Add new @option{camel-case} option, which enables support for checking
  camelCase words.
  * Sort personal and replacement dictionaries.
  * Change @code{ultra} suggestion mode to only find words that are within
  one-edit distance or have the same soundslike.
  * Implement the @code{aspell filter} command.
  * Fix a bug in @code{AspellDocumentChecker} that prevented it from
  working with UCS-2 and UCS-4 encoded strings.
  * Remove unused @option{sug-edit-dist} option.
  * @code{AspellDocumentChecker} now expects the document a line at a time
  in order to work with the new Markdown filter.  If the document is
  split on white space characters instead, nothing will break, but new
  filters such as the Markdown filter may give incorrect results.
  * The @option{clean} option and command will no longer split a word.
  * Various documentation improvements.
  * Removal of several outdated appendices that don't really belong in the
  main manual.  Parts that are still relevent may eventually be moved
  elsewhere, but for now they are available online at
  @uref{http://aspell.net/0.60.7/man-html/}.
  * Fix various crashes and other problems found by Google's OSS-Fuzz.
  * Add partial support for recognizing the Unicode apostrophe (') in
  words.  In particular Aspell will accept the Unicode apostrophe when
  the language uses an ISO Latin charset that doesn't already have a
  Unicode apostrophe.  For now, Aspell will still use the ASCII version
  in suggestions.
  * Detect when a dictionary compiled on a 32-bit machine is used on a
  64-bit one (and vise versa), as due to an oversight, compiled
  dictionaries depend on more than the endianness.  Also added a compile
  time option to remove this dependency, but at the cost of breaking
  compatibility with already compiled dictionaries on 64-bit systems.
  * Fix a bug which caused Aspell to crash when passing in a null string
  to almost any of the C API functions.  This should not happen if the
  size is also zero as the pointer should never be derefrenced.
  * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
  mingw-w64.
  * In addition to outputting a warning when building with NDEBUG defined,
  also include NDEBUG in the version string.
  * Various compile fixes for newer version of Gcc and Clang.
  * Fix VPATH builds.
  * Use utf-8 encoding for manual instead of iso-8859-1.
  * Other minor updates and bug fixes.
- deleted patches
  - aspell-automake-1.13.patch (upstreamed)
  - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
  - gcc7-fix-warnings.patch (upstreamed)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1602158400">- Remove/replace old specfile constructs.</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- recommend aspell-en also from the library [bsc#1177523]</changelog>
  <changelog author="pgajdos@suse.com" date="1627905600">- security update
- modified patches
  % aspell-quotes.patch (p1)
  % aspell-strict-aliasing.patch (p1)
- added patches
  fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
  + aspell-CVE-2019-25051.patch</changelog>
</package>
<package pkgid="ffa803ae706316a11287724ec1f6d6ffb657a7e9e2f9f9a3da1075ac377a0d08" name="aspell-sr" arch="x86_64">
  <version epoch="0" ver="0.02" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="79c103e1ec42e5394be3df9161016cf4fcd721f3d8dd38ec6e2367341ca486be" name="aspell-sv" arch="x86_64">
  <version epoch="0" ver="0.51.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="f4b5325c2b68a048bd958d93410a618831324964b12c624f501f30386611f290" name="aspell-sw" arch="x86_64">
  <version epoch="0" ver="1.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="f92d996b1bc5e12b5f30208f959f8cbbacc7eaf340446d89ea5b6b3f84066522" name="aspell-ta" arch="x86_64">
  <version epoch="0" ver="20040424" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="89a02df1e829bef069f5902f45aa2b72a53301f66cb45a8186455032e275aff6" name="aspell-te" arch="x86_64">
  <version epoch="0" ver="0.01.2" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="c7d9260013b2720e4b539f0330d8c4440380e31dab947affdea8d3b06fd8d0c7" name="aspell-tet" arch="x86_64">
  <version epoch="0" ver="0.1.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="23291bbc3543f7d27eb8e894208d897c13231725a2579d87d559c5f06a9a9d8a" name="aspell-tk" arch="x86_64">
  <version epoch="0" ver="0.01" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="f1d35b964bbcb9b19f454f33b2bce62b0f6873e5a0b6d217086f92469e0521f7" name="aspell-tl" arch="x86_64">
  <version epoch="0" ver="0.02" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="d7fd94cc2af14a7d105bb84d249ef116d3782dc91ef0b5ca5421e7ed3f149a4e" name="aspell-tn" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="4bdd23438a95c010abbde45cf9cdd34e82c3d7bfa3f5f2e3c842563e02718e2a" name="aspell-tr" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="f96c942c3dfedcaa28be172ec266540d1263153fbbb2895ac8615cbc2a73cd92" name="aspell-uk" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="551ab4aff4dfe681b1c4e6c1a2eed0697f861bb05c21230379fdb703604f2067" name="aspell-uz" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="b3cbd570c986c48073b219098835f7a8c9f5c2a3d448e06ad4fd74509b9ce7aa" name="aspell-vi" arch="x86_64">
  <version epoch="0" ver="0.01.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="a52157e562bb41372e5063903da343e6247075adc853c578de4229f9567d8dce" name="aspell-wa" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="191e8aef8f5706291f3ab5115dd2afbcef4c01169032a104c80afa298752d21e" name="aspell-yi" arch="x86_64">
  <version epoch="0" ver="0.01.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="74c196ac05333c414d4f11a9eef223b71cddd84877b86ef3b9c826b198f2937a" name="aspell-zu" arch="x86_64">
  <version epoch="0" ver="0.50" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated Polish dictionary, version 1.11-2
- updated Spanish dictionary, version 20121120
- new Huastec dictionary, version 0.03-1</changelog>
  <changelog author="pgajdos@suse.com" date="1354017600">- updated pt_PT dictionary, version 20121123</changelog>
  <changelog author="cfarrell@suse.com" date="1366372800">- license update: SUSE-Permissive-Modify-By-Patch
  this license was added to the spreadsheet available (linked) from
  license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated pl dictionary, version 20140102 [bnc#857026]</changelog>
  <changelog author="pgajdos@suse.com" date="1389009600">- improved package summaries and descriptions by frank.h.ellenberger
  at gmail</changelog>
  <changelog author="pgajdos@suse.com" date="1431432000">- updated pl dictionary, version 20150428</changelog>
  <changelog author="rpm@fthiessen.de" date="1454241600">- Fixed build on openSUSE Factory:
  * Added aspell-dictionaries-rpmlintrc to get rid of
    incorrect-fsf-address warnings.
  * Added fdupes to fix warnings about waste of space
  * Fixed file name of norwegian and islandic alias (latin1 to utf8)</changelog>
  <changelog author="ecsos@opensuse.org" date="1527681600">- add german dictionary
  - rebase patch *Novellwords_extra_dict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1576756800">- removing Novell residues
- update:
  . da    1.6.36
  . pt_PT 20190329
- deleted patches
  - aspell-dictionaries-Novellwords_extra_dict.patch (abandoned)
- deleted sources
  - Nwordlist.tgz (abandoned)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600689600">- update:
  - de -&gt; 20161207-7-0
  - pt_BR -&gt; 20131030-12-0
- Fix boo#1076219.</changelog>
</package>
<package pkgid="ac74200ca9051e9471913d86f3437f479362209a85673bbd4e2b0ef114f6fad7" name="atftp" arch="i586">
  <version epoch="0" ver="0.7.2" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
  <changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
  <changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
  <changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
  <changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>
  <changelog author="vcizek@suse.com" date="1481025600">- honor --user and --group options in non-daemon mode (bsc#1013565)
  * add atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504872000">- Changed permissions of /srv/tftpboot to be readable [bsc#940608]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556107200">- Update to version 0.7.2 [bsc#1133114, CVE-2019-11365][bsc#1133145, CVE-2019-11366]
  * atftpd.c: Fixed a potential DoS bug (introduced by the IPv6 patch)
  * Fix Debian Bug deb#613582 and deb#258998 atftpd: does not reply properly when there's more than 1 interface
  * Fix Debian Bug deb#622840 atftpd: Forgets port if both --port and --bind-address are used
  * Fix Debian Bug deb#606969 atftp exits with no error after a get when disk is full
  * Fix Debian Bug deb#575831 atftp: error return value when tftp put file
  * Fix missing default port from Ubuntu bug lp#972834
  * Merged patches to improve debugging and warning messages
  * Merged patch from Gentoo distribution:
    add support for proprietary password extension necessary for
    transferring files to linksys routers (atftp client)
  * Added patch from Gentoo bug #322601: client fails for filenames containing spaces
  * Listening Address configuration fixed
  * Added Patch "Blksize option can be smaller than SEGSIZE"
  * Fix Debian Bug deb#609813 Apply patch listen on requested port when in daemon mode.
  * Fix Debian Bug deb#598474 Fixed use of sendto() over a connected datagram socket on FreeBSD
  * Fix Debian Bug deb#580473 Apply IPv6 support patch by Ben Hutchings.
    Add AC_GNU_SOURCE to configure.ac to address FTBFS.
  * Fix Debian Bug deb#536295 Updated config.sub .guess.
  * Fix Debian Bug deb#535604 Make sure we have the --daemon option before starting atftpd
  * Fix Debian Bug deb#514521 Crash fix
  * Fix Debian Bug deb#484739 Added support for logging to stdout.
  * Fix Debian Bug deb#484932 inetd.conf: change udp to udp4
  * Fix Debian Bug deb#436310 Fixed the FTBFS.
  * Fix Debian Bug deb#420900 Use CLOCKS_PER_SEC instead of CLK_TCK. Fixed a FTBFS.
  * Fix Debian Bug deb#271816 Random segfaults fixed
  * Fix Debian Bug deb#291829 Segfault fixed on AMD64.
  * Fix Debian Bug deb#290062 Copyright fixed.
  * Fix Debian Bug deb#275052 Data corruption bug in multicast mode fixed.
  * New Project home: https://sourceforge.net/projects/atftp/
- Removed patches fixed upstream:
  * atftp-0.7.dif
  * atftp-CLK_TCK.diff
  * atftp-0.7_compiler_warnings.patch
  * atftp-0.7_thread_crash.patch
  * atftp-0.7_sol_ip.patch
  * atftp-0.7_bug-213384_OPT_NUMBER.patch
  * atftpd-0.7_unprotected_assignments_crash.patch
  * atftpd-0.7_circumvent_tftp_size_restrictions.patch
- Rebased patches:
  * atftp-0.7-ack_heuristic.patch
  * atftp-0.7-default_user_man.patch
  * atftp-0.7-server_receive_race.patch
  * atftp-0.7-sorcerers_apprentice.patch
  * atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556280000">- Removed old initscript conditionals and atftpd.init file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1562328000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603281600">- Security fix: [bsc#1176437, CVE-2020-6097]
  * A specially crafted sequence of RRQ-Multicast requests can
    trigger an assert() call resulting denial-of-service.
- Add atftp-CVE-2020-6097.patch</changelog>
</package>
<package pkgid="d6298aade7b112a7bc5ca996264a1434c7ec462b41986cd224758bb79158953d" name="atftp" arch="src">
  <version epoch="0" ver="0.7.2" rel="lp152.2.3.1"/>
  <changelog author="vcizek@suse.com" date="1346846400">- prevent the sorcerer's apprentice syndrome situation only when
  explicitly specified by the user (bnc#774376)
  (added a new command line option --prevent-sas to turn it on)</changelog>
  <changelog author="vcizek@suse.com" date="1347364800">- use the "su" logrotate directive (bnc#677335)</changelog>
  <changelog author="vcizek@suse.com" date="1347364801">- added rules for SuSEfirewall2 (bnc#729793)</changelog>
  <changelog author="vcizek@suse.com" date="1349697600">- use Vladimir Nadvornik's heuristic for packet retransmission
  by default (see bnc#774376)
  The RFC1350 compliant behaviour stays optional.
  (added atftp-0.7-ack_heuristic.patch)
- merged the two sorcerer's apprentice syndrome patches to one
  (removed atftp-0.7-prevent-sas.patch)</changelog>
  <changelog author="vcizek@suse.com" date="1357214400">- change ownership of /srv/tftpboot, because atftpd running as
  tftp:tftp can't write to that directory
- create pid directory on service start
- manpage changes:
  * substitute /tftpboot with /srv/tftpboot
  * default user is now tftp:tftp
  * added patches:
    atftp-0.7-default_user_man.patch
    atftp-0.7-default_dir_man.patch</changelog>
  <changelog author="vcizek@suse.com" date="1360238400">- create capabilites provided by both tftp and atftp
  (bnc#801481 or bnc#725378)</changelog>
  <changelog author="chris@computersalat.de" date="1384257600">- rebase patches (p0)
- rename atftpd.init.d to atftpd.init
- fix spec
  * remove ghost /var/run/atftp (created by init)</changelog>
  <changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
  <changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
  <changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
  <changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
  <changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>
  <changelog author="vcizek@suse.com" date="1481025600">- honor --user and --group options in non-daemon mode (bsc#1013565)
  * add atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504872000">- Changed permissions of /srv/tftpboot to be readable [bsc#940608]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556107200">- Update to version 0.7.2 [bsc#1133114, CVE-2019-11365][bsc#1133145, CVE-2019-11366]
  * atftpd.c: Fixed a potential DoS bug (introduced by the IPv6 patch)
  * Fix Debian Bug deb#613582 and deb#258998 atftpd: does not reply properly when there's more than 1 interface
  * Fix Debian Bug deb#622840 atftpd: Forgets port if both --port and --bind-address are used
  * Fix Debian Bug deb#606969 atftp exits with no error after a get when disk is full
  * Fix Debian Bug deb#575831 atftp: error return value when tftp put file
  * Fix missing default port from Ubuntu bug lp#972834
  * Merged patches to improve debugging and warning messages
  * Merged patch from Gentoo distribution:
    add support for proprietary password extension necessary for
    transferring files to linksys routers (atftp client)
  * Added patch from Gentoo bug #322601: client fails for filenames containing spaces
  * Listening Address configuration fixed
  * Added Patch "Blksize option can be smaller than SEGSIZE"
  * Fix Debian Bug deb#609813 Apply patch listen on requested port when in daemon mode.
  * Fix Debian Bug deb#598474 Fixed use of sendto() over a connected datagram socket on FreeBSD
  * Fix Debian Bug deb#580473 Apply IPv6 support patch by Ben Hutchings.
    Add AC_GNU_SOURCE to configure.ac to address FTBFS.
  * Fix Debian Bug deb#536295 Updated config.sub .guess.
  * Fix Debian Bug deb#535604 Make sure we have the --daemon option before starting atftpd
  * Fix Debian Bug deb#514521 Crash fix
  * Fix Debian Bug deb#484739 Added support for logging to stdout.
  * Fix Debian Bug deb#484932 inetd.conf: change udp to udp4
  * Fix Debian Bug deb#436310 Fixed the FTBFS.
  * Fix Debian Bug deb#420900 Use CLOCKS_PER_SEC instead of CLK_TCK. Fixed a FTBFS.
  * Fix Debian Bug deb#271816 Random segfaults fixed
  * Fix Debian Bug deb#291829 Segfault fixed on AMD64.
  * Fix Debian Bug deb#290062 Copyright fixed.
  * Fix Debian Bug deb#275052 Data corruption bug in multicast mode fixed.
  * New Project home: https://sourceforge.net/projects/atftp/
- Removed patches fixed upstream:
  * atftp-0.7.dif
  * atftp-CLK_TCK.diff
  * atftp-0.7_compiler_warnings.patch
  * atftp-0.7_thread_crash.patch
  * atftp-0.7_sol_ip.patch
  * atftp-0.7_bug-213384_OPT_NUMBER.patch
  * atftpd-0.7_unprotected_assignments_crash.patch
  * atftpd-0.7_circumvent_tftp_size_restrictions.patch
- Rebased patches:
  * atftp-0.7-ack_heuristic.patch
  * atftp-0.7-default_user_man.patch
  * atftp-0.7-server_receive_race.patch
  * atftp-0.7-sorcerers_apprentice.patch
  * atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556280000">- Removed old initscript conditionals and atftpd.init file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1562328000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603281600">- Security fix: [bsc#1176437, CVE-2020-6097]
  * A specially crafted sequence of RRQ-Multicast requests can
    trigger an assert() call resulting denial-of-service.
- Add atftp-CVE-2020-6097.patch</changelog>
</package>
<package pkgid="bf5731139e6c43d16cb6e961dbf55bd4a6b4ea952f1c050253569e959019ae9c" name="atftp" arch="x86_64">
  <version epoch="0" ver="0.7.2" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
  <changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
  <changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
  <changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
  <changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>
  <changelog author="vcizek@suse.com" date="1481025600">- honor --user and --group options in non-daemon mode (bsc#1013565)
  * add atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504872000">- Changed permissions of /srv/tftpboot to be readable [bsc#940608]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556107200">- Update to version 0.7.2 [bsc#1133114, CVE-2019-11365][bsc#1133145, CVE-2019-11366]
  * atftpd.c: Fixed a potential DoS bug (introduced by the IPv6 patch)
  * Fix Debian Bug deb#613582 and deb#258998 atftpd: does not reply properly when there's more than 1 interface
  * Fix Debian Bug deb#622840 atftpd: Forgets port if both --port and --bind-address are used
  * Fix Debian Bug deb#606969 atftp exits with no error after a get when disk is full
  * Fix Debian Bug deb#575831 atftp: error return value when tftp put file
  * Fix missing default port from Ubuntu bug lp#972834
  * Merged patches to improve debugging and warning messages
  * Merged patch from Gentoo distribution:
    add support for proprietary password extension necessary for
    transferring files to linksys routers (atftp client)
  * Added patch from Gentoo bug #322601: client fails for filenames containing spaces
  * Listening Address configuration fixed
  * Added Patch "Blksize option can be smaller than SEGSIZE"
  * Fix Debian Bug deb#609813 Apply patch listen on requested port when in daemon mode.
  * Fix Debian Bug deb#598474 Fixed use of sendto() over a connected datagram socket on FreeBSD
  * Fix Debian Bug deb#580473 Apply IPv6 support patch by Ben Hutchings.
    Add AC_GNU_SOURCE to configure.ac to address FTBFS.
  * Fix Debian Bug deb#536295 Updated config.sub .guess.
  * Fix Debian Bug deb#535604 Make sure we have the --daemon option before starting atftpd
  * Fix Debian Bug deb#514521 Crash fix
  * Fix Debian Bug deb#484739 Added support for logging to stdout.
  * Fix Debian Bug deb#484932 inetd.conf: change udp to udp4
  * Fix Debian Bug deb#436310 Fixed the FTBFS.
  * Fix Debian Bug deb#420900 Use CLOCKS_PER_SEC instead of CLK_TCK. Fixed a FTBFS.
  * Fix Debian Bug deb#271816 Random segfaults fixed
  * Fix Debian Bug deb#291829 Segfault fixed on AMD64.
  * Fix Debian Bug deb#290062 Copyright fixed.
  * Fix Debian Bug deb#275052 Data corruption bug in multicast mode fixed.
  * New Project home: https://sourceforge.net/projects/atftp/
- Removed patches fixed upstream:
  * atftp-0.7.dif
  * atftp-CLK_TCK.diff
  * atftp-0.7_compiler_warnings.patch
  * atftp-0.7_thread_crash.patch
  * atftp-0.7_sol_ip.patch
  * atftp-0.7_bug-213384_OPT_NUMBER.patch
  * atftpd-0.7_unprotected_assignments_crash.patch
  * atftpd-0.7_circumvent_tftp_size_restrictions.patch
- Rebased patches:
  * atftp-0.7-ack_heuristic.patch
  * atftp-0.7-default_user_man.patch
  * atftp-0.7-server_receive_race.patch
  * atftp-0.7-sorcerers_apprentice.patch
  * atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556280000">- Removed old initscript conditionals and atftpd.init file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1562328000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603281600">- Security fix: [bsc#1176437, CVE-2020-6097]
  * A specially crafted sequence of RRQ-Multicast requests can
    trigger an assert() call resulting denial-of-service.
- Add atftp-CVE-2020-6097.patch</changelog>
</package>
<package pkgid="65f649a6fe72a61c71aa4837904626db122d884c3f1dc11c9153f0d16c4aa8b6" name="attica-qt5" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine with qt5.13
  * Remove deprecated QSignalMapper
  * Fix some clazy error
  * Port to for(...:...)</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Accept any HTTP status between 100 and 199 as benign
  * Additions for ProviderManager documentation
  * [attica] compile without foreach
  * autotests: use new signal failedToLoad in ProviderTest</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Add some documentation for PlatformDependent
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0
- Add 0001-Fix-the-attica-pkgconfig-file.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix the attica pkgconfig file.
- Drop 0001-Fix-the-attica-pkgconfig-file.patch, merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better
  * Add some std::move in setter functions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * [Attica] Port QRegExp to QRegularExpression
  * qrand is deprecated. Port to QRandomGenerator
  * Don't use a verified nullptr as a data source
  * Support multiple children elements in comment elements
  * Update the obsolete projects.kde.org URL
  * Set a proper agent string for Attica requests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Changes since 5.66.0:
  * Make it compile with qt5.15</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against qt5.15. They reverted change error() to socketError
  * Attica: Convert license statements to SPDX markers
  * Use ecm_qt_install_logging_categories over manual categories file
  * Add a default provider (as per documentation)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633780800">- Add patches to reduce server traffic and improve startup time
  (boo#1191512):
  * 0001-Do-not-start-basejobs-twice.patch
  * 0002-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
</package>
<package pkgid="0186a705608d980e4d4e77df6659a37e1c281123a2ad5d09392d618a9a8075e3" name="attica-qt5" arch="src">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine with qt5.13
  * Remove deprecated QSignalMapper
  * Fix some clazy error
  * Port to for(...:...)</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Accept any HTTP status between 100 and 199 as benign
  * Additions for ProviderManager documentation
  * [attica] compile without foreach
  * autotests: use new signal failedToLoad in ProviderTest</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Add some documentation for PlatformDependent
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0
- Add 0001-Fix-the-attica-pkgconfig-file.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix the attica pkgconfig file.
- Drop 0001-Fix-the-attica-pkgconfig-file.patch, merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better
  * Add some std::move in setter functions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * [Attica] Port QRegExp to QRegularExpression
  * qrand is deprecated. Port to QRandomGenerator
  * Don't use a verified nullptr as a data source
  * Support multiple children elements in comment elements
  * Update the obsolete projects.kde.org URL
  * Set a proper agent string for Attica requests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Changes since 5.66.0:
  * Make it compile with qt5.15</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against qt5.15. They reverted change error() to socketError
  * Attica: Convert license statements to SPDX markers
  * Use ecm_qt_install_logging_categories over manual categories file
  * Add a default provider (as per documentation)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633780800">- Add patches to reduce server traffic and improve startup time
  (boo#1191512):
  * 0001-Do-not-start-basejobs-twice.patch
  * 0002-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
</package>
<package pkgid="c9bce56f7e6c2c851c273d722be92fa02017cb07fd422793b80f20f94ab66f0a" name="attica-qt5" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine with qt5.13
  * Remove deprecated QSignalMapper
  * Fix some clazy error
  * Port to for(...:...)</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Accept any HTTP status between 100 and 199 as benign
  * Additions for ProviderManager documentation
  * [attica] compile without foreach
  * autotests: use new signal failedToLoad in ProviderTest</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Add some documentation for PlatformDependent
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0
- Add 0001-Fix-the-attica-pkgconfig-file.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix the attica pkgconfig file.
- Drop 0001-Fix-the-attica-pkgconfig-file.patch, merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better
  * Add some std::move in setter functions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * [Attica] Port QRegExp to QRegularExpression
  * qrand is deprecated. Port to QRandomGenerator
  * Don't use a verified nullptr as a data source
  * Support multiple children elements in comment elements
  * Update the obsolete projects.kde.org URL
  * Set a proper agent string for Attica requests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Changes since 5.66.0:
  * Make it compile with qt5.15</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against qt5.15. They reverted change error() to socketError
  * Attica: Convert license statements to SPDX markers
  * Use ecm_qt_install_logging_categories over manual categories file
  * Add a default provider (as per documentation)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633780800">- Add patches to reduce server traffic and improve startup time
  (boo#1191512):
  * 0001-Do-not-start-basejobs-twice.patch
  * 0002-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
</package>
<package pkgid="1c6b46e2317961df0a6f6a1f3976bcbd78a54bfcc6a5f06c55283679fd7b4864" name="attica-qt5-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine with qt5.13
  * Remove deprecated QSignalMapper
  * Fix some clazy error
  * Port to for(...:...)</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Accept any HTTP status between 100 and 199 as benign
  * Additions for ProviderManager documentation
  * [attica] compile without foreach
  * autotests: use new signal failedToLoad in ProviderTest</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Add some documentation for PlatformDependent
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0
- Add 0001-Fix-the-attica-pkgconfig-file.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix the attica pkgconfig file.
- Drop 0001-Fix-the-attica-pkgconfig-file.patch, merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better
  * Add some std::move in setter functions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * [Attica] Port QRegExp to QRegularExpression
  * qrand is deprecated. Port to QRandomGenerator
  * Don't use a verified nullptr as a data source
  * Support multiple children elements in comment elements
  * Update the obsolete projects.kde.org URL
  * Set a proper agent string for Attica requests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Changes since 5.66.0:
  * Make it compile with qt5.15</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against qt5.15. They reverted change error() to socketError
  * Attica: Convert license statements to SPDX markers
  * Use ecm_qt_install_logging_categories over manual categories file
  * Add a default provider (as per documentation)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633780800">- Add patches to reduce server traffic and improve startup time
  (boo#1191512):
  * 0001-Do-not-start-basejobs-twice.patch
  * 0002-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
</package>
<package pkgid="cf76d21037ec6794475b8f7f424facd7cc899040f6f7dea50ebcc9a25fcf603e" name="attica-qt5-devel" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine with qt5.13
  * Remove deprecated QSignalMapper
  * Fix some clazy error
  * Port to for(...:...)</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Accept any HTTP status between 100 and 199 as benign
  * Additions for ProviderManager documentation
  * [attica] compile without foreach
  * autotests: use new signal failedToLoad in ProviderTest</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Add some documentation for PlatformDependent
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0
- Add 0001-Fix-the-attica-pkgconfig-file.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix the attica pkgconfig file.
- Drop 0001-Fix-the-attica-pkgconfig-file.patch, merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better
  * Add some std::move in setter functions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * [Attica] Port QRegExp to QRegularExpression
  * qrand is deprecated. Port to QRandomGenerator
  * Don't use a verified nullptr as a data source
  * Support multiple children elements in comment elements
  * Update the obsolete projects.kde.org URL
  * Set a proper agent string for Attica requests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Changes since 5.66.0:
  * Make it compile with qt5.15</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against qt5.15. They reverted change error() to socketError
  * Attica: Convert license statements to SPDX markers
  * Use ecm_qt_install_logging_categories over manual categories file
  * Add a default provider (as per documentation)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633780800">- Add patches to reduce server traffic and improve startup time
  (boo#1191512):
  * 0001-Do-not-start-basejobs-twice.patch
  * 0002-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
</package>
<package pkgid="d6175a5ab6240ea6a3e60eec494d2d40ecb6fc01b81cca6394df0be6932f6602" name="attica-qt5-devel" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine with qt5.13
  * Remove deprecated QSignalMapper
  * Fix some clazy error
  * Port to for(...:...)</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Accept any HTTP status between 100 and 199 as benign
  * Additions for ProviderManager documentation
  * [attica] compile without foreach
  * autotests: use new signal failedToLoad in ProviderTest</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Add some documentation for PlatformDependent
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0
- Add 0001-Fix-the-attica-pkgconfig-file.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix the attica pkgconfig file.
- Drop 0001-Fix-the-attica-pkgconfig-file.patch, merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better
  * Add some std::move in setter functions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * [Attica] Port QRegExp to QRegularExpression
  * qrand is deprecated. Port to QRandomGenerator
  * Don't use a verified nullptr as a data source
  * Support multiple children elements in comment elements
  * Update the obsolete projects.kde.org URL
  * Set a proper agent string for Attica requests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Changes since 5.66.0:
  * Make it compile with qt5.15</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against qt5.15. They reverted change error() to socketError
  * Attica: Convert license statements to SPDX markers
  * Use ecm_qt_install_logging_categories over manual categories file
  * Add a default provider (as per documentation)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633780800">- Add patches to reduce server traffic and improve startup time
  (boo#1191512):
  * 0001-Do-not-start-basejobs-twice.patch
  * 0002-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
</package>
<package pkgid="322a910b337d3905450a7003ca0649d6596a53b39d517b8becf68b74a8610db9" name="audacity" arch="src">
  <version epoch="0" ver="2.2.2" rel="lp152.4.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
  <changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
  <changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
  <changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
  <changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Remove conditionals for ffmpeg, lame, mad, twolame.</changelog>
  <changelog author="davejplater@gmail.com" date="1503662401">- Restore conditionals for lame, mad and twolame.</changelog>
  <changelog author="aloisio@gmx.com" date="1509883200">- Update to version 2.2.0
  Improvements:
  * Four Selectable themes provided, with new 'Light' theme as
    default, plus option to customize
  * Many menu changes:
    + Menus Reorganized
    + Extended menu bar provided
    + New keyboard commands for working with clips
  * Help buttons ? in Preferences, Effects, Generators and
    Analyzers - and other places
  * Non-Greying out of effects when no selection (and explanatory
    dialog with help button)
  * Playback of MIDI (and Allegro) files imported into Note Tracks
    is now available.
  * 'Center' option in Selection Toolbar
  * Stem plots
  * Major overhaul to documentation/manual including many new
    images and streamlined text on landing pages for in-program
    help.
  Other Changes:
  * Append-record is now the default (use Shift + Record for old
    behavior, to record on a new track)
  * The Esc key now cancels all click-and-drag actions. It also
    chooses among overlapping mouse click targets, which is
    especially useful in the Multi-Tool.
  * Sync-Lock button removed (use menu item or keyboard shortcut
    instead)
  * New preferences and preference pages
  * Overhaul of much code:
    + Overhaul of envelope handling code to deal with some
    anomalies
    + Overhaul of exception handling for greater safety
  * New Logo
  Bug Fixes:
  * Major work on bug fixing. 198 bugs that were in 2.1.3 fixed
    for 2.2.0.
    + The most serious bug fixed this time round was bug 437 which
    was about what happens when Audacity is recording and runs
    out of storage.
    + The problems of incomplete support for macOs Sierra have
    been resolved (including bug 290, bug 1567, bug 1702, and bug
    1703).
    + Most of the bugs fixed were more minor, such as bug 463
    which was about a case in which the numbering on the timeline
    could display incorrect times.
- Added audacity-no_return_in_nonvoid.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1509883201">- Enabled mad, twolame and lame for 42.3</changelog>
  <changelog author="davejplater@gmail.com" date="1516017600">- Update to maintenance release version 2.2.1
- Upstream changes and fixes:
  * Waveform colorways:
  You can optionally change the colorway of the waveforms
  displayed in your project. The setting is per track and not per
  project so you can have multiple colorways in the same project.
  * "Save Other" reverts to "Export" in the File menu:
  When we made the menu changes for 2.2.0 we introduced an entry
  into the File menu called "Save Other" which led to a sub-menu
  for exporting various audio formats.
  Many users were confused by this change and found it hard to
  find where they could export.
  * Bug #1770 - Crash applying certain chain files
  * Bug #1783 - Preview fails when selection extends before zero
  * Bug #1787 - Auto-scroll stopped working in 2.2.0
  * Bug #1765 - Using File &gt; Open to import audio gives wrong zoom
  level and no scroll bar slider.</changelog>
  <changelog author="jengelh@inai.de" date="1516017601">- Trim redundant parts from summary.</changelog>
  <changelog author="davejplater@gmail.com" date="1516968000">- Build with gcc7 for Leap:42.3 and -fstack-clash-protection</changelog>
  <changelog author="davejplater@gmail.com" date="1519300800">- Update to release version 2.2.2.
- Rebase audacity-no_buildstamp.patch.
- Removed incorporated audacity-fix-nonsense.patch.
- Added audacity-misc-errors.patch to fix various errors picked
  up by rpmlint.
- Added to audacity-no_return_in_nonvoid.patch.
- Upstream changes:
  * Easier zooming in and out with mousewheel, new Zoom Toggle
  command, and context menu for vertical rulers.
  * Easy access to change keyboard bindings of menu commands
  by holding Shift key.
  * Detection of dropout errors while recording with
  overburdened CPU.
  * Improved contrasts in Light and Dark themes
  * Half-wave display option
  * Several bugs/annoyances in 2.2.1 are now fixed</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1607083200">- Created audacity-CVE-2020-11867.patch to prevent other users
  reading sensitive data. boo#1179449</changelog>
</package>
<package pkgid="fa38fe4028abf3a635d8c80a338003ef357413b56858cb80222574014b7103e0" name="audacity" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="lp152.4.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
  <changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
  <changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
  <changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
  <changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Remove conditionals for ffmpeg, lame, mad, twolame.</changelog>
  <changelog author="davejplater@gmail.com" date="1503662401">- Restore conditionals for lame, mad and twolame.</changelog>
  <changelog author="aloisio@gmx.com" date="1509883200">- Update to version 2.2.0
  Improvements:
  * Four Selectable themes provided, with new 'Light' theme as
    default, plus option to customize
  * Many menu changes:
    + Menus Reorganized
    + Extended menu bar provided
    + New keyboard commands for working with clips
  * Help buttons ? in Preferences, Effects, Generators and
    Analyzers - and other places
  * Non-Greying out of effects when no selection (and explanatory
    dialog with help button)
  * Playback of MIDI (and Allegro) files imported into Note Tracks
    is now available.
  * 'Center' option in Selection Toolbar
  * Stem plots
  * Major overhaul to documentation/manual including many new
    images and streamlined text on landing pages for in-program
    help.
  Other Changes:
  * Append-record is now the default (use Shift + Record for old
    behavior, to record on a new track)
  * The Esc key now cancels all click-and-drag actions. It also
    chooses among overlapping mouse click targets, which is
    especially useful in the Multi-Tool.
  * Sync-Lock button removed (use menu item or keyboard shortcut
    instead)
  * New preferences and preference pages
  * Overhaul of much code:
    + Overhaul of envelope handling code to deal with some
    anomalies
    + Overhaul of exception handling for greater safety
  * New Logo
  Bug Fixes:
  * Major work on bug fixing. 198 bugs that were in 2.1.3 fixed
    for 2.2.0.
    + The most serious bug fixed this time round was bug 437 which
    was about what happens when Audacity is recording and runs
    out of storage.
    + The problems of incomplete support for macOs Sierra have
    been resolved (including bug 290, bug 1567, bug 1702, and bug
    1703).
    + Most of the bugs fixed were more minor, such as bug 463
    which was about a case in which the numbering on the timeline
    could display incorrect times.
- Added audacity-no_return_in_nonvoid.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1509883201">- Enabled mad, twolame and lame for 42.3</changelog>
  <changelog author="davejplater@gmail.com" date="1516017600">- Update to maintenance release version 2.2.1
- Upstream changes and fixes:
  * Waveform colorways:
  You can optionally change the colorway of the waveforms
  displayed in your project. The setting is per track and not per
  project so you can have multiple colorways in the same project.
  * "Save Other" reverts to "Export" in the File menu:
  When we made the menu changes for 2.2.0 we introduced an entry
  into the File menu called "Save Other" which led to a sub-menu
  for exporting various audio formats.
  Many users were confused by this change and found it hard to
  find where they could export.
  * Bug #1770 - Crash applying certain chain files
  * Bug #1783 - Preview fails when selection extends before zero
  * Bug #1787 - Auto-scroll stopped working in 2.2.0
  * Bug #1765 - Using File &gt; Open to import audio gives wrong zoom
  level and no scroll bar slider.</changelog>
  <changelog author="jengelh@inai.de" date="1516017601">- Trim redundant parts from summary.</changelog>
  <changelog author="davejplater@gmail.com" date="1516968000">- Build with gcc7 for Leap:42.3 and -fstack-clash-protection</changelog>
  <changelog author="davejplater@gmail.com" date="1519300800">- Update to release version 2.2.2.
- Rebase audacity-no_buildstamp.patch.
- Removed incorporated audacity-fix-nonsense.patch.
- Added audacity-misc-errors.patch to fix various errors picked
  up by rpmlint.
- Added to audacity-no_return_in_nonvoid.patch.
- Upstream changes:
  * Easier zooming in and out with mousewheel, new Zoom Toggle
  command, and context menu for vertical rulers.
  * Easy access to change keyboard bindings of menu commands
  by holding Shift key.
  * Detection of dropout errors while recording with
  overburdened CPU.
  * Improved contrasts in Light and Dark themes
  * Half-wave display option
  * Several bugs/annoyances in 2.2.1 are now fixed</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1607083200">- Created audacity-CVE-2020-11867.patch to prevent other users
  reading sensitive data. boo#1179449</changelog>
</package>
<package pkgid="669e1a47f6d4c2dc85faa87b6b44b2ed665ab5258e1c954068ff6709e6031738" name="audacity-lang" arch="noarch">
  <version epoch="0" ver="2.2.2" rel="lp152.4.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
  <changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
  <changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
  <changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
  <changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Remove conditionals for ffmpeg, lame, mad, twolame.</changelog>
  <changelog author="davejplater@gmail.com" date="1503662401">- Restore conditionals for lame, mad and twolame.</changelog>
  <changelog author="aloisio@gmx.com" date="1509883200">- Update to version 2.2.0
  Improvements:
  * Four Selectable themes provided, with new 'Light' theme as
    default, plus option to customize
  * Many menu changes:
    + Menus Reorganized
    + Extended menu bar provided
    + New keyboard commands for working with clips
  * Help buttons ? in Preferences, Effects, Generators and
    Analyzers - and other places
  * Non-Greying out of effects when no selection (and explanatory
    dialog with help button)
  * Playback of MIDI (and Allegro) files imported into Note Tracks
    is now available.
  * 'Center' option in Selection Toolbar
  * Stem plots
  * Major overhaul to documentation/manual including many new
    images and streamlined text on landing pages for in-program
    help.
  Other Changes:
  * Append-record is now the default (use Shift + Record for old
    behavior, to record on a new track)
  * The Esc key now cancels all click-and-drag actions. It also
    chooses among overlapping mouse click targets, which is
    especially useful in the Multi-Tool.
  * Sync-Lock button removed (use menu item or keyboard shortcut
    instead)
  * New preferences and preference pages
  * Overhaul of much code:
    + Overhaul of envelope handling code to deal with some
    anomalies
    + Overhaul of exception handling for greater safety
  * New Logo
  Bug Fixes:
  * Major work on bug fixing. 198 bugs that were in 2.1.3 fixed
    for 2.2.0.
    + The most serious bug fixed this time round was bug 437 which
    was about what happens when Audacity is recording and runs
    out of storage.
    + The problems of incomplete support for macOs Sierra have
    been resolved (including bug 290, bug 1567, bug 1702, and bug
    1703).
    + Most of the bugs fixed were more minor, such as bug 463
    which was about a case in which the numbering on the timeline
    could display incorrect times.
- Added audacity-no_return_in_nonvoid.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1509883201">- Enabled mad, twolame and lame for 42.3</changelog>
  <changelog author="davejplater@gmail.com" date="1516017600">- Update to maintenance release version 2.2.1
- Upstream changes and fixes:
  * Waveform colorways:
  You can optionally change the colorway of the waveforms
  displayed in your project. The setting is per track and not per
  project so you can have multiple colorways in the same project.
  * "Save Other" reverts to "Export" in the File menu:
  When we made the menu changes for 2.2.0 we introduced an entry
  into the File menu called "Save Other" which led to a sub-menu
  for exporting various audio formats.
  Many users were confused by this change and found it hard to
  find where they could export.
  * Bug #1770 - Crash applying certain chain files
  * Bug #1783 - Preview fails when selection extends before zero
  * Bug #1787 - Auto-scroll stopped working in 2.2.0
  * Bug #1765 - Using File &gt; Open to import audio gives wrong zoom
  level and no scroll bar slider.</changelog>
  <changelog author="jengelh@inai.de" date="1516017601">- Trim redundant parts from summary.</changelog>
  <changelog author="davejplater@gmail.com" date="1516968000">- Build with gcc7 for Leap:42.3 and -fstack-clash-protection</changelog>
  <changelog author="davejplater@gmail.com" date="1519300800">- Update to release version 2.2.2.
- Rebase audacity-no_buildstamp.patch.
- Removed incorporated audacity-fix-nonsense.patch.
- Added audacity-misc-errors.patch to fix various errors picked
  up by rpmlint.
- Added to audacity-no_return_in_nonvoid.patch.
- Upstream changes:
  * Easier zooming in and out with mousewheel, new Zoom Toggle
  command, and context menu for vertical rulers.
  * Easy access to change keyboard bindings of menu commands
  by holding Shift key.
  * Detection of dropout errors while recording with
  overburdened CPU.
  * Improved contrasts in Light and Dark themes
  * Half-wave display option
  * Several bugs/annoyances in 2.2.1 are now fixed</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1607083200">- Created audacity-CVE-2020-11867.patch to prevent other users
  reading sensitive data. boo#1179449</changelog>
</package>
<package pkgid="ce9fd8a49b3669afb7bbbb9dc35dd026455873b62508fefa7bb782f5e5cd0346" name="audit" arch="i586">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="02b6281ff06fe2503ba7d37c7eb4f78398a34e2ae45e09d8d3c266ff3721bdf7" name="audit" arch="src">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1364212800">- Version 2.2.3
- Code cleanups
- In spec file, don't own lib64/audit
- Update man pages
- Aureport no longer reads auditd.conf when stdin is used
- Don't let systemd kill auditd if auditctl errors out
- Update syscall table for 3.7 and 3.8 kernels
- Add interpretation for setns and unshare syscalls
- Code cleanup (Tyler Hicks)
- Documentation cleanups (Laurent Bigonville)
- Add dirfd interpretation to the *at functions
- Add termination signal to clone flags interpretation
- Update stig.rules
- In auditctl, when listing rules don't print numeric value of dir fields
- Add support for rng resource type in auvirt
- Fix aulast bad login output (#922508)
- In ausearch, allow negative numbers for session and auid searches
- In audisp-remote, if disk_full_action is stop then stop sending (#908977)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1364212801">- --with-libcap-ng=yes has no effect if libcap-ng is not
  buildrequired and the lack of those requires causes a broken
  configure script after autoreconf add pkgconfig(libcap-ng)
  to both audit and audit-secondary, cap-ng is actually only
  use in the latter.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- audit-no_m4_dir.patch: Removed AC_CONFIG_MACRO_DIR([m4]) from
  configure.ac to fix build with new automake</changelog>
  <changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec</changelog>
  <changelog author="coolo@suse.com" date="1372420800">- remove libcap-ng too from audit.spec as it's only needed for plugins
  (and libcap-ng itself needs python to build bindings)</changelog>
  <changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2
  Changelog 2.3.2
  - Put RefuseManualStop in the right systemd section (#969345)
  - Add legacy restart scripts for systemd support
  - Add more syscall argument interpretations
  - Add 'unset' keyword for uid &amp; gid values in auditctl
  - In ausearch, parse obj in IPC records
  - In ausearch, parse subj in DAEMON_ROTATE records
  - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
  - In auditd, restart dispatcher on SIGHUP if it had previously exited
  - In audispd, exit when no active plugins are detected on reconfigure
  - In audispd, clear signal mask set by libev so that SIGHUP works again
  - In audispd, track binary plugins and restart if binary was updated
  - In audispd, make sure we send signals to the correct process
  - In auditd, clear signal mask when spawning any child process
  - In audispd, make builtin plugins respond to SIGHUP
  - In auparse, interpret mode flags of open syscall if O_CREAT is passed
  - In audisp-remote, don't make address lookup always a permanent failure
  - In audisp-remote, remove EOE events more efficiently
  - In auditd, log the reason when email account is not valid
  - In audisp-remote, change default remote_ending action to reconnect
  - Add support for Aarch64 processors
  Changelog 2.3.1
  - Rearrange auditd setting enabled and pid to avoid a race (#910568)
  - Interpret the ocomm field from OBJ_PID records
  - Fix missing 'then' statement in sysvinit script
  - Switch ausearch to use libauparse for interpretting fields
  - In libauparse, interpret prctl arg0, sched_setscheduler arg1
  - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
  - In libauparse, interpret send* flags argument
  - In libauparse, interpret level and name options for set/getsockopt
  - In ausearch/report, don't flush events until last file (Burn Alting)
  - Don't use systemctl to stop the audit daemon
  Changelog 2.3
  - The clone(2) man page is really clone(3), fix interpretation of clone syscall
  - Add systemd support for reload (#901533)
  - Allow -F msgtype on the user filter
  - Add legacy support for resuming logging under systemd (#830780)
  - Add legacy support for rotating logs under systemd (#916611)
  - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
  - Updated man pages
  - Update libev to 4.15
  - Update syscall tables for 3.9 kernel
  - Interpret MQ_OPEN events
  - Add augenrules support (Burn Alting)
  - Consume less stack sending audit events</changelog>
  <changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3
  Changelog 2.3.3
  - Documentation updates
  - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes
  - Update interpreting scheduler policy names
  - Update automake files to automake-1.13.4
  - Remove CAP_COMPROMISE_KERNEL interpretation
  - Parse name field in AVC's (#1049916)
  - Add missing typedef for auparse_type_t enumeration (#1053424)
  - Fix parsing encoded filenames in records
  - Parse SECCOMP events</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6
  Changelog 2.3.6
  - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing
  - Improve ARM and AARCH64 support (AKASHI Takahiro)
  - Add ausearch --checkpoint feature (Burn Alting)
  - Add --arch option to ausearch
  - Improve too long config line in audispd, auditd, and auparse (#1071580)
  - Fix aulast to accept the new AUDIT_LOGIN record format
  - Remove clear_config symbol in auparse
  Changelog 2.3.5
  - In CRYPTO_KEY_USER events, do not interpret the 'fp' field
  - Change formatting of rules listing in auditctl to look like audit.rules
  - Change auditctl to do all netlink comm and then print rules
  - Add a debug option to ausearch to find skipped events
  - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format)
  - In auditd, when shifting logs, ignore the num_logs setting (#950158)
  - Allow passing a directory as the input file for ausearch/report (LC Bruzenak)
  - Interpret syscall fields in SECCOMP events
  - Increase a couple buffers to handle longer input
  Changelog 2.3.4
  - Parse path in CONFIG_CHANGE events
  - In audisp-remote, fix retry logic for temporary network failures
  - In auparse, add get_type_name function
  - Add --no-config command option to aureport
  - Fix interpretting MCS seliunx contexts in ausearch (#970675)
  - In auparse, classify selinux contexts as MAC_LABEL field type
  - In ausearch/report parse vm-ctx and img-ctx as selinux labels
  - Update translation tables for the 3.14 kernel</changelog>
  <changelog author="tonyj@suse.com" date="1409659200">- Add support for ppc64le (bnc#891861)
  New patch: audit-add-ppc64le-mach-support.patch</changelog>
  <changelog author="tonyj@suse.com" date="1409659201">- Update to version 2.4
  Changelog 2.4
  - Optionally parse loginuids, (e)uids, &amp; (e)gids in ausearch/report
  - In auvirt, anomaly events don't have uuid (#1111448)
  - Fix category handling in various records (#1120286)
  - Fix ausearch handling of session id on 32 bit systems
  - Set systemd startup to wait until systemd-tmpfiles-setup.service (#1097314)
  - Interpret a0 of socketcall and ipccall syscalls
  - Add pkgconfig file for libaudit
  - Add go language bindings for limited use of libaudit
  - Fix ausearch handling of exit code on 32 bit systems
  - Fix bug in aureport string linked list handling
  - Document week-ago time setting in ausearch/report man page
  - Update tables for 3.16 kernel
  - In aulast, on bad logins only record user_login proof and use it
  - Add libaudit API for kernel features
  - If audit=0 on kernel cmnd line, skip systemd activation (Cristian Rodríguez)
  - Add checkpoint --start option to ausearch (Burn Alting)
  - Fix arch matching in ausearch
  - Add --loginuid-immutable option to auditctl
  - Fix memory leak in auditd when log_format is set to NOLOG
  - Update auditctl to display features in the status command
  - Add ausearch_add_timestamp_item_ex() to auparse
  Changelog 2.3.7
  - Limit number of options in a rule in libaudit
  - Auditctl cannot load rule with lots of syscalls (#1089713)
  - In ausearch, fix checkpointing when inode is reused by new log (Burn Alting)
  - Add PROCTITLE and FEATURE_CHANGE event types</changelog>
  <changelog author="mq@suse.cz" date="1416830400">- Update to version 2.4.1
  Changelog 2.4.1
  - Make python3 support easier
  - Add support for ppc64le (Tony Jones)
  - Add some translations for a1 of ioctl system calls
  - Add command &amp; virtualization reports to aureport
  - Update aureport config report for new events
  - Add account modification summary report to aureport
  - Add GRP_MGMT and GRP_CHAUTHTOK event types
  - Correct aureport account change reports
  - Add integrity event report to aureport
  - Add config change summary report to aureport
  - Adjust some syslogging level settings in audispd
  - Improve parsing performance in everything
  - When ausearch outputs a line, use the previously parsed values (Burn Alting)
  - Improve searching and interpreting groups in events
  - Fully interpret the proctitle field in auparse
  - Correct libaudit and auditctl support for kernel features
  - Add support for backlog_time_wait setting via auditctl
  - Update syscall tables for the 3.18 kernel
  - Ignore DNS failure for email validation in auditd (#1138674)
  - Allow rotate as action for space_left and disk_full in auditd.conf
  - Correct login summary report of aureport
  - Auditctl syscalls can be comma separated list now
  - Update rules for new subsystems and capabilities
- Drop patch audit-add-ppc64le-mach-support.patch (already upstream)</changelog>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4 (bsc#941922, CVE-2015-5186)
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
- Require pkgconfig for build
  Changelog 2.4.4
  - Fix linked list correctness in ausearch/report
  - Add more cross compile fixups (Clayton Shotwell)
  - Update auparse python bindings
  - Update libev to 4.20
  - Fix CVE-2015-5186 Audit: log terminal emulator escape sequences handling
  Changelog 2.4.3
  - Add python3 support for libaudit
  - Cleanup automake warnings
  - Add AuParser_search_add_timestamp_item_ex to python bindings
  - Add AuParser_get_type_name to python bindings
  - Correct processing of obj_gid in auditctl (Aleksander Zdyb)
  - Make plugin config file parsing more robust for long lines (#1235457)
  - Make auditctl status print lost field as unsigned number
  - Add interpretation mode for auditctl -s
  - Add python3 support to auparse library
  - Make --enable-zos-remote a build time configuration option (Clayton Shotwell)
  - Updates for cross compiling (Clayton Shotwell)
  - Add MAC_CHECK audit event type
  - Add libauparse pkgconfig file (Aleksander Zdyb)
  Changelog 2.4.2
  - Ausearch should parse exe field in SECCOMP events
  - Improve output for short mode interpretations in auparse
  - Add CRYPTO_IKE_SA and CRYPTO_IPSEC_SA events
  - If auditctl is reading rules from a file, send messages to syslog (#1144252)
  - Correct lookup of ppc64le when determining machine type
  - Increase time buffer for wide character numbers in ausearch/report (#1200314)
  - In aureport, add USER_TTY events to tty report
  - In audispd, limit reporting of queue full messages (#1203810)
  - In auditctl, don't segfault when invalid options passed (#1206516)
  - In autrace, remove some older unimplemented syscalls for aarch64 (#1185892)
  - In auditctl, correct lookup of aarch64 in arch field (#1186313)
  - Update lookup tables for 4.1 kernel</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="acf9124befa04208be37a1ec951e2f8e6cfae1bf641bb084b447cbe7bbd21a7f" name="audit" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="37d84bd6d8001aba0e16dbc998b1dc8029b856dc3f659145642ff0c9077b3c88" name="audit-audispd-plugins" arch="i586">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="d22ac537f1e942576b4bc2a32592a92784f89e24f4aa50a8a413b156ac6a9b36" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="74e86f2fd831a5167566bd5391dd9797d6818ffa6ade8dd7df2ae6bfb1f509e8" name="audit-devel" arch="i586">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="mq@suse.cz" date="1416830400">- Update to version 2.4.1
  Changelog 2.4.1
  - Make python3 support easier
  - Add support for ppc64le (Tony Jones)
  - Add some translations for a1 of ioctl system calls
  - Add command &amp; virtualization reports to aureport
  - Update aureport config report for new events
  - Add account modification summary report to aureport
  - Add GRP_MGMT and GRP_CHAUTHTOK event types
  - Correct aureport account change reports
  - Add integrity event report to aureport
  - Add config change summary report to aureport
  - Adjust some syslogging level settings in audispd
  - Improve parsing performance in everything
  - When ausearch outputs a line, use the previously parsed values (Burn Alting)
  - Improve searching and interpreting groups in events
  - Fully interpret the proctitle field in auparse
  - Correct libaudit and auditctl support for kernel features
  - Add support for backlog_time_wait setting via auditctl
  - Update syscall tables for the 3.18 kernel
  - Ignore DNS failure for email validation in auditd (#1138674)
  - Allow rotate as action for space_left and disk_full in auditd.conf
  - Correct login summary report of aureport
  - Auditctl syscalls can be comma separated list now
  - Update rules for new subsystems and capabilities
- Drop patch audit-add-ppc64le-mach-support.patch (already upstream)</changelog>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4 (bsc#941922, CVE-2015-5186)
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
- Require pkgconfig for build
  Changelog 2.4.4
  - Fix linked list correctness in ausearch/report
  - Add more cross compile fixups (Clayton Shotwell)
  - Update auparse python bindings
  - Update libev to 4.20
  - Fix CVE-2015-5186 Audit: log terminal emulator escape sequences handling
  Changelog 2.4.3
  - Add python3 support for libaudit
  - Cleanup automake warnings
  - Add AuParser_search_add_timestamp_item_ex to python bindings
  - Add AuParser_get_type_name to python bindings
  - Correct processing of obj_gid in auditctl (Aleksander Zdyb)
  - Make plugin config file parsing more robust for long lines (#1235457)
  - Make auditctl status print lost field as unsigned number
  - Add interpretation mode for auditctl -s
  - Add python3 support to auparse library
  - Make --enable-zos-remote a build time configuration option (Clayton Shotwell)
  - Updates for cross compiling (Clayton Shotwell)
  - Add MAC_CHECK audit event type
  - Add libauparse pkgconfig file (Aleksander Zdyb)
  Changelog 2.4.2
  - Ausearch should parse exe field in SECCOMP events
  - Improve output for short mode interpretations in auparse
  - Add CRYPTO_IKE_SA and CRYPTO_IPSEC_SA events
  - If auditctl is reading rules from a file, send messages to syslog (#1144252)
  - Correct lookup of ppc64le when determining machine type
  - Increase time buffer for wide character numbers in ausearch/report (#1200314)
  - In aureport, add USER_TTY events to tty report
  - In audispd, limit reporting of queue full messages (#1203810)
  - In auditctl, don't segfault when invalid options passed (#1206516)
  - In autrace, remove some older unimplemented syscalls for aarch64 (#1185892)
  - In auditctl, correct lookup of aarch64 in arch field (#1186313)
  - Update lookup tables for 4.1 kernel</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="9ebc4ed3121f79ad41fa3ff6dbc28df9c8714397175abcf0e3ef945b25005bb2" name="audit-devel" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="mq@suse.cz" date="1416830400">- Update to version 2.4.1
  Changelog 2.4.1
  - Make python3 support easier
  - Add support for ppc64le (Tony Jones)
  - Add some translations for a1 of ioctl system calls
  - Add command &amp; virtualization reports to aureport
  - Update aureport config report for new events
  - Add account modification summary report to aureport
  - Add GRP_MGMT and GRP_CHAUTHTOK event types
  - Correct aureport account change reports
  - Add integrity event report to aureport
  - Add config change summary report to aureport
  - Adjust some syslogging level settings in audispd
  - Improve parsing performance in everything
  - When ausearch outputs a line, use the previously parsed values (Burn Alting)
  - Improve searching and interpreting groups in events
  - Fully interpret the proctitle field in auparse
  - Correct libaudit and auditctl support for kernel features
  - Add support for backlog_time_wait setting via auditctl
  - Update syscall tables for the 3.18 kernel
  - Ignore DNS failure for email validation in auditd (#1138674)
  - Allow rotate as action for space_left and disk_full in auditd.conf
  - Correct login summary report of aureport
  - Auditctl syscalls can be comma separated list now
  - Update rules for new subsystems and capabilities
- Drop patch audit-add-ppc64le-mach-support.patch (already upstream)</changelog>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4 (bsc#941922, CVE-2015-5186)
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
- Require pkgconfig for build
  Changelog 2.4.4
  - Fix linked list correctness in ausearch/report
  - Add more cross compile fixups (Clayton Shotwell)
  - Update auparse python bindings
  - Update libev to 4.20
  - Fix CVE-2015-5186 Audit: log terminal emulator escape sequences handling
  Changelog 2.4.3
  - Add python3 support for libaudit
  - Cleanup automake warnings
  - Add AuParser_search_add_timestamp_item_ex to python bindings
  - Add AuParser_get_type_name to python bindings
  - Correct processing of obj_gid in auditctl (Aleksander Zdyb)
  - Make plugin config file parsing more robust for long lines (#1235457)
  - Make auditctl status print lost field as unsigned number
  - Add interpretation mode for auditctl -s
  - Add python3 support to auparse library
  - Make --enable-zos-remote a build time configuration option (Clayton Shotwell)
  - Updates for cross compiling (Clayton Shotwell)
  - Add MAC_CHECK audit event type
  - Add libauparse pkgconfig file (Aleksander Zdyb)
  Changelog 2.4.2
  - Ausearch should parse exe field in SECCOMP events
  - Improve output for short mode interpretations in auparse
  - Add CRYPTO_IKE_SA and CRYPTO_IPSEC_SA events
  - If auditctl is reading rules from a file, send messages to syslog (#1144252)
  - Correct lookup of ppc64le when determining machine type
  - Increase time buffer for wide character numbers in ausearch/report (#1200314)
  - In aureport, add USER_TTY events to tty report
  - In audispd, limit reporting of queue full messages (#1203810)
  - In auditctl, don't segfault when invalid options passed (#1206516)
  - In autrace, remove some older unimplemented syscalls for aarch64 (#1185892)
  - In auditctl, correct lookup of aarch64 in arch field (#1186313)
  - Update lookup tables for 4.1 kernel</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="e6f8b08f3cecf3958e73cc3e1d64752be9942db35670953978bbd218275245f5" name="audit-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="mq@suse.cz" date="1416830400">- Update to version 2.4.1
  Changelog 2.4.1
  - Make python3 support easier
  - Add support for ppc64le (Tony Jones)
  - Add some translations for a1 of ioctl system calls
  - Add command &amp; virtualization reports to aureport
  - Update aureport config report for new events
  - Add account modification summary report to aureport
  - Add GRP_MGMT and GRP_CHAUTHTOK event types
  - Correct aureport account change reports
  - Add integrity event report to aureport
  - Add config change summary report to aureport
  - Adjust some syslogging level settings in audispd
  - Improve parsing performance in everything
  - When ausearch outputs a line, use the previously parsed values (Burn Alting)
  - Improve searching and interpreting groups in events
  - Fully interpret the proctitle field in auparse
  - Correct libaudit and auditctl support for kernel features
  - Add support for backlog_time_wait setting via auditctl
  - Update syscall tables for the 3.18 kernel
  - Ignore DNS failure for email validation in auditd (#1138674)
  - Allow rotate as action for space_left and disk_full in auditd.conf
  - Correct login summary report of aureport
  - Auditctl syscalls can be comma separated list now
  - Update rules for new subsystems and capabilities
- Drop patch audit-add-ppc64le-mach-support.patch (already upstream)</changelog>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4 (bsc#941922, CVE-2015-5186)
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
- Require pkgconfig for build
  Changelog 2.4.4
  - Fix linked list correctness in ausearch/report
  - Add more cross compile fixups (Clayton Shotwell)
  - Update auparse python bindings
  - Update libev to 4.20
  - Fix CVE-2015-5186 Audit: log terminal emulator escape sequences handling
  Changelog 2.4.3
  - Add python3 support for libaudit
  - Cleanup automake warnings
  - Add AuParser_search_add_timestamp_item_ex to python bindings
  - Add AuParser_get_type_name to python bindings
  - Correct processing of obj_gid in auditctl (Aleksander Zdyb)
  - Make plugin config file parsing more robust for long lines (#1235457)
  - Make auditctl status print lost field as unsigned number
  - Add interpretation mode for auditctl -s
  - Add python3 support to auparse library
  - Make --enable-zos-remote a build time configuration option (Clayton Shotwell)
  - Updates for cross compiling (Clayton Shotwell)
  - Add MAC_CHECK audit event type
  - Add libauparse pkgconfig file (Aleksander Zdyb)
  Changelog 2.4.2
  - Ausearch should parse exe field in SECCOMP events
  - Improve output for short mode interpretations in auparse
  - Add CRYPTO_IKE_SA and CRYPTO_IPSEC_SA events
  - If auditctl is reading rules from a file, send messages to syslog (#1144252)
  - Correct lookup of ppc64le when determining machine type
  - Increase time buffer for wide character numbers in ausearch/report (#1200314)
  - In aureport, add USER_TTY events to tty report
  - In audispd, limit reporting of queue full messages (#1203810)
  - In auditctl, don't segfault when invalid options passed (#1206516)
  - In autrace, remove some older unimplemented syscalls for aarch64 (#1185892)
  - In auditctl, correct lookup of aarch64 in arch field (#1186313)
  - Update lookup tables for 4.1 kernel</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="235ae4dbe3649658dabaa58498a5c8c4129c2a077cd522dcc924b22a6528122e" name="audit-secondary" arch="src">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="opensuse@cboltz.de" date="1380715200">- (re-)add rcauditd as symlink to /usr/sbin/service</changelog>
  <changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2. See audit.spec (libaudit1) for upstream
  changelog
- Drop patch 'audit-fix-implicit-defn.patch' (upstream)
- Add patch 'audit-allow-manual-stop.patch' to reinstate service
  stop/restart.
- /etc/sysconfig/audit still existed but was no longer referenced
  by systemd, so remove
- Delete audit-no_plugins.patch, it was stale (no longer referenced
  by specfiles) but had not been removed.</changelog>
  <changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3. See audit.spec (libaudit1) for upstream
  changelog</changelog>
  <changelog author="tonyj@suse.com" date="1393502400">- Add systemd requires (bnc#865849)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1395835200">- fix systemd warning:
  "Configuration file /usr/lib/systemd/system/auditd.service
  is marked world-inaccessible.
  This has no effect as configuration data is accessible
  via APIs without restrictions"
  * indeed restricting access to unit files using filesystem
  permissions is non-sense.</changelog>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6. See audit.spec (libaudit1) for upstream
  changelog</changelog>
  <changelog author="tonyj@suse.com" date="1404993600">- Do not require tclass field to be present when searching for AVC
  records (bnc#878687)
  add patch: audit-ausearch-do-not-require-tclass.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1408104000">- If the system has been booted with audit=0 in the kernel cmdline
  auditd.service must refrain from starting as the relevant kernel
  subsystem will be permanently disabled.
  add patch: auditd-donot-start-if-kernel-cmdline-disabled.patch</changelog>
  <changelog author="tonyj@suse.com" date="1409659200">- Update to version 2.4. See audit.spec (libaudit1) for upstream
  changelog
  Drop patch: auditd-donot-start-if-kernel-cmdline-disabled.patch</changelog>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="0bd659240f01cad5c2134f0b9cbdb52b80212b3a4013eb9b706b8cd08682ef08" name="augeas" arch="i586">
  <version epoch="0" ver="1.10.1" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
</package>
<package pkgid="5875e13e7d0701581a27d9e7e6480006d406c30d4159d41bf8c8eb49d0cf8834" name="augeas" arch="src">
  <version epoch="0" ver="1.10.1" rel="lp152.4.3.1"/>
  <changelog author="cfarrell@suse.com" date="1349870400">- license update: GPL-3.0+ and LGPL-2.1+
  semicolon is ambiguous</changelog>
  <changelog author="poelzleithner@b1-systems.de" date="1365336000">- update to 1.0.0
  - drop bnc-729491-recognize-suse-sysconfig-files.patch:
    upstream ShellVars lense now uses /etc/sysconfig/* include filter
  - drop patches, now upstream: augeas-pkgdeps.diff, augeas-stdio.h.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1386676800">- Update to version 1.1.0
  - Handle files with special characters in their name, bug #343
  - Fix type error in composition ('f; g') of functions, bug #328
  - Improve detection of version script; make build work on Illumos with
    GBU ld (Igor Pashev)
  - augparse: add --trace option to print filenames of all modules being
    loaded
  - Various lens documentation improvements (Jasper Lievisse Adriaanse)
  - Lens changes/additions
  - ActiveMQ_*: new lens for ActiveMQ/JBoss A-MQ (Brian Harrington)
  - AptCacherNGSecurity: new lens for /etc/apt-cacher-ng/security.conf
    (Erik Anderson)
  - Automaster: accept spaces between options
  - BBHosts: support more flags and downtime feature (Mathieu Alorent)
  - Bootconf: new lens for OpenBSD's /etc/boot.conf (Jasper Adriaanse)
  - Desktop: Support dos eol
  - Dhclient: read /etc/dhclient.conf used in OpenBSD (Jasper Adriaanse)
  - Dovecot: New lens for dovecot configurations (Serge Smetana)
  - Fai_Diskconfig: Optimize some regexps
  - Fonts: exclude all README files (Jasper Adriaanse)
  - Inetd: support IPv6 addresses, bug #320
  - IniFile: Add lns_loose and lns_loose_multiline definitions
    Support smart quotes
    Warning: Smart quotes support means users should not add
    escaped double quotes themselves. Tests need to be fixed
    also.
    Use standard Util.comment_generic and Util.empty_generic
    Warning: Existing lens tests must be adapted to use standard
    comments and empty lines
    Allow spaces in entry_multiline* values
    Add entry_generic and entry_multiline_generic
    Add empty_generic and empty_noindent
    Let multiline values begin with a single newline
    Support dos eol
    Warning: Support for dos eol means existing lenses usually
    need to be adapted to exclude \r as well as \n.
  - IPRoute2: Support for iproute2 files (Davide Guerri)
  - JaaS: lens for the Java Authentication and Authorization Service
    (Simon Vocella)
  - JettyRealm: new lens for jetty-realm.properties (Brian Harrington)
  - JMXAccess, JMXPassword: new lenses for ActiveMQ's JMX files
    (Brian Harrington)
  - Krb5: Use standard comments and empty lines
    Support dos eol
    Improve performance
    Accept pkinit_anchors (Andrew Anderson)
  - Lightdm: Use standard comments and empty lines
  - LVM: New lens for LVM metadata (Gabriel)
  - Mdadm_conf: optimize some regexps
  - MongoDBServer: new lens (Brian Harrington)
  - Monit: also load /etc/monitrc (Jasper Adriaanse)
  - MySQL: Use standard comments and empty lines
    Support dos eol
  - NagiosCfg: handle Icinga and resources.cfg (Jasper Adriaanse)
  - Nrpe: accept any config option rather than predefined list (Gonzalo
    Servat); optimize some regexps
  - Ntpd: new lense for OpenNTPD config (Jasper Adriaanse)
  - Odbc: Use standard comments and empty lines
  - Openshift_*: new lenses for Openshift support (Brian Harrington)
  - Quote: allow multiple spaces in quote_spaces; improve docs
  - Passwd: allow period in user names in spec, bug #337; allow overrides
    in nisentry
  - PHP: Support smart quotes
    Use standard comments and empty lines
    Load /etc/php*/fpm/pool.d/*.conf (Enrico Stahn)
  - Postfix_master: allow [] in words, bug #345
  - Resolv: support 'lookup' and 'family' key words, bug #320
    (Jasper Adriaanse))
  - Rsyslog: support :omusrmsg: list of users in actions
  - RX: add CR to RX.space_in
  - Samba: Use standard comments and empty lines
    Support dos eol
  - Schroot: Support smart quotes
  - Services: support port ranges (Branan Purvine-Riley)
  - Shellvars: optimize some regexps; reinstate /etc/sysconfig/network,
    fixes bug #330, RHBZ#904222, RHBZ#920609; parse /etc/rc.conf.local
    from OpenBSD
  - Sip_Conf: New lens for sip.conf configurations (Rob Tucker)
  - Splunk: new lens (Tim Brigham)
  - Subversion: Support smart quotes
    Use standard comments and empty lines
    Use IniFile.entry_multiline_generic
    Use IniFile.empty_noindent
    Support dos eol
  - Sudoers: allow user aliases in specs
  - Sysctl: exclude README file
  - Systemd: Support smart quotes; allow backslashes in values
  - Xinetd: handle missing values in list, bug #307
  - Xorg: allow 'Screen' in Device section, bug #344
  - Yum: Support dos eol, optimize some regexps</changelog>
  <changelog author="meissner@suse.com" date="1386936000">- download url changed, also added keyring and .sig ring</changelog>
  <changelog author="mlatimer@suse.com" date="1399291200">- device_map lense: Find device.map in any dir beneath /boot (bnc#875086)
  augeas-device_map-grub2.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1399377600">- Add check phase, comment out as 2 test fails now.
- Clean up with spec-cleaner
- Version bump to 1.2.0:
  - API changes
  * Add aug_cp and the cp and copy commands
  * aug_to_xml now includes span information in the XML dump
  - General changes/additions
  * Fix documentation link in c_api NaturalDocs menu
  * Fix NaturalDocs documentation for various lenses
  * src/transform.c (filter_matches): wrap fnmatch to ensure that an incl
    pattern containing "//" matches file paths, RHBZ#1031084
  * Correct locations table for transform_save() (Tomas Hoger)
  * Corrections for CVE-2012-0786 tests (Tomas Hoger)
  * Fix umask handling when creating new files, RHBZ#1034261
  - Lens changes/additions
  * Access: support DOMAIN\user syntax for users and groups, bug #353
  * Authorized_Keys: Allow 'ssh-ed25519' as a valid authorized_key
    type (Jasper Lievisse Adriaanse)
  * Automounter: Handle hostnames with dashes in them, GH issue #27
  * Build: Add combinatorics group
  * Cyrus_Imapd: Create new entries without space before separator,
    RHBZ#1014974 (Dietmar Kling)
  * Desktop: Support square brackets in keys
  * Dhclient: Add dhclient.conf path for Debian/Ubuntu (Esteve Fernandez)
  * Dhcpd: Support conditionals, GH issue #34
    Support a wider variety of allow/deny statement, including
    booting and bootp (Yanis Guenane)
    Support a wider variety of DHCP allow/deny/ignore statements
    (Yanis Guenane)
  * Dovecot: Various enhancements and bug fixes (Michael Haslgrübler):
    add mailbox to block_names, fix for block_args in quotes,
    fix for block's brackets upon write,
    fixes broken tests for mailbox,
    fixes indention,
    test case for block_args with ",
    fixes broken indention
    Use Quote module
  * Exports: Permit colons for IPv6 client addresses, bug #366
  * Grub: Support the 'setkey' and 'lock' directives
    NFC fix whitespace errors
    Handle makeactive menu command, bug #340
    Add 'verbose' option, GH issue #73
  * Interfaces: Add in support for the source stanza in
    /etc/network/interfaces files
    Map bond-slaves and bridge-ports to arrays (incompatible
    change) (Kaarle Ritvanen)
    Add /etc/network/interfaces.d/* support
    Allow numeric characters in stanza options (Pascal Lalonde)
  * Koji: New lens to parse Koji configs (Pat Riehecky)
  * MongoDBServer: Accept quoted values (Tomas Klouda)
  * NagiosCfg: Do not try to parse /etc/nagios/nrpe.cfg anymore, GH issue #43
    /etc/nagios/nrpe.cfg is parsed by Nrpe (Yanis Guenane)
  * Nagiosobjects: Add support for optional spaces and indents
    and whole-line comments (Sean Millichamp)
  * OpenVPN: Support daemon, client-config-dir, route, and management
    directives (Freakin https://github.com/Freakin)
  * PHP: allow php-fpm syntax in keys, GH issue #35
  * Postfix_Main: Handle stray whitespace at end of multiline lines, bug #348
  * Postfix_virtual: allow '+' and '=' in email addresses (Tom Hendrikx)
  * Properties: support multiline starting with an empty string, GH issue #19
  * Samba: Permit asterisk in key name, bug #354
  * Shellvars: Read /etc/firewalld/firewalld.conf, bug #363
    Support all types of quoted strings in arrays, bug #357
    Exclude /etc/sysconfig/ip*tables.save files
  * Shellvars, Sysconfig: map "bare" export and unset lines to seq numbered
    nodes to handle multiple variables (incompatible change), RHBZ#1033795
  * Shellvars_list: Handle backtick variable assignments, bug #368
    Allow end-of-line comments, bug #342
  * Simplevars: Add /etc/selinux/semanage.conf
  * Slapd: use smart quotes for database entries; rename by/what to by/access;
    allow access to be absent as per official docs (incompatible change)
  * Sshd: Indent Match entries by 2 spaces by default
    Support Ciphers and KexAlgorithms groups, GH issue #69
    Let all special keys be case-insensitive
  * Sudoers: Permit underscores in group names, bug #370 (Matteo Cerutti)
    Allow uppercase characters in user names, bug #376
  * Sysconfig: Permit empty comments after comment lines, RHBZ#1043636
  * Sysconfig_Route: New lens for RedHat's route configs
  * Syslog: Accept UDP(@) and TCP(@@) protocol, bug #364 (Yanis Guenane)
  * Xymon_Alerting: New lens for Xymon alerting files (François Maillard)
  * Yum: Add yum-cron*.conf files (Pat Riehecky)
    Include only *.repo files from yum.repos.d (Andrew N Golovkov)
    Permit spaces after equals sign in list options, GH issue #45
    Split excludes as lists, bug #275</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Enable tests but "pass" them even with 2 failures.</changelog>
  <changelog author="tchvatal@suse.com" date="1404302400">- Change desc to describe the "tools" not just the library
  bnc#885495.</changelog>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
</package>
<package pkgid="b1d35cb43751104ee179087cad6a4427079974941b5b14e170553ace51abe3cf" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
</package>
<package pkgid="89cf82da9cfdb9710a62a80fd6ba2d72fe8ad348e9e9716da56c3bea83f29ead" name="augeas-devel" arch="i586">
  <version epoch="0" ver="1.10.1" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
</package>
<package pkgid="98ccd3ac5b8731c31fbc542f76265cd39bd3e72fd09cf678f47a803aa3cf99ae" name="augeas-devel" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
</package>
<package pkgid="7979813630b4a4bbda2d3c94696b39fa545a231b62987d83c7711b5c9de7b77c" name="augeas-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
</package>
<package pkgid="847a3ad720e7856bec1c08349e30f2e978654adecccf0b06266a880c4fa304cb" name="augeas-lense-tests" arch="i586">
  <version epoch="0" ver="1.10.1" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
</package>
<package pkgid="c91dc4f8c17d0d0108d4d9d3914ad51c39d242fc883e141c659f01e7e5ebed2c" name="augeas-lense-tests" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
</package>
<package pkgid="8192e2295dffbc75ab633e8d231d6a1dc48e501c252afe058ad2d77d20ec6597" name="augeas-lenses" arch="i586">
  <version epoch="0" ver="1.10.1" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
</package>
<package pkgid="80be0c1f0db14c7e436e89d14accf70920afc47f55b832eae33d55e6251981ff" name="augeas-lenses" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
</package>
<package pkgid="7c5b4714ccd646ed3a319bdb9e20ef6bce2d09329dd05b144c15d8913473a165" name="autofs" arch="src">
  <version epoch="0" ver="5.1.3" rel="lp152.9.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1424174400">- add autofs-5.1.0-dont-pass-sloppy-option-for-other-than-nfs-mounts.patch
  (bsc#911720)</changelog>
  <changelog author="mszeredi@suse.cz" date="1425384000">- prevent potential privilege escalation via interpreter load path
  for program-based automount maps, add the following patches:
  autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  (bnc#917977 CVE-2014-8169)</changelog>
  <changelog author="dmueller@suse.com" date="1430913600">- add autofs-5.1.0-gcc5-fixes.patch: Fix build against gcc 5.x</changelog>
  <changelog author="lchiquitto@suse.com" date="1431864000">- update to version 5.1.1:
  * fix compile error in defaults.c
  * add serialization to sasl init
  * dont allocate dev_ctl_ops too early
  * fix incorrect round robin host detection
  * fix race accessing qdn in get_query_dn()
  * fix leak in cache_push_mapent()
  * fix config entry read buffer not checked
  * fix FILE pointer check in defaults_read_config()
  * fix memory leak in conf_amd_get_log_options()
  * fix signed comparison in inet_fill_net()
  * fix buffer size checks in get_network_proximity()
  * fix leak in get_network_proximity()
  * fix buffer size checks in merge_options()
  * check amd lex buffer len before copy
  * add return check in ldap check_map_indirect()
  * check host macro is set before use
  * check options length before use in parse_amd.c
  * fix some out of order evaluations in parse_amd.c
  * fix copy and paste error in dup_defaults_entry()
  * fix leak in parse_mount()
  * add mutex call return check in defaults.c
  * force disable browse mode for amd format maps
  * fix hosts map options check in lookup_amd_instance()
  * fix memory leak in create_client()
  * fix memory leak in get_exports()
  * fix memory leak in get_defaults_entry()
  * fix out of order clearing of options buffer
  * fix reset amd lexer scan buffer
  * ignore multiple commas in options strings
  * fix typo in flagdir configure option
  * clarify multiple mounts description
  * gaurd against incorrect umount return
  * update man page autofs(8) for systemd
  * dont pass sloppy option for other than nfs mounts
  * make service want network-online
  * fix fix master map type check
  * init qdn before use in get_query_dn()
  * fix typo in update_hosts_mounts()
  * fix hosts map update on reload
  * make negative cache update consistent for all lookup modules
  * ensure negative cache isn't updated on remount
  * dont add wildcard to negative cache
  * add a prefix to program map stdvars
  * add config option to force use of program map stdvars
  * fix incorrect check in parse_mount()
  * handle duplicates in multi mounts
  * revert special case cifs escapes
  * fix map option parsing for 'strictatime'
  * fix showmount search in auto.net
  * remove obsolete comment in auto.net
  * fix macro usage in lookup_program.c
  * fix gcc5 complaints
  * remove unused offset handling code
  * fix mount as you go offset selection
  * link daemon with pthread library (Debian patch)
  * manpage corrections (Debian patch)
  * fix manpages hyphenation (Debian patch).
- ported patches:
  * autofs-5.1.0-dbus-udisks-monitor.patch -&gt;
    autofs-5.1.1-dbus-udisks-monitor.patch
  * autofs-debuginfo-fix.patch -&gt; autofs-5.1.1-debuginfo-fix.patch
  * autofs-5.0.9-suse-auto_master_default.patch -&gt;
    autofs-5.1.1-suse-auto_master_default.patch
  * autofs-5.0.9-task-use-after-free.patch -&gt;
    autofs-5.1.1-task-use-after-free.patch
- remove patches that are now upstream:
  * autofs-5.1.0-dont-pass-sloppy-option-for-other-than-nfs-mounts.patch
  * autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  * autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  * autofs-5.1.0-gcc5-fixes.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233600">- autofs.service: Use KillMode=mixed so "KillSignal" (SIGTERM) is
  only sent to the main process and if still does not exit after
  "TimeoutStopSec" then "SendSIGKILL" is sent to all remaining
  processes of the unit's control group.
  This is the desired behaviour for almost all daemons that
  execute foreign programs.</changelog>
  <changelog author="ro@suse.de" date="1449576000">- add patch autofs-5.1.1-leave_auth_destroy.patch (bnc#958410)
  do not redefined auth_destroy, the reason for this has long
  been fixed in libtirpc (version 0.2.1 is already fine)</changelog>
  <changelog author="jeffm@suse.com" date="1458820800">- improve scalability of direct mount path component creation (bsc#966573).
  * Added autofs-improve-scalability-of-direct-mount-path-comp.patch
  * Refreshed autofs-5.1.1-dbus-udisks-monitor.patch
- Use libldap_r instead of libldap for thread safety (bsc#955477).
  * Added autofs-use-libldap_r-instead-of-libldap-for-thread-safety.patch</changelog>
  <changelog author="jeffm@suse.com" date="1470830400">- Fix spurious ELOOP on certain kinds of failures (bsc#968918):
  * autofs: fix yp map age not updated in s/_/./g case
  * autofs: properly handle errors in lookup_nss_mount
  * Added patches:
    autofs-5.1.1-properly-handle-errors-in-lookup_nss_mount.patch
    autofs-5.1.1-fix-yp-map-age-not-updated-during-map-lookup.patch</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- remove rpmlintrc, review was boo#782691</changelog>
  <changelog author="jeffm@suse.com" date="1502280000">- update to version 5.1.3:
  * limit getgrgid_r() buffer size
  * increase worker thread per-thread stack size
  * fix offset mount location multiple expansion
  * use malloc for expanded map location
  * fix invalid reference in remount_active_mount()
  * fix work around sss startup delay
  * fix possible NULL derefernce
  * use autofs_point to store expire timeout where possibe
  * add config option to use mount request log id
  * factor out set_thread_mount_request_log_id()
  * log functions to prefix messages with attempt_id if available
  * create thread-local ID for mount attempts
  * add the mount requestor's pid to pending_args
  * delay submount exit for amd submounts
  * fix bogus check in expire_cleanup()
  * handle amd cache option all in amd type auto mounts
  * handle map_option cache for top level mounts
  * capture cache option and its settings during parsing
  * add function conf_amd_get_map_options()
  * check for conflicting amd section mounts
  * include amd mount section mounts in master mounts list
  * add function conf_amd_get_mount_paths()
  * add function conf_amd_get_map_name()
  * add support for amd browsable option
  * add ref counting to struct map_source
  * fix typos in README.amd-maps
  * honor last rw in mount options when doing a bind mount
  * set autofs mounts catatonic at exit
  * make set_direct_mount_catatonic() more general
  * check NFS server availability on local mount fallback
  * make lookup_nss_read_master() return nss status
  * don't return until after master map retry read
  * set sane default master read wait timeout
  * dont exit on master map read fail timeout
  * fix included master map not found return
  * fix quoted key handling in sanitize_path()
  * add sss master map wait config option
  * work around sss startup delay
  * add master read wait option
  * wait for master map available at start
  * update and add README for old autofs schema
  * fix create_client() RPC client handling
  * fix _strncmp() usage
  * fix argc off by one in mount_autofs.c
  * fix cachefs parse message not being logged
  * fix typo in MOUNT_FLAG_GHOST comment
  * Avoid local variable name shadowing another
  * configure: add cache variable for Linux proc filesystem check
  * fix count_mounts() function
  * fix short memory allocation in lookup_amd_instance()
  * Fix fgets(3) size argument (another one)
  * Fix typos in error messages
  * Remove unused local 2KB buffer
  * fix file map changed check
  * Change .requestor to .requester for consistency
  * Fix a typo in CREDITS
  * fix libtirpc detection with -Wl,--as-needed
  * Fix size arg of fgets(3)
  * Drop redundant \n in logerr()
  * Fix compiler warning in try_remount()
  * build: check for clock_gettime in librt
  * fix possible memory leak in nfs mount
  * add config option to suppress not found log message
  * properly handle errors in lookup_nss_mount
  * fix yp map age not updated during map lookup
  * fix 'nameing' typo in autofs.conf
  * add remote-fs.target systemd dependency
  * add autofs(5) note of IPv6 libtirpc requirement
  * fix autofs(5) description of supported map sources
  * fix modules make clean target
  * fix Makefile linking dependencies
  * fix handle_mounts() termination condition check
  * log pipe read errors
  * fix use-after-free in st_queue_handler()
  * always set direct mounts catatonic at exit
  * improve scalability of direct mount path component
  * fix use after free in match_my_name()
  * fix memory leak in get_network_proximity()
  * fix typo in autofs_sasl_bind()
  * fix use after free in open_lookup()
  * fix use after free in sun parser parse_init()
  * fix memory leak in ldap do_init()
  * fix memory leak in nisplus lookup_reinit()
  * fix sasl connection concurrancy problem
  * fix unbind sasl external mech
  * remove unused function elapsed()
  * change time() to use monotonic_clock()
  * change remaining gettimeofday() to use clock_gettime()
  * use monotonic clock for indirect mount condition
  * use monotonic clock for direct mount condition
  * define pending condition init helper function
  * use monotonic clock for alarm thread condition wait
  * define monotonic clock helper functions
  * Add a mode option for master map entries
  * fix error handling of is_mounted()
  * fix out of order call in program map lookup
  * add configuration option to use fqdn in mounts
  * update map_hash_table_size description
  * change lookup to use reinit instead of reopen
  * implement reinit in multi lookup module
  * fix map format check in nss_open_lookup() multi map module
  * factor out alloc multi map context
  * factor out free multi map context
  * add type to struct lookup_mod
  * implement reinit in yp lookup module
  * implement reinit in sss lookup module
  * implement reinit in program lookup module
  * implement reinit in nisplus lookup module
  * implement reinit in ldap lookup module
  * implement reinit in hosts lookup module
  * implement reinit in hesiod lookup module
  * implement reinit in file lookup module
  * implement reinit in dir lookup module
  * implement reinit in parse modules
  * add reinit entry point to modules
  * fix nsswitch handling when opening multi map
  * make open_lookup() return nss status
  * move check_nss_result() to nsswitchr.c
  * fix update_hosts_mounts() return
  * fix missing source sss in multi map lookup
  * fix direct map expire not set for initial empty map
  * fix direct mount stale instance flag reset
  * fix error handling on ldap bind fail
  * fix config old name lookup
  * fix rwlock unlock crash
  * fix return handling of do_reconnect() in ldap module
  * make find_server() return a status
  * make find_dc_server() return a status
  * make connect_to_server() return a status
  * make do_connect() return a status
  * move query dn calculation from do_bind() to do_connect()
  * fix return handling in sss lookup module
  * fix left mount count return from umount_multi_triggers()
  * revert fix libtirpc name clash
  * update libtirpc workaround for new soname
  * fix fix gcc5 complaints
  * Removed patches:
    autofs-5.1.1-task-use-after-free.patch
    autofs-improve-scalability-of-direct-mount-path-comp.patch
    autofs-5.1.1-properly-handle-errors-in-lookup_nss_mount.patch
    autofs-5.1.1-fix-yp-map-age-not-updated-during-map-lookup.patch
    autofs-5.1.1-leave_auth_destroy.patch
  * Updated patches for context:
    autofs-5.1.1-dbus-udisks-monitor.patch</changelog>
  <changelog author="jeffm@suse.com" date="1502280001">- Update URL to use www.kernel.org now that ftp is gone.</changelog>
  <changelog author="jeffm@suse.com" date="1502798400">- Add gpg signature</changelog>
  <changelog author="kukuk@suse.de" date="1502798401">- Add libnsl-devel as build require in preparation of libnsl
  removal from glibc</changelog>
  <changelog author="jeffm@suse.com" date="1508328000">- fix ordering of seteuid/setegid in do_spawn (bsc#1062482).
- fix unset tsd group name handling (bsc#1062482).
- fix possible map instance memory leak (bsc#1038198).
- check map instances for staleness on map update (bsc#1038198).
- Added patches:
  - autofs-5-1-3-check-map-instances-for-staleness-on-map-update.patch
  - autofs-5-1-3-fix-ordering-of-seteuid-setegid-in-do_spawn.patch
  - autofs-5-1-3-fix-possible-map-instance-memory-leak.patch
  - autofs-5-1-3-fix-unset-tsd-group-name-handling.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510488000">- Add build require for rpcgen (preparation for removing it from
  glibc)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="nfbrown@suse.com" date="1517745600">- 0001-use_hostname_for_mounts-shouldn-t-prevent-selection-.patch
  Fix handling of replicated NFS server so that
  selection between servers still works sensibly when
  use_hostname_for_mounts is in effect.
  (bsc#1066720)
- 0002-Fix-monotonic_elapsed.patch
  Fix bug introduced with monotonic-time patches which
  causes nanoseconds to be ignored and effectively
  disables sorting based on response time and/or weight.
  (bsc#1066720)</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- BuildRequire pkgconfig(udisks2) instead of udisks2-devel: let's
  be flexible on possible package name changes.
- Package COPYRIGHT as %license instead of %doc.</changelog>
  <changelog author="nfbrown@suse.com" date="1526472000">- 0003-autofs-5.1.4-fix-fd-leak-in-rpc_do_create_client.patch
  Fix filedescriptor leak (bsc#1093436)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1619092800">- Update pidfile path to /run from /var/run (bsc#1185155)</changelog>
</package>
<package pkgid="5acff9f63fce509605bc0b91016dd1c56b24a317d98c0697ef961d14a3676f3c" name="autofs" arch="x86_64">
  <version epoch="0" ver="5.1.3" rel="lp152.9.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1424174400">- add autofs-5.1.0-dont-pass-sloppy-option-for-other-than-nfs-mounts.patch
  (bsc#911720)</changelog>
  <changelog author="mszeredi@suse.cz" date="1425384000">- prevent potential privilege escalation via interpreter load path
  for program-based automount maps, add the following patches:
  autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  (bnc#917977 CVE-2014-8169)</changelog>
  <changelog author="dmueller@suse.com" date="1430913600">- add autofs-5.1.0-gcc5-fixes.patch: Fix build against gcc 5.x</changelog>
  <changelog author="lchiquitto@suse.com" date="1431864000">- update to version 5.1.1:
  * fix compile error in defaults.c
  * add serialization to sasl init
  * dont allocate dev_ctl_ops too early
  * fix incorrect round robin host detection
  * fix race accessing qdn in get_query_dn()
  * fix leak in cache_push_mapent()
  * fix config entry read buffer not checked
  * fix FILE pointer check in defaults_read_config()
  * fix memory leak in conf_amd_get_log_options()
  * fix signed comparison in inet_fill_net()
  * fix buffer size checks in get_network_proximity()
  * fix leak in get_network_proximity()
  * fix buffer size checks in merge_options()
  * check amd lex buffer len before copy
  * add return check in ldap check_map_indirect()
  * check host macro is set before use
  * check options length before use in parse_amd.c
  * fix some out of order evaluations in parse_amd.c
  * fix copy and paste error in dup_defaults_entry()
  * fix leak in parse_mount()
  * add mutex call return check in defaults.c
  * force disable browse mode for amd format maps
  * fix hosts map options check in lookup_amd_instance()
  * fix memory leak in create_client()
  * fix memory leak in get_exports()
  * fix memory leak in get_defaults_entry()
  * fix out of order clearing of options buffer
  * fix reset amd lexer scan buffer
  * ignore multiple commas in options strings
  * fix typo in flagdir configure option
  * clarify multiple mounts description
  * gaurd against incorrect umount return
  * update man page autofs(8) for systemd
  * dont pass sloppy option for other than nfs mounts
  * make service want network-online
  * fix fix master map type check
  * init qdn before use in get_query_dn()
  * fix typo in update_hosts_mounts()
  * fix hosts map update on reload
  * make negative cache update consistent for all lookup modules
  * ensure negative cache isn't updated on remount
  * dont add wildcard to negative cache
  * add a prefix to program map stdvars
  * add config option to force use of program map stdvars
  * fix incorrect check in parse_mount()
  * handle duplicates in multi mounts
  * revert special case cifs escapes
  * fix map option parsing for 'strictatime'
  * fix showmount search in auto.net
  * remove obsolete comment in auto.net
  * fix macro usage in lookup_program.c
  * fix gcc5 complaints
  * remove unused offset handling code
  * fix mount as you go offset selection
  * link daemon with pthread library (Debian patch)
  * manpage corrections (Debian patch)
  * fix manpages hyphenation (Debian patch).
- ported patches:
  * autofs-5.1.0-dbus-udisks-monitor.patch -&gt;
    autofs-5.1.1-dbus-udisks-monitor.patch
  * autofs-debuginfo-fix.patch -&gt; autofs-5.1.1-debuginfo-fix.patch
  * autofs-5.0.9-suse-auto_master_default.patch -&gt;
    autofs-5.1.1-suse-auto_master_default.patch
  * autofs-5.0.9-task-use-after-free.patch -&gt;
    autofs-5.1.1-task-use-after-free.patch
- remove patches that are now upstream:
  * autofs-5.1.0-dont-pass-sloppy-option-for-other-than-nfs-mounts.patch
  * autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  * autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  * autofs-5.1.0-gcc5-fixes.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233600">- autofs.service: Use KillMode=mixed so "KillSignal" (SIGTERM) is
  only sent to the main process and if still does not exit after
  "TimeoutStopSec" then "SendSIGKILL" is sent to all remaining
  processes of the unit's control group.
  This is the desired behaviour for almost all daemons that
  execute foreign programs.</changelog>
  <changelog author="ro@suse.de" date="1449576000">- add patch autofs-5.1.1-leave_auth_destroy.patch (bnc#958410)
  do not redefined auth_destroy, the reason for this has long
  been fixed in libtirpc (version 0.2.1 is already fine)</changelog>
  <changelog author="jeffm@suse.com" date="1458820800">- improve scalability of direct mount path component creation (bsc#966573).
  * Added autofs-improve-scalability-of-direct-mount-path-comp.patch
  * Refreshed autofs-5.1.1-dbus-udisks-monitor.patch
- Use libldap_r instead of libldap for thread safety (bsc#955477).
  * Added autofs-use-libldap_r-instead-of-libldap-for-thread-safety.patch</changelog>
  <changelog author="jeffm@suse.com" date="1470830400">- Fix spurious ELOOP on certain kinds of failures (bsc#968918):
  * autofs: fix yp map age not updated in s/_/./g case
  * autofs: properly handle errors in lookup_nss_mount
  * Added patches:
    autofs-5.1.1-properly-handle-errors-in-lookup_nss_mount.patch
    autofs-5.1.1-fix-yp-map-age-not-updated-during-map-lookup.patch</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- remove rpmlintrc, review was boo#782691</changelog>
  <changelog author="jeffm@suse.com" date="1502280000">- update to version 5.1.3:
  * limit getgrgid_r() buffer size
  * increase worker thread per-thread stack size
  * fix offset mount location multiple expansion
  * use malloc for expanded map location
  * fix invalid reference in remount_active_mount()
  * fix work around sss startup delay
  * fix possible NULL derefernce
  * use autofs_point to store expire timeout where possibe
  * add config option to use mount request log id
  * factor out set_thread_mount_request_log_id()
  * log functions to prefix messages with attempt_id if available
  * create thread-local ID for mount attempts
  * add the mount requestor's pid to pending_args
  * delay submount exit for amd submounts
  * fix bogus check in expire_cleanup()
  * handle amd cache option all in amd type auto mounts
  * handle map_option cache for top level mounts
  * capture cache option and its settings during parsing
  * add function conf_amd_get_map_options()
  * check for conflicting amd section mounts
  * include amd mount section mounts in master mounts list
  * add function conf_amd_get_mount_paths()
  * add function conf_amd_get_map_name()
  * add support for amd browsable option
  * add ref counting to struct map_source
  * fix typos in README.amd-maps
  * honor last rw in mount options when doing a bind mount
  * set autofs mounts catatonic at exit
  * make set_direct_mount_catatonic() more general
  * check NFS server availability on local mount fallback
  * make lookup_nss_read_master() return nss status
  * don't return until after master map retry read
  * set sane default master read wait timeout
  * dont exit on master map read fail timeout
  * fix included master map not found return
  * fix quoted key handling in sanitize_path()
  * add sss master map wait config option
  * work around sss startup delay
  * add master read wait option
  * wait for master map available at start
  * update and add README for old autofs schema
  * fix create_client() RPC client handling
  * fix _strncmp() usage
  * fix argc off by one in mount_autofs.c
  * fix cachefs parse message not being logged
  * fix typo in MOUNT_FLAG_GHOST comment
  * Avoid local variable name shadowing another
  * configure: add cache variable for Linux proc filesystem check
  * fix count_mounts() function
  * fix short memory allocation in lookup_amd_instance()
  * Fix fgets(3) size argument (another one)
  * Fix typos in error messages
  * Remove unused local 2KB buffer
  * fix file map changed check
  * Change .requestor to .requester for consistency
  * Fix a typo in CREDITS
  * fix libtirpc detection with -Wl,--as-needed
  * Fix size arg of fgets(3)
  * Drop redundant \n in logerr()
  * Fix compiler warning in try_remount()
  * build: check for clock_gettime in librt
  * fix possible memory leak in nfs mount
  * add config option to suppress not found log message
  * properly handle errors in lookup_nss_mount
  * fix yp map age not updated during map lookup
  * fix 'nameing' typo in autofs.conf
  * add remote-fs.target systemd dependency
  * add autofs(5) note of IPv6 libtirpc requirement
  * fix autofs(5) description of supported map sources
  * fix modules make clean target
  * fix Makefile linking dependencies
  * fix handle_mounts() termination condition check
  * log pipe read errors
  * fix use-after-free in st_queue_handler()
  * always set direct mounts catatonic at exit
  * improve scalability of direct mount path component
  * fix use after free in match_my_name()
  * fix memory leak in get_network_proximity()
  * fix typo in autofs_sasl_bind()
  * fix use after free in open_lookup()
  * fix use after free in sun parser parse_init()
  * fix memory leak in ldap do_init()
  * fix memory leak in nisplus lookup_reinit()
  * fix sasl connection concurrancy problem
  * fix unbind sasl external mech
  * remove unused function elapsed()
  * change time() to use monotonic_clock()
  * change remaining gettimeofday() to use clock_gettime()
  * use monotonic clock for indirect mount condition
  * use monotonic clock for direct mount condition
  * define pending condition init helper function
  * use monotonic clock for alarm thread condition wait
  * define monotonic clock helper functions
  * Add a mode option for master map entries
  * fix error handling of is_mounted()
  * fix out of order call in program map lookup
  * add configuration option to use fqdn in mounts
  * update map_hash_table_size description
  * change lookup to use reinit instead of reopen
  * implement reinit in multi lookup module
  * fix map format check in nss_open_lookup() multi map module
  * factor out alloc multi map context
  * factor out free multi map context
  * add type to struct lookup_mod
  * implement reinit in yp lookup module
  * implement reinit in sss lookup module
  * implement reinit in program lookup module
  * implement reinit in nisplus lookup module
  * implement reinit in ldap lookup module
  * implement reinit in hosts lookup module
  * implement reinit in hesiod lookup module
  * implement reinit in file lookup module
  * implement reinit in dir lookup module
  * implement reinit in parse modules
  * add reinit entry point to modules
  * fix nsswitch handling when opening multi map
  * make open_lookup() return nss status
  * move check_nss_result() to nsswitchr.c
  * fix update_hosts_mounts() return
  * fix missing source sss in multi map lookup
  * fix direct map expire not set for initial empty map
  * fix direct mount stale instance flag reset
  * fix error handling on ldap bind fail
  * fix config old name lookup
  * fix rwlock unlock crash
  * fix return handling of do_reconnect() in ldap module
  * make find_server() return a status
  * make find_dc_server() return a status
  * make connect_to_server() return a status
  * make do_connect() return a status
  * move query dn calculation from do_bind() to do_connect()
  * fix return handling in sss lookup module
  * fix left mount count return from umount_multi_triggers()
  * revert fix libtirpc name clash
  * update libtirpc workaround for new soname
  * fix fix gcc5 complaints
  * Removed patches:
    autofs-5.1.1-task-use-after-free.patch
    autofs-improve-scalability-of-direct-mount-path-comp.patch
    autofs-5.1.1-properly-handle-errors-in-lookup_nss_mount.patch
    autofs-5.1.1-fix-yp-map-age-not-updated-during-map-lookup.patch
    autofs-5.1.1-leave_auth_destroy.patch
  * Updated patches for context:
    autofs-5.1.1-dbus-udisks-monitor.patch</changelog>
  <changelog author="jeffm@suse.com" date="1502280001">- Update URL to use www.kernel.org now that ftp is gone.</changelog>
  <changelog author="jeffm@suse.com" date="1502798400">- Add gpg signature</changelog>
  <changelog author="kukuk@suse.de" date="1502798401">- Add libnsl-devel as build require in preparation of libnsl
  removal from glibc</changelog>
  <changelog author="jeffm@suse.com" date="1508328000">- fix ordering of seteuid/setegid in do_spawn (bsc#1062482).
- fix unset tsd group name handling (bsc#1062482).
- fix possible map instance memory leak (bsc#1038198).
- check map instances for staleness on map update (bsc#1038198).
- Added patches:
  - autofs-5-1-3-check-map-instances-for-staleness-on-map-update.patch
  - autofs-5-1-3-fix-ordering-of-seteuid-setegid-in-do_spawn.patch
  - autofs-5-1-3-fix-possible-map-instance-memory-leak.patch
  - autofs-5-1-3-fix-unset-tsd-group-name-handling.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510488000">- Add build require for rpcgen (preparation for removing it from
  glibc)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="nfbrown@suse.com" date="1517745600">- 0001-use_hostname_for_mounts-shouldn-t-prevent-selection-.patch
  Fix handling of replicated NFS server so that
  selection between servers still works sensibly when
  use_hostname_for_mounts is in effect.
  (bsc#1066720)
- 0002-Fix-monotonic_elapsed.patch
  Fix bug introduced with monotonic-time patches which
  causes nanoseconds to be ignored and effectively
  disables sorting based on response time and/or weight.
  (bsc#1066720)</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- BuildRequire pkgconfig(udisks2) instead of udisks2-devel: let's
  be flexible on possible package name changes.
- Package COPYRIGHT as %license instead of %doc.</changelog>
  <changelog author="nfbrown@suse.com" date="1526472000">- 0003-autofs-5.1.4-fix-fd-leak-in-rpc_do_create_client.patch
  Fix filedescriptor leak (bsc#1093436)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1619092800">- Update pidfile path to /run from /var/run (bsc#1185155)</changelog>
</package>
<package pkgid="572077392723b81ead53a4c39dce9720fe2219cfc501ef4572f50fe265df8849" name="autogen" arch="i586">
  <version epoch="0" ver="5.18.12" rel="lp152.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425297600">- Remove upsteamed patch:
  * autoopts-remove-stupid-set-e.patch
  * agen5-testsuite.patch
- Cleanup spec file with spec-cleaner
- Use url for source
- Add gpg signature
- Update to 5.18.4
  * Do Not Edit (dne) warning:  the default of printing a date in
    the warning has now changed to not doing so.  The "-d" option
    to suppress the date is now deprecated (ignored).  A new
    option, "-D" will cause the date to be included.  The
    environment variable, "AUTOGEN_DNE_DATE" overrides everything.
  * The RETURN function was not completely implemented and only
    partially worked.  It is working now.
  * optionPrintVersionAndReturn() is a new function for applications
    that wish to extend the behavior of the "--version" option.
  * mdoc and man pages have been greatly improved.
  * libopts tear-off library used stdnoreturn.h and now includes
    infrastructure for systems deficient in that area
  * new function: insert-file  It will simply insert the contents
    of a file (or list of files) into the output stream.</changelog>
  <changelog author="mpluskal@suse.com" date="1432209600">- Update info files dependencies
- Refresh partially upstreamed autogen-build_ldpath.patch
- Update to 5.18.5
  * Guile 1.6 is now obsolete.  1.7/8 or newer from now on.
    Fixed issues with Guile managed locale string processing.
    (It keeps getting better and better all the time and I
    must keep adjusting over and over all the time.)
  * more Guile-config somersaults
    config/misc.def: sometimes, "pkg-config --cflags-only-I" yields
    multiple directories for Guile and that incantation is the only
    way to find libguile/version.h and that header is the only way
    to determine the micro version and the micro version is the best
    way to check for certain types of breakage.  (Testing is too
    convoluted.)
  * for-each handler functions may now be able to free (or not)
    the file text via the "handler-frees" attribute.</changelog>
  <changelog author="schwab@suse.de" date="1432209601">- No longer call autoreconf</changelog>
  <changelog author="mpluskal@suse.com" date="1442404800">- Update to 5.18.6
  * {AG,CL,GD}exe environment variables may be set to force
    bootstrapping with a particular release.
  * MAN_PAGE_DATE can be used with various man page docs to
    override the current date default.
  * project may now be bootstrapped and built in the source
    directory with no ill effect.
  * AutoGen as a daemon will never happen.  Last vestiges gone.
  * templates may now obtain the most recent source modification
    time with "(max-file-time)"</changelog>
  <changelog author="mpluskal@suse.com" date="1449489600">- Update to 5.18.7
  * {AG,CL,GD}exe environment variables may be set to force
  bootstrapping with a particular release.
  * MAN_PAGE_DATE can be used with various man page docs to
  override the current date default.
  * project may now be bootstrapped and built in the source
  directory with no ill effect.
  * AutoGen as a daemon will never happen.  Last vestiges gone.
  * templates may now obtain the most recent source modification
  time with "(max-file-time)"</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Split shared libraries (boo#976068)
- Move info handling to preun section
- Do not ship .la file</changelog>
  <changelog author="mpluskal@suse.com" date="1462276800">- Fix typo in preun script</changelog>
  <changelog author="mpluskal@suse.com" date="1462449600">- Rename devel package to libopts-devel
- Add corresponding obsoletion</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- GNU autogen 5.18.10:
  * NUL terminate CGI definitions text
- GNU autogen 5.18.9:
  * When parsing CGI, do not allow spaces to be lost
  * In producing usage text, check more rigorously that
    option "values" are really not flag characters.
- GNU autogen 5.18.8:
  * Ensure testing vars start as unset for testing
  * happy new year &amp; de-uglifications
- update download URL and usptream signing key</changelog>
  <changelog author="mpluskal@suse.com" date="1483876800">- Update to version 5.8.12:
  * several configury fixes to enable cross platform building.
  * fompletion of a change in "char-mapper" to enable bootstrapping</changelog>
  <changelog author="bwiedemann@suse.com" date="1487764800">- Add autogen-catch-race-error.patch (boo#1021353)</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Add patch to build with guile 2.2:
  * autogen-guile-2.2.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1624622400">- Add reproducible.patch to normalize tar
- Normalize date in man-pages (boo#1047218)</changelog>
</package>
<package pkgid="1e3ba92d8496fa92043f9a380e7327c5e2a8da5ed678571f4b5f10eb6682deb9" name="autogen" arch="src">
  <version epoch="0" ver="5.18.12" rel="lp152.4.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1337688000">- Update to version 5.16
  * Changes, many see http://autogen.sourceforge.net/announce.html.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1342267200">- Fix source URL, this update must reach 12.2 because
  autogen was generating broken C code that segfaults
  with fortify source.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1
- add explicit makeinfo buildrequires, it is required to build</changelog>
  <changelog author="pth@suse.de" date="1366113600">- Update to 5.16.2:
  * Coverity cleanups
  * evade Guile issue on BSD platform.
  * avoid emitting non-error messages to stderr
- Adapt autogen-build_ldpath.patch to the changed sources.</changelog>
  <changelog author="schwab@suse.de" date="1404388800">- Update to 5.18.3
  * ATTRIBUTE_FORMAT_ARG is a configured attribute that wraps
    __attribute__((__format_arg__(n))) procedure declaration attributes.
    To configure it, the ag_macros.m4 has a new macroo,
    AG_COMPILE_FORMAT_ARG (which is a compile only test probe).
  * Auto-edit Guile headers that depend upon configure values
    most especially:  noreturn
    but check for "ptrdiff_t" in our configure too, so that Guile does
    not create its own duplicate definition.
  * Abort from the failing function so that stack traces are useful
  * The libopts m4 configure code must configure the libopts/Makefile
  * Happy 2014 New Year
  * make sure library option handling code does nothing when the
    library is just trying to get information about an option.
  * Only apply texi2mdoc when it is needed.
  * The aoGetsText() emitted i18n helper function needs its argument
    to have the "format_arg" attribute.
  * documentation clarifications
  * properly create generated main procedures from user supplied code.
  * ChangeLog files have been removed from GIT sources
    (though still obtainable with tagged checkouts).
  * LIBGUILE_PATH is not needed and its derivation is wrong on
    where binaries and libraries have different prefixes.
  * fixed char casting issue that shows in UTF-8 files
  * fixed installation error for str2init
  * fixed failure handling in the usage template
  * fix broken flag values for auto-supported options
  * various tweaks to make Coverity happy.
  * allow the fatal error message functions to be tagged "noreturn"
    and incorporate sysnoreturn.h technology into AutoGen.
  * --save-opts documentation cleanup
  * optionMemberList() will return an allocated string containing
    the names of the bits set in the option.
  * tab stripped "here strings" include stripping the backslash
    escape character when it precedes any whitespace character.
- autoopts-remove-stupid-set-e.patch: remove stupid use of set -e
- autogen-setfilename.patch: remove
- autogen-build_ldpath.patch: regenerate
- run testsuite</changelog>
  <changelog author="schwab@suse.de" date="1404475200">- agen5-testsuite.patch: fix spurious testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1425297600">- Remove upsteamed patch:
  * autoopts-remove-stupid-set-e.patch
  * agen5-testsuite.patch
- Cleanup spec file with spec-cleaner
- Use url for source
- Add gpg signature
- Update to 5.18.4
  * Do Not Edit (dne) warning:  the default of printing a date in
    the warning has now changed to not doing so.  The "-d" option
    to suppress the date is now deprecated (ignored).  A new
    option, "-D" will cause the date to be included.  The
    environment variable, "AUTOGEN_DNE_DATE" overrides everything.
  * The RETURN function was not completely implemented and only
    partially worked.  It is working now.
  * optionPrintVersionAndReturn() is a new function for applications
    that wish to extend the behavior of the "--version" option.
  * mdoc and man pages have been greatly improved.
  * libopts tear-off library used stdnoreturn.h and now includes
    infrastructure for systems deficient in that area
  * new function: insert-file  It will simply insert the contents
    of a file (or list of files) into the output stream.</changelog>
  <changelog author="mpluskal@suse.com" date="1432209600">- Update info files dependencies
- Refresh partially upstreamed autogen-build_ldpath.patch
- Update to 5.18.5
  * Guile 1.6 is now obsolete.  1.7/8 or newer from now on.
    Fixed issues with Guile managed locale string processing.
    (It keeps getting better and better all the time and I
    must keep adjusting over and over all the time.)
  * more Guile-config somersaults
    config/misc.def: sometimes, "pkg-config --cflags-only-I" yields
    multiple directories for Guile and that incantation is the only
    way to find libguile/version.h and that header is the only way
    to determine the micro version and the micro version is the best
    way to check for certain types of breakage.  (Testing is too
    convoluted.)
  * for-each handler functions may now be able to free (or not)
    the file text via the "handler-frees" attribute.</changelog>
  <changelog author="schwab@suse.de" date="1432209601">- No longer call autoreconf</changelog>
  <changelog author="mpluskal@suse.com" date="1442404800">- Update to 5.18.6
  * {AG,CL,GD}exe environment variables may be set to force
    bootstrapping with a particular release.
  * MAN_PAGE_DATE can be used with various man page docs to
    override the current date default.
  * project may now be bootstrapped and built in the source
    directory with no ill effect.
  * AutoGen as a daemon will never happen.  Last vestiges gone.
  * templates may now obtain the most recent source modification
    time with "(max-file-time)"</changelog>
  <changelog author="mpluskal@suse.com" date="1449489600">- Update to 5.18.7
  * {AG,CL,GD}exe environment variables may be set to force
  bootstrapping with a particular release.
  * MAN_PAGE_DATE can be used with various man page docs to
  override the current date default.
  * project may now be bootstrapped and built in the source
  directory with no ill effect.
  * AutoGen as a daemon will never happen.  Last vestiges gone.
  * templates may now obtain the most recent source modification
  time with "(max-file-time)"</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Split shared libraries (boo#976068)
- Move info handling to preun section
- Do not ship .la file</changelog>
  <changelog author="mpluskal@suse.com" date="1462276800">- Fix typo in preun script</changelog>
  <changelog author="mpluskal@suse.com" date="1462449600">- Rename devel package to libopts-devel
- Add corresponding obsoletion</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- GNU autogen 5.18.10:
  * NUL terminate CGI definitions text
- GNU autogen 5.18.9:
  * When parsing CGI, do not allow spaces to be lost
  * In producing usage text, check more rigorously that
    option "values" are really not flag characters.
- GNU autogen 5.18.8:
  * Ensure testing vars start as unset for testing
  * happy new year &amp; de-uglifications
- update download URL and usptream signing key</changelog>
  <changelog author="mpluskal@suse.com" date="1483876800">- Update to version 5.8.12:
  * several configury fixes to enable cross platform building.
  * fompletion of a change in "char-mapper" to enable bootstrapping</changelog>
  <changelog author="bwiedemann@suse.com" date="1487764800">- Add autogen-catch-race-error.patch (boo#1021353)</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Add patch to build with guile 2.2:
  * autogen-guile-2.2.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1624622400">- Add reproducible.patch to normalize tar
- Normalize date in man-pages (boo#1047218)</changelog>
</package>
<package pkgid="04db93e4fa7eaad1884f53b880aee7ffca00282f514d23e277eb36c1d66998cb" name="autogen" arch="x86_64">
  <version epoch="0" ver="5.18.12" rel="lp152.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1425297600">- Remove upsteamed patch:
  * autoopts-remove-stupid-set-e.patch
  * agen5-testsuite.patch
- Cleanup spec file with spec-cleaner
- Use url for source
- Add gpg signature
- Update to 5.18.4
  * Do Not Edit (dne) warning:  the default of printing a date in
    the warning has now changed to not doing so.  The "-d" option
    to suppress the date is now deprecated (ignored).  A new
    option, "-D" will cause the date to be included.  The
    environment variable, "AUTOGEN_DNE_DATE" overrides everything.
  * The RETURN function was not completely implemented and only
    partially worked.  It is working now.
  * optionPrintVersionAndReturn() is a new function for applications
    that wish to extend the behavior of the "--version" option.
  * mdoc and man pages have been greatly improved.
  * libopts tear-off library used stdnoreturn.h and now includes
    infrastructure for systems deficient in that area
  * new function: insert-file  It will simply insert the contents
    of a file (or list of files) into the output stream.</changelog>
  <changelog author="mpluskal@suse.com" date="1432209600">- Update info files dependencies
- Refresh partially upstreamed autogen-build_ldpath.patch
- Update to 5.18.5
  * Guile 1.6 is now obsolete.  1.7/8 or newer from now on.
    Fixed issues with Guile managed locale string processing.
    (It keeps getting better and better all the time and I
    must keep adjusting over and over all the time.)
  * more Guile-config somersaults
    config/misc.def: sometimes, "pkg-config --cflags-only-I" yields
    multiple directories for Guile and that incantation is the only
    way to find libguile/version.h and that header is the only way
    to determine the micro version and the micro version is the best
    way to check for certain types of breakage.  (Testing is too
    convoluted.)
  * for-each handler functions may now be able to free (or not)
    the file text via the "handler-frees" attribute.</changelog>
  <changelog author="schwab@suse.de" date="1432209601">- No longer call autoreconf</changelog>
  <changelog author="mpluskal@suse.com" date="1442404800">- Update to 5.18.6
  * {AG,CL,GD}exe environment variables may be set to force
    bootstrapping with a particular release.
  * MAN_PAGE_DATE can be used with various man page docs to
    override the current date default.
  * project may now be bootstrapped and built in the source
    directory with no ill effect.
  * AutoGen as a daemon will never happen.  Last vestiges gone.
  * templates may now obtain the most recent source modification
    time with "(max-file-time)"</changelog>
  <changelog author="mpluskal@suse.com" date="1449489600">- Update to 5.18.7
  * {AG,CL,GD}exe environment variables may be set to force
  bootstrapping with a particular release.
  * MAN_PAGE_DATE can be used with various man page docs to
  override the current date default.
  * project may now be bootstrapped and built in the source
  directory with no ill effect.
  * AutoGen as a daemon will never happen.  Last vestiges gone.
  * templates may now obtain the most recent source modification
  time with "(max-file-time)"</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Split shared libraries (boo#976068)
- Move info handling to preun section
- Do not ship .la file</changelog>
  <changelog author="mpluskal@suse.com" date="1462276800">- Fix typo in preun script</changelog>
  <changelog author="mpluskal@suse.com" date="1462449600">- Rename devel package to libopts-devel
- Add corresponding obsoletion</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- GNU autogen 5.18.10:
  * NUL terminate CGI definitions text
- GNU autogen 5.18.9:
  * When parsing CGI, do not allow spaces to be lost
  * In producing usage text, check more rigorously that
    option "values" are really not flag characters.
- GNU autogen 5.18.8:
  * Ensure testing vars start as unset for testing
  * happy new year &amp; de-uglifications
- update download URL and usptream signing key</changelog>
  <changelog author="mpluskal@suse.com" date="1483876800">- Update to version 5.8.12:
  * several configury fixes to enable cross platform building.
  * fompletion of a change in "char-mapper" to enable bootstrapping</changelog>
  <changelog author="bwiedemann@suse.com" date="1487764800">- Add autogen-catch-race-error.patch (boo#1021353)</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Add patch to build with guile 2.2:
  * autogen-guile-2.2.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1624622400">- Add reproducible.patch to normalize tar
- Normalize date in man-pages (boo#1047218)</changelog>
</package>
<package pkgid="7d95b63ec72b5bab2d18249fcf4087e6bd62177053c045df5af7418e0346b0df" name="automake" arch="noarch">
  <version epoch="0" ver="1.15.1" rel="lp152.5.3.1"/>
  <changelog author="pth@suse.de" date="1423569600">- Update to 1.15:
  New in 1.15:
  * Improvements and refactorings in the install-sh script:
  - It has been modernized, and now makes the following assumptions
  * unconditionally*:
    (1) a working 'dirname' program is available;
    (2) the ${var:-value} shell parameters substitution works;
    (3) the "set -f" and "set +f" shell commands work, and, respectively,
    disable and enable shell globbing.
  - The script implements stricter error checking, and now it complains
    and bails out if any of the following expectations is not met:
    (1) the options -d and -t are never used together;
    (2) the argument passed to option -t is a directory;
    (3) if there are two or more SOURCEFILE arguments, the
    DESTINATION argument must be a directory.
  * Automake-generated testsuites:
  - The default test-driver used by the Automake-generates testsuites
    now appends the result and exit status of each "plain" test to the
    associated log file (automake bug#11814).
  - The perl implementation of the TAP testsuite driver is no longer
    installed in the Automake's scripts directory, and is instead just
    distributed as a "contrib" addition.  There should be no reason to
    use this implementation anyway in real packages, since the awk+shell
    implementation of the TAP driver (which is documented in the manual)
    is more portable and has feature parity with the perl implementation.
  - The rule generating 'test-suite.log' no longer risk incurring in an
    extra useless "make all" recursive invocation in some corner cases
    (automake bug#16302).
  * Distribution:
  - Automake bug#18286: "make distcheck" could sometimes fail to detect
    files missing from the distribution tarball, especially in those cases
    where both the generated files and their dependencies are explicitly
    in $(srcdir).  An important example of this are *generated* makefile
    fragments included at Automake time in Makefile.am; e.g.:
    ...
    $(srcdir)/fragment.am: $(srcdir)/data.txt $(srcdir)/preproc.sh
    cd $(srcdir) &amp;&amp; $(SHELL) preproc.sh &lt;data.txt &gt;fragment.am
    include $(srcdir)/fragment.am
    ...
    If the use forgot to add data.txt and/or preproc.sh in the distribution
    tarball, "make distcheck" would have erroneously succeeded!  This issue
    is now fixed.
  - As a consequence of the previous change, "make distcheck" will run
    using '$(distdir)/_build/sub' as the build directory, rather than
    simply '$(distdir)/_build' (as it was the case for Automake 1.14 and
    earlier).  Consequently, the './configure' and 'make' invocations
    issued by the distcheck recipe now have $(srcdir) equal to '../..',
    rather than to just '..'.  Dependent and similar variables (e.g.,
    '$(top_srcdir)') are also changed accordingly.
    Thus, Makefiles that made assumptions about the exact values of the
    build and source directories used by "make distcheck" will have to
    be adjusted.  Notice that making such assumptions was a bad and
    unsupported practice anyway, since the exact locations of those
    directories should be considered implementation details, and we
    reserve the right to change them at any time.
  * Miscellaneous bugs fixed:
  - The expansion of AM_INIT_AUTOMAKE ends once again with a trailing
    newline (bug#16841).  Regression introduced in Automake 1.14.
  - We no longer risk to use '$ac_aux_dir' before it's defined (see
    automake bug#15981). Bug introduced in Automake 1.14.
  - The code used to detect whether the currently used make is GNU make
    or not (relying on the private macro 'am__is_gnu_make') no longer
    risks causing "Arg list too long" for projects using automatic
    dependency tracking and having a ton of source files (bug#18744).
  - Automake tries to offer a more deterministic output for generated
    Makefiles, in the face of the newly-introduced randomization for
    hash keys order in Perl 5.18.
  - In older Automake versions, if a user defined one single Makefile
    fragment (say 'foo.am') to be included via Automake includes in
    his main Makefile.am, and defined a custom make rule to generate that
    file from other data, Automake used to spuriously complain with some
    message like "... overrides Automake target '$(srcdir)/foo.am".
    This bug is now fixed.
  - The user can now extend the special .PRECIOUS target, the same way
    he could already do with the .MAKE .and .PHONY targets.
  - Some confusing typos have been fixed in the manual and in few warning
    messages (automake bug#16827 and bug#16997).
- Remove automake-fix-ac_aux_dir-used-before-initialized.patch as the
  change is incorporated now.
- Refresh automake-SuSE.patch and automake-require_file.patch so that
  they apply cleanly.</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- move delete of info file to preun section</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add automake-perl-5.22.patch: Fix test suite with perl 5.22 by
  silencing some warnings.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1465905600">- add 0001-correct-parameter-parsing-in-test-driver-script.patch
  make parameter parsing of test driver script matching the help
  text</changelog>
  <changelog author="mpluskal@suse.com" date="1466942400">- Fix tests with gzip-1.7 and later:
  * automake-fix-tests-gzip.patch</changelog>
  <changelog author="bg@suse.com" date="1486728000">- use vendor suse instead of IBM on s390x</changelog>
  <changelog author="mpluskal@suse.com" date="1497960000">- Update to version 1.15.1:
  * The code has been adapted to remove a warning present since
    Perl 5.22 stating that "Unescaped left brace in regex is
    deprecated". This warning has become an hard error in Perl 5.26
  * The generated Makefiles do not rely on the obsolescent GZIP
    environment variable which was used for passing arguments to
    'gzip'.  Compatibility with old versions has been preserved.
  * Miscellaneous changes:
- Drop no longer needed patches:
  * automake-perl-5.22.patch
  * automake-fix-tests-gzip.patch
- Add keyring
- Small spec file cleanup</changelog>
  <changelog author="jayvdb@gmail.com" date="1508500800">- Add missing BuildRequires perl(Thread::Queue)</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1619956800">- update 0001-correct-parameter-parsing-in-test-driver-script.patch
  * avoid bashisms in test-driver script (bsc#1185540)</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1624363200">- make generated autoconf makefiles reproducible.
  [bsc#1182604, automake-reproducible.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1624449600">- Add automake-update-help2man.patch to avoid date variations in docs
  [boo#1047218, jsc#SLE-17848, automake-update-help2man.patch]</changelog>
</package>
<package pkgid="2c23407c0e87260fde6e80cc171e8caa52567ba9774e2d3796c2141f7c07a614" name="automake" arch="src">
  <version epoch="0" ver="1.15.1" rel="lp152.5.3.1"/>
  <changelog author="pth@suse.de" date="1369656000">- Update to 1.13.2 (for the full change log please see the file NEWS
  in the package documentation):
  * Obsolescent features:
  - Use of suffix-less info files (that can be specified through the
    '@setfilename' macro in Texinfo input files) is discouraged, and
    its use will raise warnings in the 'obsolete' category.
  - Use of Texinfo input files with '.txi' or '.texinfo' extensions
    is discouraged, and its use will raise warnings in the 'obsolete'
    category.  You are advised to simply use the '.texi' extension
    instead.
  * Documentation fixes:
  - The long-deprecated but still supported two-arguments invocation form
    of AM_INIT_AUTOMAKE is documented once again.
  * Bugs fixed:
  - When the 'ustar' option is used, the generated configure script no
    longer risks hanging during the tests for the availability of the
    'pax' utility, even if the user running configure has a UID or GID
    that requires more than 21 bits to be represented.
  - The obsolete macros AM_CONFIG_HEADER or AM_PROG_CC_STDC work once
    again, as they did in Automake 1.12.x (albeit printing runtime
    warnings in the 'obsolete' category).
  - aclocal will no longer error out if the first local m4 directory
    (as specified by the '-I' option or the 'AC_CONFIG_MACRO_DIRS' or
    'AC_CONFIG_MACRO_DIR' macros) doesn't exist; it will merely report
    a warning in the 'unsupported' category.
  - aclocal will no longer consider directories for extra m4 files more
    than once, even if they are specified multiple times.
  - Analysis of make flags in Automake-generated rules has been made more
    robust, and more future-proof.
- Adapt automake-SUSE.patch to the changed sources.</changelog>
  <changelog author="pth@suse.de" date="1369742400">- Remove aclocal-am_ac.patch and aclocal-am_ac.sh as they aren't
  needed anymore and instead cause havok.</changelog>
  <changelog author="pth@suse.de" date="1371038400">- Update to 1.13.3:
  * Documentation fixes:
  - The documentation no longer mistakenly reports that the
    obsolete 'AM_MKDIR_PROG_P' macro and '$(mkdir_p)' make variable
    are going to be removed in Automake 2.0.
  * Bugs fixed:
  - Byte-compilation of Emacs lisp files could fail spuriously on
    Solaris, when /bin/ksh or /usr/xpg4/bin/sh were used as shell.
  - If the same user-defined suffixes were transformed into
    different Automake-known suffixes in different Makefile.am
    files in the same project, automake could get confused and
    generate inconsistent Makefiles (automake bug#14441).
    For example, if 'Makefile.am' contained a ".ext.cc:" suffix
    rule, and 'sub/Makefile.am' contained a ".ext.c:" suffix rule,
    automake would have mistakenly placed into 'Makefile.in' rules
    to compile "*.c" files into object files, and into
    'sub/Makefile.in' rules to compile "*.cc" files into object
    files --- rather than the other way around.  This is now fixed.
  - Several spurious failures have been fixed (they hit especially
    MinGW/MSYS builds).  See automake bugs #14493, #14494, #14495,
    [#14498], #14499, #14500, #14501, #14517 and #14528.
  - Some other minor miscellaneous changes and fixlets.
  - Patches updated to they apply cleanly and with no offset.</changelog>
  <changelog author="pth@suse.de" date="1371470400">- Update to 1.13.4:
  - Fix a minor regression introduced in Automake 1.13.3: when two or more
    user-defined suffix rules were present in a single Makefile.am,
    automake would needlessly include definition of some make variables
    related to C compilation in the generated Makefile.in (bug#14560).
- Adapt automake-SuSE.patch to changed config.guess.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- fix tests on factory
  automake-1.13.4-fix-primary-prefix-invalid-couples-test.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1383048000">- Add expect as BuildRequires/Requires for automake-testsuite.</changelog>
  <changelog author="jengelh@inai.de" date="1391601600">- Update to new upstream release 1.14.1
  * The 'compile' script is now unconditionally required for all
  packages that perform C compilation
  * The AM_PROG_CC_C_O macro can still be called, albeit that
  should no longer be necessary.
  * The special Automake-time substitutions '%reldir%' and
  '%canon_reldir%' (and their short versions, '%D%' and '%C%'
  respectively) can now be used in an included Makefile fragment.
  The former is substituted with the relative directory of the
  included fragment (compared to the top-level including
  Makefile), and the latter with the canonicalized version of the
  same relative directory.
  * The 'shar' and 'compress' distribution formats are deprecated</changelog>
  <changelog author="pth@suse.de" date="1408968000">- Explicitely pass the directory name to setup so that the testsuite
  can run.</changelog>
  <changelog author="gber@opensuse.org" date="1412596800">- Add automake-fix-ac_aux_dir-used-before-initialized.patch in
  to fix the use of $ac_aux_dir before being initialized</changelog>
  <changelog author="pth@suse.de" date="1423569600">- Update to 1.15:
  New in 1.15:
  * Improvements and refactorings in the install-sh script:
  - It has been modernized, and now makes the following assumptions
  * unconditionally*:
    (1) a working 'dirname' program is available;
    (2) the ${var:-value} shell parameters substitution works;
    (3) the "set -f" and "set +f" shell commands work, and, respectively,
    disable and enable shell globbing.
  - The script implements stricter error checking, and now it complains
    and bails out if any of the following expectations is not met:
    (1) the options -d and -t are never used together;
    (2) the argument passed to option -t is a directory;
    (3) if there are two or more SOURCEFILE arguments, the
    DESTINATION argument must be a directory.
  * Automake-generated testsuites:
  - The default test-driver used by the Automake-generates testsuites
    now appends the result and exit status of each "plain" test to the
    associated log file (automake bug#11814).
  - The perl implementation of the TAP testsuite driver is no longer
    installed in the Automake's scripts directory, and is instead just
    distributed as a "contrib" addition.  There should be no reason to
    use this implementation anyway in real packages, since the awk+shell
    implementation of the TAP driver (which is documented in the manual)
    is more portable and has feature parity with the perl implementation.
  - The rule generating 'test-suite.log' no longer risk incurring in an
    extra useless "make all" recursive invocation in some corner cases
    (automake bug#16302).
  * Distribution:
  - Automake bug#18286: "make distcheck" could sometimes fail to detect
    files missing from the distribution tarball, especially in those cases
    where both the generated files and their dependencies are explicitly
    in $(srcdir).  An important example of this are *generated* makefile
    fragments included at Automake time in Makefile.am; e.g.:
    ...
    $(srcdir)/fragment.am: $(srcdir)/data.txt $(srcdir)/preproc.sh
    cd $(srcdir) &amp;&amp; $(SHELL) preproc.sh &lt;data.txt &gt;fragment.am
    include $(srcdir)/fragment.am
    ...
    If the use forgot to add data.txt and/or preproc.sh in the distribution
    tarball, "make distcheck" would have erroneously succeeded!  This issue
    is now fixed.
  - As a consequence of the previous change, "make distcheck" will run
    using '$(distdir)/_build/sub' as the build directory, rather than
    simply '$(distdir)/_build' (as it was the case for Automake 1.14 and
    earlier).  Consequently, the './configure' and 'make' invocations
    issued by the distcheck recipe now have $(srcdir) equal to '../..',
    rather than to just '..'.  Dependent and similar variables (e.g.,
    '$(top_srcdir)') are also changed accordingly.
    Thus, Makefiles that made assumptions about the exact values of the
    build and source directories used by "make distcheck" will have to
    be adjusted.  Notice that making such assumptions was a bad and
    unsupported practice anyway, since the exact locations of those
    directories should be considered implementation details, and we
    reserve the right to change them at any time.
  * Miscellaneous bugs fixed:
  - The expansion of AM_INIT_AUTOMAKE ends once again with a trailing
    newline (bug#16841).  Regression introduced in Automake 1.14.
  - We no longer risk to use '$ac_aux_dir' before it's defined (see
    automake bug#15981). Bug introduced in Automake 1.14.
  - The code used to detect whether the currently used make is GNU make
    or not (relying on the private macro 'am__is_gnu_make') no longer
    risks causing "Arg list too long" for projects using automatic
    dependency tracking and having a ton of source files (bug#18744).
  - Automake tries to offer a more deterministic output for generated
    Makefiles, in the face of the newly-introduced randomization for
    hash keys order in Perl 5.18.
  - In older Automake versions, if a user defined one single Makefile
    fragment (say 'foo.am') to be included via Automake includes in
    his main Makefile.am, and defined a custom make rule to generate that
    file from other data, Automake used to spuriously complain with some
    message like "... overrides Automake target '$(srcdir)/foo.am".
    This bug is now fixed.
  - The user can now extend the special .PRECIOUS target, the same way
    he could already do with the .MAKE .and .PHONY targets.
  - Some confusing typos have been fixed in the manual and in few warning
    messages (automake bug#16827 and bug#16997).
- Remove automake-fix-ac_aux_dir-used-before-initialized.patch as the
  change is incorporated now.
- Refresh automake-SuSE.patch and automake-require_file.patch so that
  they apply cleanly.</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- move delete of info file to preun section</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add automake-perl-5.22.patch: Fix test suite with perl 5.22 by
  silencing some warnings.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1465905600">- add 0001-correct-parameter-parsing-in-test-driver-script.patch
  make parameter parsing of test driver script matching the help
  text</changelog>
  <changelog author="mpluskal@suse.com" date="1466942400">- Fix tests with gzip-1.7 and later:
  * automake-fix-tests-gzip.patch</changelog>
  <changelog author="bg@suse.com" date="1486728000">- use vendor suse instead of IBM on s390x</changelog>
  <changelog author="mpluskal@suse.com" date="1497960000">- Update to version 1.15.1:
  * The code has been adapted to remove a warning present since
    Perl 5.22 stating that "Unescaped left brace in regex is
    deprecated". This warning has become an hard error in Perl 5.26
  * The generated Makefiles do not rely on the obsolescent GZIP
    environment variable which was used for passing arguments to
    'gzip'.  Compatibility with old versions has been preserved.
  * Miscellaneous changes:
- Drop no longer needed patches:
  * automake-perl-5.22.patch
  * automake-fix-tests-gzip.patch
- Add keyring
- Small spec file cleanup</changelog>
  <changelog author="jayvdb@gmail.com" date="1508500800">- Add missing BuildRequires perl(Thread::Queue)</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1619956800">- update 0001-correct-parameter-parsing-in-test-driver-script.patch
  * avoid bashisms in test-driver script (bsc#1185540)</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1624363200">- make generated autoconf makefiles reproducible.
  [bsc#1182604, automake-reproducible.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1624449600">- Add automake-update-help2man.patch to avoid date variations in docs
  [boo#1047218, jsc#SLE-17848, automake-update-help2man.patch]</changelog>
</package>
<package pkgid="17b5c7570b25ec5b26fd790335667115b90a066e5466fd30cd5a86a7b8dc499c" name="automake-testsuite" arch="src">
  <version epoch="0" ver="1.15.1" rel="lp152.5.3.1"/>
  <changelog author="mmeister@suse.com" date="1363780800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mmeister@suse.com" date="1367236800">- add a script to replace obsolete macros in configure.*
- call it from aclocal to avoid having to patch hundreds of packages</changelog>
  <changelog author="pth@suse.de" date="1369656000">- Update to 1.13.2 (for the full change log please see the file NEWS
  in the package documentation):
  * Obsolescent features:
  - Use of suffix-less info files (that can be specified through the
    '@setfilename' macro in Texinfo input files) is discouraged, and
    its use will raise warnings in the 'obsolete' category.
  - Use of Texinfo input files with '.txi' or '.texinfo' extensions
    is discouraged, and its use will raise warnings in the 'obsolete'
    category.  You are advised to simply use the '.texi' extension
    instead.
  * Documentation fixes:
  - The long-deprecated but still supported two-arguments invocation form
    of AM_INIT_AUTOMAKE is documented once again.
  * Bugs fixed:
  - When the 'ustar' option is used, the generated configure script no
    longer risks hanging during the tests for the availability of the
    'pax' utility, even if the user running configure has a UID or GID
    that requires more than 21 bits to be represented.
  - The obsolete macros AM_CONFIG_HEADER or AM_PROG_CC_STDC work once
    again, as they did in Automake 1.12.x (albeit printing runtime
    warnings in the 'obsolete' category).
  - aclocal will no longer error out if the first local m4 directory
    (as specified by the '-I' option or the 'AC_CONFIG_MACRO_DIRS' or
    'AC_CONFIG_MACRO_DIR' macros) doesn't exist; it will merely report
    a warning in the 'unsupported' category.
  - aclocal will no longer consider directories for extra m4 files more
    than once, even if they are specified multiple times.
  - Analysis of make flags in Automake-generated rules has been made more
    robust, and more future-proof.
- Adapt automake-SUSE.patch to the changed sources.</changelog>
  <changelog author="pth@suse.de" date="1369742400">- Remove aclocal-am_ac.patch and aclocal-am_ac.sh as they aren't
  needed anymore and instead cause havok.</changelog>
  <changelog author="pth@suse.de" date="1371038400">- Update to 1.13.3:
  * Documentation fixes:
  - The documentation no longer mistakenly reports that the
    obsolete 'AM_MKDIR_PROG_P' macro and '$(mkdir_p)' make variable
    are going to be removed in Automake 2.0.
  * Bugs fixed:
  - Byte-compilation of Emacs lisp files could fail spuriously on
    Solaris, when /bin/ksh or /usr/xpg4/bin/sh were used as shell.
  - If the same user-defined suffixes were transformed into
    different Automake-known suffixes in different Makefile.am
    files in the same project, automake could get confused and
    generate inconsistent Makefiles (automake bug#14441).
    For example, if 'Makefile.am' contained a ".ext.cc:" suffix
    rule, and 'sub/Makefile.am' contained a ".ext.c:" suffix rule,
    automake would have mistakenly placed into 'Makefile.in' rules
    to compile "*.c" files into object files, and into
    'sub/Makefile.in' rules to compile "*.cc" files into object
    files --- rather than the other way around.  This is now fixed.
  - Several spurious failures have been fixed (they hit especially
    MinGW/MSYS builds).  See automake bugs #14493, #14494, #14495,
    [#14498], #14499, #14500, #14501, #14517 and #14528.
  - Some other minor miscellaneous changes and fixlets.
  - Patches updated to they apply cleanly and with no offset.</changelog>
  <changelog author="pth@suse.de" date="1371470400">- Update to 1.13.4:
  - Fix a minor regression introduced in Automake 1.13.3: when two or more
    user-defined suffix rules were present in a single Makefile.am,
    automake would needlessly include definition of some make variables
    related to C compilation in the generated Makefile.in (bug#14560).
- Adapt automake-SuSE.patch to changed config.guess.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- fix tests on factory
  automake-1.13.4-fix-primary-prefix-invalid-couples-test.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1383048000">- Add expect as BuildRequires/Requires for automake-testsuite.</changelog>
  <changelog author="jengelh@inai.de" date="1391601600">- Update to new upstream release 1.14.1
  * The 'compile' script is now unconditionally required for all
  packages that perform C compilation
  * The AM_PROG_CC_C_O macro can still be called, albeit that
  should no longer be necessary.
  * The special Automake-time substitutions '%reldir%' and
  '%canon_reldir%' (and their short versions, '%D%' and '%C%'
  respectively) can now be used in an included Makefile fragment.
  The former is substituted with the relative directory of the
  included fragment (compared to the top-level including
  Makefile), and the latter with the canonicalized version of the
  same relative directory.
  * The 'shar' and 'compress' distribution formats are deprecated</changelog>
  <changelog author="pth@suse.de" date="1408968000">- Explicitely pass the directory name to setup so that the testsuite
  can run.</changelog>
  <changelog author="gber@opensuse.org" date="1412596800">- Add automake-fix-ac_aux_dir-used-before-initialized.patch in
  to fix the use of $ac_aux_dir before being initialized</changelog>
  <changelog author="pth@suse.de" date="1423569600">- Update to 1.15:
  New in 1.15:
  * Improvements and refactorings in the install-sh script:
  - It has been modernized, and now makes the following assumptions
  * unconditionally*:
    (1) a working 'dirname' program is available;
    (2) the ${var:-value} shell parameters substitution works;
    (3) the "set -f" and "set +f" shell commands work, and, respectively,
    disable and enable shell globbing.
  - The script implements stricter error checking, and now it complains
    and bails out if any of the following expectations is not met:
    (1) the options -d and -t are never used together;
    (2) the argument passed to option -t is a directory;
    (3) if there are two or more SOURCEFILE arguments, the
    DESTINATION argument must be a directory.
  * Automake-generated testsuites:
  - The default test-driver used by the Automake-generates testsuites
    now appends the result and exit status of each "plain" test to the
    associated log file (automake bug#11814).
  - The perl implementation of the TAP testsuite driver is no longer
    installed in the Automake's scripts directory, and is instead just
    distributed as a "contrib" addition.  There should be no reason to
    use this implementation anyway in real packages, since the awk+shell
    implementation of the TAP driver (which is documented in the manual)
    is more portable and has feature parity with the perl implementation.
  - The rule generating 'test-suite.log' no longer risk incurring in an
    extra useless "make all" recursive invocation in some corner cases
    (automake bug#16302).
  * Distribution:
  - Automake bug#18286: "make distcheck" could sometimes fail to detect
    files missing from the distribution tarball, especially in those cases
    where both the generated files and their dependencies are explicitly
    in $(srcdir).  An important example of this are *generated* makefile
    fragments included at Automake time in Makefile.am; e.g.:
    ...
    $(srcdir)/fragment.am: $(srcdir)/data.txt $(srcdir)/preproc.sh
    cd $(srcdir) &amp;&amp; $(SHELL) preproc.sh &lt;data.txt &gt;fragment.am
    include $(srcdir)/fragment.am
    ...
    If the use forgot to add data.txt and/or preproc.sh in the distribution
    tarball, "make distcheck" would have erroneously succeeded!  This issue
    is now fixed.
  - As a consequence of the previous change, "make distcheck" will run
    using '$(distdir)/_build/sub' as the build directory, rather than
    simply '$(distdir)/_build' (as it was the case for Automake 1.14 and
    earlier).  Consequently, the './configure' and 'make' invocations
    issued by the distcheck recipe now have $(srcdir) equal to '../..',
    rather than to just '..'.  Dependent and similar variables (e.g.,
    '$(top_srcdir)') are also changed accordingly.
    Thus, Makefiles that made assumptions about the exact values of the
    build and source directories used by "make distcheck" will have to
    be adjusted.  Notice that making such assumptions was a bad and
    unsupported practice anyway, since the exact locations of those
    directories should be considered implementation details, and we
    reserve the right to change them at any time.
  * Miscellaneous bugs fixed:
  - The expansion of AM_INIT_AUTOMAKE ends once again with a trailing
    newline (bug#16841).  Regression introduced in Automake 1.14.
  - We no longer risk to use '$ac_aux_dir' before it's defined (see
    automake bug#15981). Bug introduced in Automake 1.14.
  - The code used to detect whether the currently used make is GNU make
    or not (relying on the private macro 'am__is_gnu_make') no longer
    risks causing "Arg list too long" for projects using automatic
    dependency tracking and having a ton of source files (bug#18744).
  - Automake tries to offer a more deterministic output for generated
    Makefiles, in the face of the newly-introduced randomization for
    hash keys order in Perl 5.18.
  - In older Automake versions, if a user defined one single Makefile
    fragment (say 'foo.am') to be included via Automake includes in
    his main Makefile.am, and defined a custom make rule to generate that
    file from other data, Automake used to spuriously complain with some
    message like "... overrides Automake target '$(srcdir)/foo.am".
    This bug is now fixed.
  - The user can now extend the special .PRECIOUS target, the same way
    he could already do with the .MAKE .and .PHONY targets.
  - Some confusing typos have been fixed in the manual and in few warning
    messages (automake bug#16827 and bug#16997).
- Remove automake-fix-ac_aux_dir-used-before-initialized.patch as the
  change is incorporated now.
- Refresh automake-SuSE.patch and automake-require_file.patch so that
  they apply cleanly.</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- move delete of info file to preun section</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add automake-perl-5.22.patch: Fix test suite with perl 5.22 by
  silencing some warnings.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1465905600">- add 0001-correct-parameter-parsing-in-test-driver-script.patch
  make parameter parsing of test driver script matching the help
  text</changelog>
  <changelog author="mpluskal@suse.com" date="1466942400">- Fix tests with gzip-1.7 and later:
  * automake-fix-tests-gzip.patch</changelog>
  <changelog author="bg@suse.com" date="1486728000">- use vendor suse instead of IBM on s390x</changelog>
  <changelog author="mpluskal@suse.com" date="1497960000">- Update to version 1.15.1:
  * The code has been adapted to remove a warning present since
    Perl 5.22 stating that "Unescaped left brace in regex is
    deprecated". This warning has become an hard error in Perl 5.26
  * The generated Makefiles do not rely on the obsolescent GZIP
    environment variable which was used for passing arguments to
    'gzip'.  Compatibility with old versions has been preserved.
  * Miscellaneous changes:
- Drop no longer needed patches:
  * automake-perl-5.22.patch
  * automake-fix-tests-gzip.patch
- Add keyring
- Small spec file cleanup</changelog>
  <changelog author="jayvdb@gmail.com" date="1508500800">- Add missing BuildRequires perl(Thread::Queue)</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1619956800">- update 0001-correct-parameter-parsing-in-test-driver-script.patch
  * avoid bashisms in test-driver script (bsc#1185540)</changelog>
</package>
<package pkgid="28dc2941cdeeb034d9cef15d7d508e939f9cedb0238cd13abc201142ec8072b2" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.2.42" rel="lp152.2.3.1"/>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1575633600">- Improve message when registration missing for autoupgrade with
  online medium (jsc#SLE-7101)
- 4.2.23</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1576238400">- Allow to run autoupgrade on registered system with almost empty
  profile (jsc#SLE-7101)
- 4.2.24</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.2.25</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1577793600">- Fix cloning patterns (regression from 4.2.22)
  (bsc#1159269, bsc#1159472)
- 4.2.26</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1581940800">- Fixed user-visible messages (bsc#1084015)
- 4.2.27</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.2.28</changelog>
  <changelog author="schubi@suse.de" date="1583409600">- Fixed crash while loading none existing AY file (bsc#1165464).
- 4.2.29</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711) (CVE-2019-18905)
- 4.2.30</changelog>
  <changelog author="Ancor Gonzalez Sosa &lt;ancor@suse.com&gt;" date="1583928000">- Adapted to changes in yast2-storage-ng (related to bsc#1140040).
- 4.2.31</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585656000">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- 4.2.32</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585742400">- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.2.33</changelog>
  <changelog author="schubi@suse.de" date="1585742401">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.2.34</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1588766400">- ayast_setup: Do not add a 'networking' section to the profile
  when it is not defined explicitly as it is not needed anymore
  since keeping the configured network is the default option during
  autoconfiguration (bsc#1170821)
- 4.2.35</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594296000">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
</package>
<package pkgid="3dbd06f743b1376b84485dcf5b660a4deecc1e3f9ed10e34e19af9682870253d" name="autoyast2" arch="src">
  <version epoch="0" ver="4.2.42" rel="lp152.2.3.1"/>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1575633600">- Improve message when registration missing for autoupgrade with
  online medium (jsc#SLE-7101)
- 4.2.23</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1576238400">- Allow to run autoupgrade on registered system with almost empty
  profile (jsc#SLE-7101)
- 4.2.24</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.2.25</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1577793600">- Fix cloning patterns (regression from 4.2.22)
  (bsc#1159269, bsc#1159472)
- 4.2.26</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1581940800">- Fixed user-visible messages (bsc#1084015)
- 4.2.27</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.2.28</changelog>
  <changelog author="schubi@suse.de" date="1583409600">- Fixed crash while loading none existing AY file (bsc#1165464).
- 4.2.29</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711) (CVE-2019-18905)
- 4.2.30</changelog>
  <changelog author="Ancor Gonzalez Sosa &lt;ancor@suse.com&gt;" date="1583928000">- Adapted to changes in yast2-storage-ng (related to bsc#1140040).
- 4.2.31</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585656000">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- 4.2.32</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585742400">- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.2.33</changelog>
  <changelog author="schubi@suse.de" date="1585742401">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.2.34</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1588766400">- ayast_setup: Do not add a 'networking' section to the profile
  when it is not defined explicitly as it is not needed anymore
  since keeping the configured network is the default option during
  autoconfiguration (bsc#1170821)
- 4.2.35</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594296000">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
</package>
<package pkgid="484d9f567b7f3755bc5d9dcaeb451b4959d8e69d5a27e27578f7c5eeab392364" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.2.45" rel="lp152.2.6.1"/>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1577793600">- Fix cloning patterns (regression from 4.2.22)
  (bsc#1159269, bsc#1159472)
- 4.2.26</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1581940800">- Fixed user-visible messages (bsc#1084015)
- 4.2.27</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.2.28</changelog>
  <changelog author="schubi@suse.de" date="1583409600">- Fixed crash while loading none existing AY file (bsc#1165464).
- 4.2.29</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711) (CVE-2019-18905)
- 4.2.30</changelog>
  <changelog author="Ancor Gonzalez Sosa &lt;ancor@suse.com&gt;" date="1583928000">- Adapted to changes in yast2-storage-ng (related to bsc#1140040).
- 4.2.31</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585656000">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- 4.2.32</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585742400">- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.2.33</changelog>
  <changelog author="schubi@suse.de" date="1585742401">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.2.34</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1588766400">- ayast_setup: Do not add a 'networking' section to the profile
  when it is not defined explicitly as it is not needed anymore
  since keeping the configured network is the default option during
  autoconfiguration (bsc#1170821)
- 4.2.35</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
</package>
<package pkgid="2ecd59d8595b532f95ce243e2e46e421e80bf17e6dba92a8f55ec482c2e669ba" name="autoyast2" arch="src">
  <version epoch="0" ver="4.2.45" rel="lp152.2.6.1"/>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1577793600">- Fix cloning patterns (regression from 4.2.22)
  (bsc#1159269, bsc#1159472)
- 4.2.26</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1581940800">- Fixed user-visible messages (bsc#1084015)
- 4.2.27</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.2.28</changelog>
  <changelog author="schubi@suse.de" date="1583409600">- Fixed crash while loading none existing AY file (bsc#1165464).
- 4.2.29</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711) (CVE-2019-18905)
- 4.2.30</changelog>
  <changelog author="Ancor Gonzalez Sosa &lt;ancor@suse.com&gt;" date="1583928000">- Adapted to changes in yast2-storage-ng (related to bsc#1140040).
- 4.2.31</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585656000">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- 4.2.32</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585742400">- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.2.33</changelog>
  <changelog author="schubi@suse.de" date="1585742401">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.2.34</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1588766400">- ayast_setup: Do not add a 'networking' section to the profile
  when it is not defined explicitly as it is not needed anymore
  since keeping the configured network is the default option during
  autoconfiguration (bsc#1170821)
- 4.2.35</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
</package>
<package pkgid="9f8125f8a774bd1910b0ea13c4be203e21a2e8017ae552b51c6fe2e9039c0185" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.2.50" rel="lp152.2.9.1"/>
  <changelog author="Ancor Gonzalez Sosa &lt;ancor@suse.com&gt;" date="1583928000">- Adapted to changes in yast2-storage-ng (related to bsc#1140040).
- 4.2.31</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585656000">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- 4.2.32</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585742400">- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.2.33</changelog>
  <changelog author="schubi@suse.de" date="1585742401">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.2.34</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1588766400">- ayast_setup: Do not add a 'networking' section to the profile
  when it is not defined explicitly as it is not needed anymore
  since keeping the configured network is the default option during
  autoconfiguration (bsc#1170821)
- 4.2.35</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1601380800">- Drop the 'general/mouse' element from the schema. It has been
  unsupported since version 3.0.3, FATE#313101 (bsc#1176973).
- 4.2.46</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1610625600">- Upgrade: Checking if a valid base product has been selected for
  upgrade and if not asking the user to check the product entry
  in the AY configuration file (bsc#1175876).
- 4.2.47</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614340800">- Select patterns during auto installation even when not using the
  confirm mode (related to jsc#SMO-20 and bsc#1182543).
- 4.2.48</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614686400">- Execute the security client even when the given profile
  does not have a security section (bsc#1182543).
- 4.2.49</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1614859200">- Import the security settings after importing the bootloader
  configuration (bsc#1183042).
- 4.2.50</changelog>
</package>
<package pkgid="621f59c2c34f5cc06a73705a1f7329336e6cc5d107d4d569b752bb2dd723c62f" name="autoyast2" arch="src">
  <version epoch="0" ver="4.2.50" rel="lp152.2.9.1"/>
  <changelog author="Ancor Gonzalez Sosa &lt;ancor@suse.com&gt;" date="1583928000">- Adapted to changes in yast2-storage-ng (related to bsc#1140040).
- 4.2.31</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585656000">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- 4.2.32</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585742400">- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.2.33</changelog>
  <changelog author="schubi@suse.de" date="1585742401">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.2.34</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1588766400">- ayast_setup: Do not add a 'networking' section to the profile
  when it is not defined explicitly as it is not needed anymore
  since keeping the configured network is the default option during
  autoconfiguration (bsc#1170821)
- 4.2.35</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1601380800">- Drop the 'general/mouse' element from the schema. It has been
  unsupported since version 3.0.3, FATE#313101 (bsc#1176973).
- 4.2.46</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1610625600">- Upgrade: Checking if a valid base product has been selected for
  upgrade and if not asking the user to check the product entry
  in the AY configuration file (bsc#1175876).
- 4.2.47</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614340800">- Select patterns during auto installation even when not using the
  confirm mode (related to jsc#SMO-20 and bsc#1182543).
- 4.2.48</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614686400">- Execute the security client even when the given profile
  does not have a security section (bsc#1182543).
- 4.2.49</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1614859200">- Import the security settings after importing the bootloader
  configuration (bsc#1183042).
- 4.2.50</changelog>
</package>
<package pkgid="1a10cf7182e36b9304e2669d2a6d46bf3d4ff0e62d0ccd033fcd87b603721a35" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.2.51" rel="lp152.2.12.1"/>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585656000">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- 4.2.32</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585742400">- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.2.33</changelog>
  <changelog author="schubi@suse.de" date="1585742401">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.2.34</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1588766400">- ayast_setup: Do not add a 'networking' section to the profile
  when it is not defined explicitly as it is not needed anymore
  since keeping the configured network is the default option during
  autoconfiguration (bsc#1170821)
- 4.2.35</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1601380800">- Drop the 'general/mouse' element from the schema. It has been
  unsupported since version 3.0.3, FATE#313101 (bsc#1176973).
- 4.2.46</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1610625600">- Upgrade: Checking if a valid base product has been selected for
  upgrade and if not asking the user to check the product entry
  in the AY configuration file (bsc#1175876).
- 4.2.47</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614340800">- Select patterns during auto installation even when not using the
  confirm mode (related to jsc#SMO-20 and bsc#1182543).
- 4.2.48</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614686400">- Execute the security client even when the given profile
  does not have a security section (bsc#1182543).
- 4.2.49</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1614859200">- Import the security settings after importing the bootloader
  configuration (bsc#1183042).
- 4.2.50</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1620388800">- During autoupgrade do not try to register the system if it is
  explicitly disabled in the profile (bsc#1176965)
- 4.2.51</changelog>
</package>
<package pkgid="c9c23d1e6767439e19f32d0eebe3d4fae05540a0e6b41fe09cb052b1da58a086" name="autoyast2" arch="src">
  <version epoch="0" ver="4.2.51" rel="lp152.2.12.1"/>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585656000">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- 4.2.32</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585742400">- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.2.33</changelog>
  <changelog author="schubi@suse.de" date="1585742401">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.2.34</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1588766400">- ayast_setup: Do not add a 'networking' section to the profile
  when it is not defined explicitly as it is not needed anymore
  since keeping the configured network is the default option during
  autoconfiguration (bsc#1170821)
- 4.2.35</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1601380800">- Drop the 'general/mouse' element from the schema. It has been
  unsupported since version 3.0.3, FATE#313101 (bsc#1176973).
- 4.2.46</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1610625600">- Upgrade: Checking if a valid base product has been selected for
  upgrade and if not asking the user to check the product entry
  in the AY configuration file (bsc#1175876).
- 4.2.47</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614340800">- Select patterns during auto installation even when not using the
  confirm mode (related to jsc#SMO-20 and bsc#1182543).
- 4.2.48</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614686400">- Execute the security client even when the given profile
  does not have a security section (bsc#1182543).
- 4.2.49</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1614859200">- Import the security settings after importing the bootloader
  configuration (bsc#1183042).
- 4.2.50</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1620388800">- During autoupgrade do not try to register the system if it is
  explicitly disabled in the profile (bsc#1176965)
- 4.2.51</changelog>
</package>
<package pkgid="70560acf3458fcb5d3b0b27c42235c64174a8b326ce1a85a233342146885f419" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.2.55" rel="lp152.2.15.1"/>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1601380800">- Drop the 'general/mouse' element from the schema. It has been
  unsupported since version 3.0.3, FATE#313101 (bsc#1176973).
- 4.2.46</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1610625600">- Upgrade: Checking if a valid base product has been selected for
  upgrade and if not asking the user to check the product entry
  in the AY configuration file (bsc#1175876).
- 4.2.47</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614340800">- Select patterns during auto installation even when not using the
  confirm mode (related to jsc#SMO-20 and bsc#1182543).
- 4.2.48</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614686400">- Execute the security client even when the given profile
  does not have a security section (bsc#1182543).
- 4.2.49</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1614859200">- Import the security settings after importing the bootloader
  configuration (bsc#1183042).
- 4.2.50</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1620388800">- During autoupgrade do not try to register the system if it is
  explicitly disabled in the profile (bsc#1176965)
- 4.2.51</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1620907200">- Backport gh#651 by schubi@suse.de:
  - Moving &lt;files&gt; section handling from second installation stage
    to first installation stage. (bsc#1174194)
- 4.2.52</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1625486400">- Do not export the general/storage section when it is empty
  (related to bsc#1171356 and bsc#1187916).
- 4.2.53</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1625832000">- Add missing elements to rules.xml schema:
  - installed_product and installed_product_version (boo#1176089)
  - dialog section (bsc#1188153)
- 4.2.54</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1626436800">- Copy the files to the right location when a &lt;file_location&gt;
  is given (bsc#1188357).
- 4.2.55</changelog>
</package>
<package pkgid="efb14a933cecf261b904f4e062a6a2de9924787547e53c6d9923b827af053661" name="autoyast2" arch="src">
  <version epoch="0" ver="4.2.55" rel="lp152.2.15.1"/>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1601380800">- Drop the 'general/mouse' element from the schema. It has been
  unsupported since version 3.0.3, FATE#313101 (bsc#1176973).
- 4.2.46</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1610625600">- Upgrade: Checking if a valid base product has been selected for
  upgrade and if not asking the user to check the product entry
  in the AY configuration file (bsc#1175876).
- 4.2.47</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614340800">- Select patterns during auto installation even when not using the
  confirm mode (related to jsc#SMO-20 and bsc#1182543).
- 4.2.48</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614686400">- Execute the security client even when the given profile
  does not have a security section (bsc#1182543).
- 4.2.49</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1614859200">- Import the security settings after importing the bootloader
  configuration (bsc#1183042).
- 4.2.50</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1620388800">- During autoupgrade do not try to register the system if it is
  explicitly disabled in the profile (bsc#1176965)
- 4.2.51</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1620907200">- Backport gh#651 by schubi@suse.de:
  - Moving &lt;files&gt; section handling from second installation stage
    to first installation stage. (bsc#1174194)
- 4.2.52</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1625486400">- Do not export the general/storage section when it is empty
  (related to bsc#1171356 and bsc#1187916).
- 4.2.53</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1625832000">- Add missing elements to rules.xml schema:
  - installed_product and installed_product_version (boo#1176089)
  - dialog section (bsc#1188153)
- 4.2.54</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1626436800">- Copy the files to the right location when a &lt;file_location&gt;
  is given (bsc#1188357).
- 4.2.55</changelog>
</package>
<package pkgid="06ecb7c248989cdfc09974807e7951ca3e7b68f7373cac09f0ae0cec9cdcef54" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.2.56" rel="lp152.2.18.1"/>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1601380800">- Drop the 'general/mouse' element from the schema. It has been
  unsupported since version 3.0.3, FATE#313101 (bsc#1176973).
- 4.2.46</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1610625600">- Upgrade: Checking if a valid base product has been selected for
  upgrade and if not asking the user to check the product entry
  in the AY configuration file (bsc#1175876).
- 4.2.47</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614340800">- Select patterns during auto installation even when not using the
  confirm mode (related to jsc#SMO-20 and bsc#1182543).
- 4.2.48</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614686400">- Execute the security client even when the given profile
  does not have a security section (bsc#1182543).
- 4.2.49</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1614859200">- Import the security settings after importing the bootloader
  configuration (bsc#1183042).
- 4.2.50</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1620388800">- During autoupgrade do not try to register the system if it is
  explicitly disabled in the profile (bsc#1176965)
- 4.2.51</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1620907200">- Backport gh#651 by schubi@suse.de:
  - Moving &lt;files&gt; section handling from second installation stage
    to first installation stage. (bsc#1174194)
- 4.2.52</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1625486400">- Do not export the general/storage section when it is empty
  (related to bsc#1171356 and bsc#1187916).
- 4.2.53</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1625832000">- Add missing elements to rules.xml schema:
  - installed_product and installed_product_version (boo#1176089)
  - dialog section (bsc#1188153)
- 4.2.54</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1626436800">- Copy the files to the right location when a &lt;file_location&gt;
  is given (bsc#1188357).
- 4.2.55</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1632225600">- Update the rules.xml schema:
  - add the "hostname" element (bsc#1190696).
  - remove the 'haspcmica' element (related to bsc#1183352).
- 4.2.56</changelog>
</package>
<package pkgid="96ce8921c0155c3089939bdf81a7e7811a88e0c64c2c9599add3793f42f358c1" name="autoyast2" arch="src">
  <version epoch="0" ver="4.2.56" rel="lp152.2.18.1"/>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1601380800">- Drop the 'general/mouse' element from the schema. It has been
  unsupported since version 3.0.3, FATE#313101 (bsc#1176973).
- 4.2.46</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1610625600">- Upgrade: Checking if a valid base product has been selected for
  upgrade and if not asking the user to check the product entry
  in the AY configuration file (bsc#1175876).
- 4.2.47</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614340800">- Select patterns during auto installation even when not using the
  confirm mode (related to jsc#SMO-20 and bsc#1182543).
- 4.2.48</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614686400">- Execute the security client even when the given profile
  does not have a security section (bsc#1182543).
- 4.2.49</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1614859200">- Import the security settings after importing the bootloader
  configuration (bsc#1183042).
- 4.2.50</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1620388800">- During autoupgrade do not try to register the system if it is
  explicitly disabled in the profile (bsc#1176965)
- 4.2.51</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1620907200">- Backport gh#651 by schubi@suse.de:
  - Moving &lt;files&gt; section handling from second installation stage
    to first installation stage. (bsc#1174194)
- 4.2.52</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1625486400">- Do not export the general/storage section when it is empty
  (related to bsc#1171356 and bsc#1187916).
- 4.2.53</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1625832000">- Add missing elements to rules.xml schema:
  - installed_product and installed_product_version (boo#1176089)
  - dialog section (bsc#1188153)
- 4.2.54</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1626436800">- Copy the files to the right location when a &lt;file_location&gt;
  is given (bsc#1188357).
- 4.2.55</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1632225600">- Update the rules.xml schema:
  - add the "hostname" element (bsc#1190696).
  - remove the 'haspcmica' element (related to bsc#1183352).
- 4.2.56</changelog>
</package>
<package pkgid="ba8853880d12a375b53b6c2962d1e7fdac12ee9a86f7ead90d7d02253ade3384" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.2.42" rel="lp152.2.3.1"/>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1575633600">- Improve message when registration missing for autoupgrade with
  online medium (jsc#SLE-7101)
- 4.2.23</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1576238400">- Allow to run autoupgrade on registered system with almost empty
  profile (jsc#SLE-7101)
- 4.2.24</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1576584000">- Fixed conflicting items in rule dialogs (bsc#1123091).
- Semi-automatic with partition: Do not use the common AY partition
  workflow (bsc#1134501).
- Do not reset Base-Product while registration. Do not call
  registration in the second installation stage again.
  (bsc#1143106).
- Fix profile validation for scripts elements (bsc#1156905).
- UI: Report XML parsing errors instead of just crashing
  (bsc#1159157).
- 4.2.25</changelog>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1577793600">- Fix cloning patterns (regression from 4.2.22)
  (bsc#1159269, bsc#1159472)
- 4.2.26</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1581940800">- Fixed user-visible messages (bsc#1084015)
- 4.2.27</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.2.28</changelog>
  <changelog author="schubi@suse.de" date="1583409600">- Fixed crash while loading none existing AY file (bsc#1165464).
- 4.2.29</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711) (CVE-2019-18905)
- 4.2.30</changelog>
  <changelog author="Ancor Gonzalez Sosa &lt;ancor@suse.com&gt;" date="1583928000">- Adapted to changes in yast2-storage-ng (related to bsc#1140040).
- 4.2.31</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585656000">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- 4.2.32</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585742400">- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.2.33</changelog>
  <changelog author="schubi@suse.de" date="1585742401">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.2.34</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1588766400">- ayast_setup: Do not add a 'networking' section to the profile
  when it is not defined explicitly as it is not needed anymore
  since keeping the configured network is the default option during
  autoconfiguration (bsc#1170821)
- 4.2.35</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594296000">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
</package>
<package pkgid="ed5c6adb0dbc18f2409a389b48fe4d7b463f8119b475e654a5e0f065a821424d" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.2.45" rel="lp152.2.6.1"/>
  <changelog author="Josef Reidinger &lt;jreidinger@suse.com&gt;" date="1577793600">- Fix cloning patterns (regression from 4.2.22)
  (bsc#1159269, bsc#1159472)
- 4.2.26</changelog>
  <changelog author="Stefan Hundhammer &lt;shundhammer@suse.com&gt;" date="1581940800">- Fixed user-visible messages (bsc#1084015)
- 4.2.27</changelog>
  <changelog author="schubi@suse.de" date="1582718400">- Service for init scripts: Checking working network with
  "network-online.target" before starting the AY init scripts
  (bsc#1164105).
- 4.2.28</changelog>
  <changelog author="schubi@suse.de" date="1583409600">- Fixed crash while loading none existing AY file (bsc#1165464).
- 4.2.29</changelog>
  <changelog author="schubi@suse.de" date="1583841600">- Security fix: Removed all "--gpg-auto-import-keys" options from
  zypper commands (bsc#1140711) (CVE-2019-18905)
- 4.2.30</changelog>
  <changelog author="Ancor Gonzalez Sosa &lt;ancor@suse.com&gt;" date="1583928000">- Adapted to changes in yast2-storage-ng (related to bsc#1140040).
- 4.2.31</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585656000">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- 4.2.32</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585742400">- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.2.33</changelog>
  <changelog author="schubi@suse.de" date="1585742401">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.2.34</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1588766400">- ayast_setup: Do not add a 'networking' section to the profile
  when it is not defined explicitly as it is not needed anymore
  since keeping the configured network is the default option during
  autoconfiguration (bsc#1170821)
- 4.2.35</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
</package>
<package pkgid="0869e008096a1170a985ad86147f9a4b8001e24c9f3ad6e50bf5c55be444ac8f" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.2.50" rel="lp152.2.9.1"/>
  <changelog author="Ancor Gonzalez Sosa &lt;ancor@suse.com&gt;" date="1583928000">- Adapted to changes in yast2-storage-ng (related to bsc#1140040).
- 4.2.31</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585656000">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- 4.2.32</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585742400">- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.2.33</changelog>
  <changelog author="schubi@suse.de" date="1585742401">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.2.34</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1588766400">- ayast_setup: Do not add a 'networking' section to the profile
  when it is not defined explicitly as it is not needed anymore
  since keeping the configured network is the default option during
  autoconfiguration (bsc#1170821)
- 4.2.35</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1601380800">- Drop the 'general/mouse' element from the schema. It has been
  unsupported since version 3.0.3, FATE#313101 (bsc#1176973).
- 4.2.46</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1610625600">- Upgrade: Checking if a valid base product has been selected for
  upgrade and if not asking the user to check the product entry
  in the AY configuration file (bsc#1175876).
- 4.2.47</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614340800">- Select patterns during auto installation even when not using the
  confirm mode (related to jsc#SMO-20 and bsc#1182543).
- 4.2.48</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614686400">- Execute the security client even when the given profile
  does not have a security section (bsc#1182543).
- 4.2.49</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1614859200">- Import the security settings after importing the bootloader
  configuration (bsc#1183042).
- 4.2.50</changelog>
</package>
<package pkgid="2cab0835296da20b0a0846e86b372d21f06215323507ea75c2df15e5a28493f9" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.2.51" rel="lp152.2.12.1"/>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1585656000">- Fix desktop files updating some icons and groups (related to
  bsc#1168123).
- 4.2.32</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1585742400">- Restore some missing icons (related to bsc#1168123, boo#1109310
  and boo#1168281).
- 4.2.33</changelog>
  <changelog author="schubi@suse.de" date="1585742401">- Service for init scripts: Try to start "network-online.target"
  before starting the AY init scripts in order to get a working
  network (bsc#1164105).
- 4.2.34</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1588766400">- ayast_setup: Do not add a 'networking' section to the profile
  when it is not defined explicitly as it is not needed anymore
  since keeping the configured network is the default option during
  autoconfiguration (bsc#1170821)
- 4.2.35</changelog>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1601380800">- Drop the 'general/mouse' element from the schema. It has been
  unsupported since version 3.0.3, FATE#313101 (bsc#1176973).
- 4.2.46</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1610625600">- Upgrade: Checking if a valid base product has been selected for
  upgrade and if not asking the user to check the product entry
  in the AY configuration file (bsc#1175876).
- 4.2.47</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614340800">- Select patterns during auto installation even when not using the
  confirm mode (related to jsc#SMO-20 and bsc#1182543).
- 4.2.48</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614686400">- Execute the security client even when the given profile
  does not have a security section (bsc#1182543).
- 4.2.49</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1614859200">- Import the security settings after importing the bootloader
  configuration (bsc#1183042).
- 4.2.50</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1620388800">- During autoupgrade do not try to register the system if it is
  explicitly disabled in the profile (bsc#1176965)
- 4.2.51</changelog>
</package>
<package pkgid="187d9d8e51bd5cddf2e3ff99c4364ea856aa3474e1d540c2e0dcde0bc11389c0" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.2.55" rel="lp152.2.15.1"/>
  <changelog author="David D&#xED;az &lt;dgonzalez@suse.com&gt;" date="1590062400">- Revamp the storage client user interface, adapting it to the
  storage-ng features.
- Avoid detecting bcache as a volume group (bsc#1136454).
- 4.2.36</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1601380800">- Drop the 'general/mouse' element from the schema. It has been
  unsupported since version 3.0.3, FATE#313101 (bsc#1176973).
- 4.2.46</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1610625600">- Upgrade: Checking if a valid base product has been selected for
  upgrade and if not asking the user to check the product entry
  in the AY configuration file (bsc#1175876).
- 4.2.47</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614340800">- Select patterns during auto installation even when not using the
  confirm mode (related to jsc#SMO-20 and bsc#1182543).
- 4.2.48</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614686400">- Execute the security client even when the given profile
  does not have a security section (bsc#1182543).
- 4.2.49</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1614859200">- Import the security settings after importing the bootloader
  configuration (bsc#1183042).
- 4.2.50</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1620388800">- During autoupgrade do not try to register the system if it is
  explicitly disabled in the profile (bsc#1176965)
- 4.2.51</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1620907200">- Backport gh#651 by schubi@suse.de:
  - Moving &lt;files&gt; section handling from second installation stage
    to first installation stage. (bsc#1174194)
- 4.2.52</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1625486400">- Do not export the general/storage section when it is empty
  (related to bsc#1171356 and bsc#1187916).
- 4.2.53</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1625832000">- Add missing elements to rules.xml schema:
  - installed_product and installed_product_version (boo#1176089)
  - dialog section (bsc#1188153)
- 4.2.54</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1626436800">- Copy the files to the right location when a &lt;file_location&gt;
  is given (bsc#1188357).
- 4.2.55</changelog>
</package>
<package pkgid="48ecd5a4b29b1b74d3921802d37f1b118e8b39d35ba03e8edafa5c226ed54522" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.2.56" rel="lp152.2.18.1"/>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1590580800">- Do not propose insecure signature handling settings when
  cloning (bsc#1171343).
- Assign the correct callback when "accept_unknown_digest" is set.
- Do not export storage settings in the general section
  unless it is needed (related to bsc#1171356).
- 4.2.37</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1591963200">- Export ntp_policy as CDATA so that empty strings are preserved
  for the second_stage (bsc#1172026)
- 4.2.38</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594123200">- Do not remove interfaces configuration by default when there is
  not networking section defined in the profile (bsc#1173793)
- 4.2.39</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1594209600">- Move pre-scripts to the autoinit client running them just after
  the profile has been processed (bsc#1110413)
- 4.2.40</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1594382400">- Fix 'autoyast' and 'clone_system' command line interfaces
  (bsc#1172548):
  - autoyast: add a list-modules command to list all known modules.
  - autoyast: display the correct client name in the help text.
  - autoyast: 'file' and 'module' command are now equivalent.
    Both of them support setting 'filename' and 'modname'
    arguments.
  - clone_system: add a 'filename' option instead of always using
    '/root/autoinst.xml'.
  - clone_system: move the logic to find the clonable modules
- 4.2.41</changelog>
  <changelog author="schubi@suse.de" date="1595332800">- Saving log files of postpartitioning-scripts (bsc#1145269).
- 4.2.42</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1598961600">- Use &lt;script&gt; elements instead of &lt;listentry&gt; when exporting the
  &lt;postpartitioning-scripts&gt; section (related to bsc#1175714).
- 4.2.43</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1599480000">- When 'NetworkManager' is selected in the profile as the network
  backend to be used, the 'NetworkManager' package is added to the
  list of packages to be installed in case of missing (bsc#1172817)
- 4.2.44</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1600344000">- Import general and report sections in case that some pre-script
  modified the profile (bsc#1175725)
- 4.2.45</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1601380800">- Drop the 'general/mouse' element from the schema. It has been
  unsupported since version 3.0.3, FATE#313101 (bsc#1176973).
- 4.2.46</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.de&gt;" date="1610625600">- Upgrade: Checking if a valid base product has been selected for
  upgrade and if not asking the user to check the product entry
  in the AY configuration file (bsc#1175876).
- 4.2.47</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614340800">- Select patterns during auto installation even when not using the
  confirm mode (related to jsc#SMO-20 and bsc#1182543).
- 4.2.48</changelog>
  <changelog author="David Diaz &lt;dgonzalez@suse.com&gt;" date="1614686400">- Execute the security client even when the given profile
  does not have a security section (bsc#1182543).
- 4.2.49</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1614859200">- Import the security settings after importing the bootloader
  configuration (bsc#1183042).
- 4.2.50</changelog>
  <changelog author="Knut Anderssen &lt;kanderssen@suse.com&gt;" date="1620388800">- During autoupgrade do not try to register the system if it is
  explicitly disabled in the profile (bsc#1176965)
- 4.2.51</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1620907200">- Backport gh#651 by schubi@suse.de:
  - Moving &lt;files&gt; section handling from second installation stage
    to first installation stage. (bsc#1174194)
- 4.2.52</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1625486400">- Do not export the general/storage section when it is empty
  (related to bsc#1171356 and bsc#1187916).
- 4.2.53</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1625832000">- Add missing elements to rules.xml schema:
  - installed_product and installed_product_version (boo#1176089)
  - dialog section (bsc#1188153)
- 4.2.54</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1626436800">- Copy the files to the right location when a &lt;file_location&gt;
  is given (bsc#1188357).
- 4.2.55</changelog>
  <changelog author="Imobach Gonzalez Sosa &lt;igonzalezsosa@suse.com&gt;" date="1632225600">- Update the rules.xml schema:
  - add the "hostname" element (bsc#1190696).
  - remove the 'haspcmica' element (related to bsc#1183352).
- 4.2.56</changelog>
</package>
<package pkgid="ecc40d6005352fe2da30eb34752bcd1b546b5ed2d78906bd917c785e008afb8c" name="avahi" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="becf24ec4bc8a3572982358d00a8718c0716882665ebfc71136e2233e541e85d" name="avahi" arch="src">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="18226ce0b32a815e36c57f38bbae56e3220bf7b0fcf8dd534838ecd98e969d03" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="75439b97ecf47749616bc074490abfc4ba07f3ecdcda491a341d1f235aa7f719" name="avahi" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="236bc5a494e93999a589d2fdce04b2a3e622f478be94e47bbdf736ce90889ac0" name="avahi" arch="src">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="7e5efb5ecc92b3ebcfac22bb8d1db3fa8f91aa032fa75da59bf031d90a4f2e2e" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="61927b78b17d1601ea408c01bf82b4ec502124428572b34d4192228dda6c77fa" name="avahi" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="7d04a94c3025d6209ee8bb661562a64b288b528afebcdb826ff4066eccca3bf8" name="avahi" arch="src">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="ace4a8cd1fe7a6e87bbaad2d8068a17c072fcbcd5623690d78d44e2059f01368" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="ef439c20b1a7a57bd5842fa2b1854d564b6b45021b765496cbaabc5b6ef180eb" name="avahi-autoipd" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="3c6135edd03b6197d88ca21a441d737bb3bbd75590f5bf5e0cfb4d3fac7c7a12" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="ef617ebaf54b161bd136b6915985fc023de11dbe257c18135827109e25717abb" name="avahi-autoipd" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="99ccb735b25455b371308ee0987d4bc1da6678b7b046a6e20dbb91258a65c385" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="e25e377cf25d3a2553dad96b01744894bad1a859075ece6f3d6e9bcb8634b4a2" name="avahi-autoipd" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="445c3c2f78859d504ff0b4cac52c055383eaa3b6c9bd1e05d567e6b98921ac21" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="df039147de1ebf298735bbffe2cab6df6db99ce158c61dc3f6b24f2d15d1920f" name="avahi-compat-howl-devel" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="2aa452441bf14d178e80a8874c2bfd1a2232fba53e09f913f69829f7963f0427" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="d0d351f5741b335a0a1815e6fb0e3ec37fdae7785b6b06b4f2bcea160421b220" name="avahi-compat-howl-devel" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="cf39bc60a0c51fd3d6be754272581befb6547cff7264fd42b3f5933b4a603fed" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="62024d8d7bf7d8b114f03ba34ae0065ec7c1175fc106c479fb0ff85525d6a1f5" name="avahi-compat-howl-devel" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="8d7a6370d42a6db3d68096755e559a6b705bec93af9d2906bf9ff76edaf0c127" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="2b70529e426bb0ae924c13b7455b0729c9c88163a1e09df8d1bf92c8641e105e" name="avahi-compat-mDNSResponder-devel" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="24f6d3f1105e244a03407b15dbe592eaffbd37be8d5f9a9b3fea214a9f976cd3" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="381e8bdc775543180c2a32998b667f2ac9745dcfbf891a3e75eeadea507f172f" name="avahi-compat-mDNSResponder-devel" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="8c84f0b36f874afb200340a9a1ba81a2b68491952b7c436e19dc6fe26c48d816" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="d78945592a9f33c373198b5a2c0db73d19f4b673440a4a96630eeafdab962cac" name="avahi-compat-mDNSResponder-devel" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="cf6305fa49d3f595470e1f599fb373567222dcdde190657b84a1b7b567f9f91b" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="969e87a10118232cc5a44e4ad7e7ce77e8021a1b1df740b8033d518ff0937fca" name="avahi-glib2" arch="src">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Build glib2, gobject and python stuff separately to break build
  loop cups -&gt; gtk2 -&gt; avahi -&gt; cups.
- Split avahi-python-gtk from avahi-python.
- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="aj@suse.de" date="1217073600">- Fix requires to require avahi base package.</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="ro@suse.de" date="1217764800">- move fix further up in specfile</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="7293dda00b594c4475ae3054f13d33f093e4af81985514c484c30b2359d0856e" name="avahi-glib2" arch="src">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Build glib2, gobject and python stuff separately to break build
  loop cups -&gt; gtk2 -&gt; avahi -&gt; cups.
- Split avahi-python-gtk from avahi-python.
- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="aj@suse.de" date="1217073600">- Fix requires to require avahi base package.</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="ro@suse.de" date="1217764800">- move fix further up in specfile</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="350b37471ef221331abbe0c7ef06d0b49a76a3c03f592691e4898631fcee6299" name="avahi-glib2" arch="src">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Build glib2, gobject and python stuff separately to break build
  loop cups -&gt; gtk2 -&gt; avahi -&gt; cups.
- Split avahi-python-gtk from avahi-python.
- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="aj@suse.de" date="1217073600">- Fix requires to require avahi base package.</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="ro@suse.de" date="1217764800">- move fix further up in specfile</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="5acc55bffc85ec34042b4d664ddf3230a28a40e2b14f1ab9ac40ae1100a88a99" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="121298c35d4d7ab4d641c3c8acad86de3c08013eed24214b6b30b4e9f9c59f90" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="59376e76f82d786f391ff2e492d8c59bcc2e3d579cba573a613472f283002a57" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="bd89626a5fecb5d9b8519bf644dc5c81d1485526cbb321aa381d5df418678792" name="avahi-mono" arch="src">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="aj@suse.de" date="1184587200">- Create new spec file to avoid build cycle avahi-&gt;gnome-&gt;mono-&gt;avahi.</changelog>
  <changelog author="aj@suse.de" date="1185796800">- Add gcc-c++ to BuildRequires.</changelog>
  <changelog author="bk@suse.de" date="1186401600">- replace -p /usr/sbin/ldconfig with %{run_ldconfig}</changelog>
  <changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="bwiedemann@suse.com" date="1492776000">- use strip-nondeterminism to make build fully reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="180e71f1ed0a07b1f04b4d13a6eeeeefec1795b2b71e5e806a134cf37c64409b" name="avahi-mono" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="bwiedemann@suse.com" date="1492776000">- use strip-nondeterminism to make build fully reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="9dca8b17cbc1a4f6e02593cf41b3d602c97b252d920512b0bbcb19011e57c9c7" name="avahi-mono" arch="src">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="aj@suse.de" date="1184587200">- Create new spec file to avoid build cycle avahi-&gt;gnome-&gt;mono-&gt;avahi.</changelog>
  <changelog author="aj@suse.de" date="1185796800">- Add gcc-c++ to BuildRequires.</changelog>
  <changelog author="bk@suse.de" date="1186401600">- replace -p /usr/sbin/ldconfig with %{run_ldconfig}</changelog>
  <changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="bwiedemann@suse.com" date="1492776000">- use strip-nondeterminism to make build fully reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="fd23263ffd10331a3c35c4ada536f0dbb977b110cfd47f3723bfb05bfae9ff8b" name="avahi-mono" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="bwiedemann@suse.com" date="1492776000">- use strip-nondeterminism to make build fully reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="6773b7ba3e80e1414597000bc932d16d4b92457ccc88e4443562d57b6cf5b026" name="avahi-mono" arch="src">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="aj@suse.de" date="1184587200">- Create new spec file to avoid build cycle avahi-&gt;gnome-&gt;mono-&gt;avahi.</changelog>
  <changelog author="aj@suse.de" date="1185796800">- Add gcc-c++ to BuildRequires.</changelog>
  <changelog author="bk@suse.de" date="1186401600">- replace -p /usr/sbin/ldconfig with %{run_ldconfig}</changelog>
  <changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="bwiedemann@suse.com" date="1492776000">- use strip-nondeterminism to make build fully reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="cf691a81f97cb2958b2c96541a733ab3fa493138608c160d88048fb34091d090" name="avahi-mono" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="bwiedemann@suse.com" date="1492776000">- use strip-nondeterminism to make build fully reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="301e725ff6764ec593b74de7482080629fe5cc10ae5c5ca6973cf177ba7b2274" name="avahi-qt4" arch="src">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="6b9cb98441ee49b6c59a9a164e6e5a4b904e6bef730b01e56b0f74219d33cd66" name="avahi-qt4" arch="src">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="51a9872712d2509a58a5c9d7c30ecf70dd655c91adeded6ee2ad45b442b16ddb" name="avahi-qt4" arch="src">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="fe947bbbd610a63ca686b5bae40541b7c56ba7ff6304a313060046cd2fd079aa" name="avahi-utils" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="e0a46562a52085dac833c7494240e65b36934d626d5ca0893e9e7375fe94deaf" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="a57817d7222f5853d123ddcc8711e7ea5cc3d7b47639f656b384025db1a702d6" name="avahi-utils" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="06b80c71e908bca576b40874f7c0887e718e01e350fe3cd04fd418423a795005" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="09d11e250838f14ad495f96b113c0b67477a34ca216387872b126f6c97144eeb" name="avahi-utils" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="52083437b0b21bf4501a82af43f1b1607c5c341894282f5dc26faf04eb11a0b1" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="561dfffbbd2626badd7c4cb96331a62b46bf33b2016d5d9bfe0ab549a1fd2546" name="avahi-utils-gtk" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="2c8a412a2efe1d61f4d41d8297a4461d97dd128e16f6b9b5f67c6cc8a80cd636" name="avahi-utils-gtk" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="b8c1810e64bc72aa24a21c7e7deebb21d1bf3927837a68dd7a1cc01324601e92" name="avahi-utils-gtk" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="b30b6d059685a33ce361e29f3ac22c652ca9ae1c5ef7a4119007667ab326369d" name="avahi-utils-gtk" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="8a8f682810538cc5552f8357e7eb708e2babe7abb45a9af964cbdd05e8644337" name="avahi-utils-gtk" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="0bfabfa9f6536f3cb9fa20f0fd20d7f94cc913a08a5fcb4f82a804f6ad737a88" name="avahi-utils-gtk" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="d2816aada8ada80ece0373ce323fa8aa11723f18c3ca69a2b98a7872be22a8f5" name="azure-cli" arch="noarch">
  <version epoch="0" ver="2.14.2" rel="lp152.3.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1578312000">- New upstream release
  + Version 2.0.78
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1578398400">- New upstream release
  + Version 2.0.79
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579176000">- New upstream release
  + Version 2.0.80
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1582545600">- New upstream release
  + Version 2.1.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584446400">- Remove unsupported component package from Requires
  + azure-cli-taskhelp</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
</package>
<package pkgid="9fbd6dabf1924ca455357cf0e0ea8135eb994bef3382e995e3d87ccc1f004100" name="azure-cli" arch="src">
  <version epoch="0" ver="2.14.2" rel="lp152.3.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1578312000">- New upstream release
  + Version 2.0.78
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1578398400">- New upstream release
  + Version 2.0.79
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579176000">- New upstream release
  + Version 2.0.80
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1582545600">- New upstream release
  + Version 2.1.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584446400">- Remove unsupported component package from Requires
  + azure-cli-taskhelp</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
</package>
<package pkgid="807a5c9a68dba72f648b83af55bd00cb814ade95d358a3c9d224870256b340f0" name="azure-cli" arch="noarch">
  <version epoch="0" ver="2.16.0" rel="lp152.3.6.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584446400">- Remove unsupported component package from Requires
  + azure-cli-taskhelp</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1626177600">- Add missing python3-azure-mgmt-resource dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
</package>
<package pkgid="3abf86d598fed2cf6166e156d46a2ca3cdf99c8e57668a7f01f41fcb6cd5ef16" name="azure-cli" arch="src">
  <version epoch="0" ver="2.16.0" rel="lp152.3.6.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584446400">- Remove unsupported component package from Requires
  + azure-cli-taskhelp</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1626177600">- Add missing python3-azure-mgmt-resource dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
</package>
<package pkgid="503beb1d3469f72f3369d93442eb209b56e810168bccfcccab002e15a2693274" name="azure-cli-command-modules-nspkg" arch="noarch">
  <version epoch="0" ver="2.0.3" rel="lp152.5.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 2.0.1</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1555416000">- New upstream release
  + Version 2.0.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Bump minimum version for Python Azure SDK namespace
  packages to 3.0.0 in BuildRequires and Requires
- Remove python3-devel package from BuildRequires
- Remove unzip package from BuildRequires
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559649600">- Remove unneccesary %python_expand prefix from %fdupes call</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571918400">- New upstream release
  + Version 2.0.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
</package>
<package pkgid="092dd3bd0ac876e1f63960b3df7eb0945628d34493b4d6e4439f03684f840db6" name="azure-cli-command-modules-nspkg" arch="src">
  <version epoch="0" ver="2.0.3" rel="lp152.5.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 2.0.1</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1555416000">- New upstream release
  + Version 2.0.2
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Bump minimum version for Python Azure SDK namespace
  packages to 3.0.0 in BuildRequires and Requires
- Remove python3-devel package from BuildRequires
- Remove unzip package from BuildRequires
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559649600">- Remove unneccesary %python_expand prefix from %fdupes call</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571918400">- New upstream release
  + Version 2.0.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
</package>
<package pkgid="c9f3218365f7df92d9f49f5998275648fd49c16d5639c88b4f708bec6a1d6748" name="azure-cli-core" arch="noarch">
  <version epoch="0" ver="2.14.2" rel="lp152.4.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1574942400">- New upstream release
  + Version 2.0.77
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1578312000">- New upstream release
  + Version 2.0.78
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1578398400">- New upstream release
  + Version 2.0.79
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579176000">- New upstream release
  + Version 2.0.80
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- unrestrict python-PyYAML</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1582545600">- New upstream release
  + Version 2.1.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Relax version dependency for python-humanfriendly in Requires
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Add patch to disable automatic check for updates (boo#1175289)
  + acc_disable-update-check.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Override upstream version in Requires for python-azure-mgmt-resource</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605614400">- Lower version dependency for python-azure-mgmt-resource to &gt;= 10.0.0</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
</package>
<package pkgid="1a810709c6cc1bd80c0aecf85b06d99798804a5a73aefb80999ad319361ec17d" name="azure-cli-core" arch="src">
  <version epoch="0" ver="2.14.2" rel="lp152.4.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1574942400">- New upstream release
  + Version 2.0.77
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1578312000">- New upstream release
  + Version 2.0.78
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1578398400">- New upstream release
  + Version 2.0.79
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579176000">- New upstream release
  + Version 2.0.80
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- unrestrict python-PyYAML</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1582545600">- New upstream release
  + Version 2.1.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Relax version dependency for python-humanfriendly in Requires
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Add patch to disable automatic check for updates (boo#1175289)
  + acc_disable-update-check.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Override upstream version in Requires for python-azure-mgmt-resource</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605614400">- Lower version dependency for python-azure-mgmt-resource to &gt;= 10.0.0</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
</package>
<package pkgid="047a7b85a131aa22e9bd4b6b491ba771393aca1212b294bd3fb1e177cbfdf510" name="azure-cli-core" arch="noarch">
  <version epoch="0" ver="2.16.0" rel="lp152.4.6.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579176000">- New upstream release
  + Version 2.0.80
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- unrestrict python-PyYAML</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1582545600">- New upstream release
  + Version 2.1.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Relax version dependency for python-humanfriendly in Requires
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Add patch to disable automatic check for updates (boo#1175289)
  + acc_disable-update-check.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Override upstream version in Requires for python-azure-mgmt-resource</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605614400">- Lower version dependency for python-azure-mgmt-resource to &gt;= 10.0.0</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Refresh patches for new version
  + acc_disable-update-check.patch
- Update Requires from setup.py
  + Temporarily use a vendored copy of azure-mgmt-resource</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
</package>
<package pkgid="19a62b2dd440068f16d25760b2f36dd1adee2dac6ce9fc019dbbb8ae6c7ba21e" name="azure-cli-core" arch="src">
  <version epoch="0" ver="2.16.0" rel="lp152.4.6.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579176000">- New upstream release
  + Version 2.0.80
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1580299200">- unrestrict python-PyYAML</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1582545600">- New upstream release
  + Version 2.1.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Relax version dependency for python-humanfriendly in Requires
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Add patch to disable automatic check for updates (boo#1175289)
  + acc_disable-update-check.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Override upstream version in Requires for python-azure-mgmt-resource</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605614400">- Lower version dependency for python-azure-mgmt-resource to &gt;= 10.0.0</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Refresh patches for new version
  + acc_disable-update-check.patch
- Update Requires from setup.py
  + Temporarily use a vendored copy of azure-mgmt-resource</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
</package>
<package pkgid="957a6eacb87fd516d2d8556826afd0b55bbe5bb74a9a678718cb607fcdbe400c" name="azure-cli-nspkg" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="lp152.3.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 3.0.1</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 3.0.2
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1555416000">- New upstream release
  + Version 3.0.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Bump minimum version for Python Azure SDK namespace
  packages to 3.0.0 in BuildRequires and Requires
- Remove python3-devel package from BuildRequires
- Remove unzip package from BuildRequires
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559649600">- Remove unneccesary %python_expand prefix from %fdupes call</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571918400">- New upstream release
  + Version 3.0.4
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
</package>
<package pkgid="41144cac7fbe83c61a06a117389d959ac012a106deff3abe72f09f363d9cbd76" name="azure-cli-nspkg" arch="src">
  <version epoch="0" ver="3.0.4" rel="lp152.3.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1506513600">- Initial build
  + Version 3.0.1</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1524225600">- New upstream release
  + Version 3.0.2
- Move LICENSE.txt from %doc to %license section</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1555416000">- New upstream release
  + Version 3.0.3
  + For detailed information about changes see the
    HISTORY.txt file provided with this package
- Bump minimum version for Python Azure SDK namespace
  packages to 3.0.0 in BuildRequires and Requires
- Remove python3-devel package from BuildRequires
- Remove unzip package from BuildRequires
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559649600">- Remove unneccesary %python_expand prefix from %fdupes call</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571918400">- New upstream release
  + Version 3.0.4
  + For detailed information about changes see the
    HISTORY.txt file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
</package>
<package pkgid="faa40d9f5ade6daedb0e4165143c6fc456762c61b5bb63f8ba97442b65a9d4a7" name="azure-cli-telemetry" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp152.3.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- Initial build
  + Version 1.0.0
- Add patch to relax version numbers in install_requires
  + act_relax-requires-versions.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1555416000">- New upstream release
  + Version 1.0.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Bump minimum version for Python Azure SDK namespace
  packages to 3.0.0 in BuildRequires and Requires
- Remove python3-devel package from BuildRequires
- Remove unzip package from BuildRequires
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559649600">- Remove unneccesary %python_expand prefix from %fdupes call</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571918400">- New upstream release
  + Version 1.0.4
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Drop patch to relax version requires in setup.py, it's
  not required as the dependencies are managed by RPM
  + act_relax-requires-versions.patch
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599048000">- New upstream release
  + Version 1.0.6
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
</package>
<package pkgid="7d31458b8af9d6192cb9d347d504501951a77525926784f143d51662c891433b" name="azure-cli-telemetry" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp152.3.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1538395200">- Initial build
  + Version 1.0.0
- Add patch to relax version numbers in install_requires
  + act_relax-requires-versions.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1555416000">- New upstream release
  + Version 1.0.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Bump minimum version for Python Azure SDK namespace
  packages to 3.0.0 in BuildRequires and Requires
- Remove python3-devel package from BuildRequires
- Remove unzip package from BuildRequires
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559649600">- Remove unneccesary %python_expand prefix from %fdupes call</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571918400">- New upstream release
  + Version 1.0.4
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Drop patch to relax version requires in setup.py, it's
  not required as the dependencies are managed by RPM
  + act_relax-requires-versions.patch
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Include in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599048000">- New upstream release
  + Version 1.0.6
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
</package>
<package pkgid="9948ef3aa3040d49eb6cdf7dd20d968555859e4e27278c3bcac9291828e7c8b8" name="azure-cli-test" arch="src">
  <version epoch="0" ver="2.14.2" rel="lp152.3.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1578312000">- New upstream release
  + Version 2.0.78
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1578398400">- New upstream release
  + Version 2.0.79
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579176000">- New upstream release
  + Version 2.0.80
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1582545600">- New upstream release
  + Version 2.1.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584446400">- Remove unsupported component package from Requires
  + azure-cli-taskhelp</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
</package>
<package pkgid="aacb78be4b204dc9eb41e19254d87d8c831e8952ec3e5e4dd8629144b26d4fdf" name="azure-cli-test" arch="x86_64">
  <version epoch="0" ver="2.14.2" rel="lp152.3.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1578312000">- New upstream release
  + Version 2.0.78
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1578398400">- New upstream release
  + Version 2.0.79
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579176000">- New upstream release
  + Version 2.0.80
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1582545600">- New upstream release
  + Version 2.1.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584446400">- Remove unsupported component package from Requires
  + azure-cli-taskhelp</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
</package>
<package pkgid="f3524facb8cd24de085a46afe250d9fc18887d8c0a177b51e127f013eaba17c0" name="azure-cli-test" arch="src">
  <version epoch="0" ver="2.16.0" rel="lp152.3.6.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584446400">- Remove unsupported component package from Requires
  + azure-cli-taskhelp</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1626177600">- Add missing python3-azure-mgmt-resource dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
</package>
<package pkgid="0ae0b8d3d6e922f437c12ce6365421487d043e6ca4068cde51a8495edb36887f" name="azure-cli-test" arch="x86_64">
  <version epoch="0" ver="2.16.0" rel="lp152.3.6.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584446400">- Remove unsupported component package from Requires
  + azure-cli-taskhelp</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1626177600">- Add missing python3-azure-mgmt-resource dependency to Requires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
</package>
<package pkgid="70a21e47aae49fe66bb2d1859f2143c668e5839239fed3b2109fa578b5c3bc58" name="balsa" arch="src">
  <version epoch="0" ver="2.6.1" rel="lp152.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365249600">- Update to version 2.5.0:
  + Making gtk3 build the official one.
- Rework BuildRequires for the large rewrite/port to GTK3:
  + Removed: pkgconfig(gconf-2.0), pkgconfig(gmime-2.4),
    pkgconfig(gnome-keyring-1), pkgconfig(gtk+-2.0),
    pkgconfig(gtksourceview-2.0), pkgconfig(gtkspell-2.0),
    pkgconfig(libbonobo-2.0), pkgconfig(libcanberra-gtk),
    pkgconfig(libgnome-2.0), pkgconfig(libgnomeui-2.0),
    pkgconfig(webkit-1.0)
  + Added: pkgconfig(gtk+-3.0), pkgconfig(gtksourceview-3.0),
    pkgconfig(gtkspell3-3.0), pkgconfig(libcanberra-gtk3),
    pkgconfig(libsecret-1), pkgconfig(webkitgtk-3.0).
- Add balsa-gtksourceview.patch: Fix build with gtksourceview 3.8.</changelog>
  <changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 2.5.1:
  + Mew message header widget.
  + WebkitGtk2 widget integration.
  + Ported to GNetworkMonitor.
  + Yet another documentation port.
  + Initial config assistant improvements.
- Change --with-html-widget=webkit configure parameter to
  - -with-html-widget=webkit2, to switch to WebKit2.
- Replace gnome-doc-utils-devel BuildRequires with yelp-tools,
  following upstreams port to the new documentation infrastructure.
- Drop balsa-gtksourceview.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1410264000">- Add balsa-support-webkit2gtk-4.0.patch: Support building with
  webkit2gtk3 (bgo#736493).
- Add conditional pkgconfig(webkit2gtk-4.0) BuildRequires for
  versions newer than 1310 as the above patch adds support for it.
- Add libtool BuildRequires and call to autoreconf, as above patch
  touches the build system.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412856000">- Starting with openSUSE 13.2, compface was split into a -devel and
  library package. Conditionally BuildRequires compface-devel
  (openSUSE &gt;= 1320).</changelog>
  <changelog author="zaitor@opensuse.org" date="1418731200">- Make comface-devel BuildRequires only for releases newer than
  13.2, the split never made it into release.</changelog>
  <changelog author="dimstar@opensuse.org" date="1433160000">- Update to version 2.5.2:
  + Silence some autoconf and automake complaints.
  + Clean up store-address dialog.
  + Do not use header bar in GtkMessageDialog, it does nothing.
  + Use headerbars.
  + Deprecation cleanups.
  + Abandon buttons with both an icon and text, and use a symbolic
    icon where we keep the icon.
  + Enable the request of Delivery Status Notifications.
  + Disable SSLv3, with an option in the code to override, and
    enable TLSv1.1 and 1.2.
  + balsa.appdata.xml: new appdata file.
  + Fix S/MIME sending and Outlook2007 reception (bgo#720423).
- Drop balsa-support-webkit2gtk-4.0.patch: fixed upstream.
- Drop libtool BuildRequires and call to autoreconf, as we no
  longer carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1433246400">- Drop conditional pkgconfig(webkit2gtk-3.0) BuildRequires, as
  balsa now only supports webkit2gtk-4.0.
- Stop passing no longer recognized options:
  - -disable-scrollkeeper and --with-unique. Also remove a few
  obsolete conditionals.</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Fix build for Leap 42.1 and 42.2, via tweaking conditional for
  compface/compface-devel BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 2.5.3:
  + More bugfixes and ports.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503230400">- Drop obsolete pkgconfig(unique-1.0) BuildRequires: No longer
  needed, nor used.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512302400">- Add balsa-build-ssl-1.1.patch: Fix build with new openssl 1.1.0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1516276800">- Clean up spec:
  + Drop old and unused pre_checkin.sh for TOUCHSCREEN_OPTIMIZATION
    and all conditionals related to it (base_name et al.).
  + Fixup compface BuildRequires to only be for non-openSUSE.
  + Drop translation-update-upstream BuildRequires and macro.</changelog>
  <changelog author="jengelh@inai.de" date="1516881600">- Replace untrue description.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523102400">- Update to version 2.5.5:
  + Crypto performance improvements.
  + Updates to match glib-2.56 API changes.
  + Fix use-after-free bugs.
  + Improve replying to HTML-only messages.
  + Low level networking re-done.
  + Multiple bugfixes.
- Drop balsa-build-ssl-1.1.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Add pkgconfig(gnutls) and python3-html2text BuildRequires: New
  dependencies.
- Drop conditional compface BuildRequires.
- Add conditional for pkgconfig(enchant) and new
  pkgconfig(enchant-2) BuildRequires.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1530187200">- Update to version 2.5.6:
  + Fix scroll on click issue.
  + Display time stamps of date-only RFC 5545 iCalendar events.
  + Disable reply-to-group when the message is not from an
    RFC-2369-compliant mail list.
  + Mitigate EFail vulnerability for Webkit2.
- Fix a typo that breaks build in released version:
  + Add balsa-2.5.6-fix-build-breaker-typo.patch (picked from
    upstream).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Drop pkgconfig(libnm-glib) BuildRequires: Balsa switched from
  libnm-glib to GNetworkMonitor in version 2.5.2.
- Drop pkgconfig(libsecret-1) BuildRequires: Not used, as we are
  not passing --with-libsecret to configure (upstream default is
  not using it).
- Stop passing --enable-smime, --with-gtkspell and --with-ssl to
  configure, no longer recognized.
- Replace pkgconfig(gtkspell3-3.0) with pkgconfig(gspell-1)
  BuildRequires and pass --with-spell-checker=gspell to configure.
  This also allows for dropping conditionals for
  pkgconfig(enchant-2) and pkgconfig(enchant) BuildRequires.
- Replace openssl-devel with pkgconfig(openssl) BuildRequires,
  align with what configure checks for.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571227200">- Update to version 2.5.8:
  + HTML email improvements; vcal attachment handling.
- Changes from version 2.5.7:
  + encryption, HTML email improvements; bug fixes.
- Drop conditional post(un) handling for obsolete versions of
  openSUSE.
- Drop balsa-2.5.6-fix-build-breaker-typo.patch: Fixed upstream.
- Drop update-desktop-files BuildRequires and macros as well as
  balsa-lang Recommends, no longer needed.
- Add pkgconfig(fribidi) BuildRequires: New dependency.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1586692800">- Update to version 2.5.10:
  + Set message threading correctly on new mailboxes.
  + Display S/MIME and TLS certificate chains.
  + Improve handling of multipart/related message parts.
  + Display text/calendar parts using ical library.
  + Multiple bug fixes and code cleanups; remove obsolete command
    line options.
- Changes from version 2.5.9:
  + Fix HTML message layout issues.
- Add pkgconfig(libical) and pkgconfig(libsecret-1) BuildRequires:
  New dependencies.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1586692801">- Update to version 2.6.0:
  + This release switches to gmime3 library for MIME processing.
- Replace pkgconfig(gmime-2.6) with pkgconfig(gmime-3.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1624536000">- Update to version 2.6.1
  + fix server identity verification (CVE-2020-13645), fixes boo#1172460</changelog>
</package>
<package pkgid="c2289f4270671b39eb46e4f70dc358ac52eef9ab054b58def75153c4bb18cab9" name="balsa" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418731200">- Make comface-devel BuildRequires only for releases newer than
  13.2, the split never made it into release.</changelog>
  <changelog author="dimstar@opensuse.org" date="1433160000">- Update to version 2.5.2:
  + Silence some autoconf and automake complaints.
  + Clean up store-address dialog.
  + Do not use header bar in GtkMessageDialog, it does nothing.
  + Use headerbars.
  + Deprecation cleanups.
  + Abandon buttons with both an icon and text, and use a symbolic
    icon where we keep the icon.
  + Enable the request of Delivery Status Notifications.
  + Disable SSLv3, with an option in the code to override, and
    enable TLSv1.1 and 1.2.
  + balsa.appdata.xml: new appdata file.
  + Fix S/MIME sending and Outlook2007 reception (bgo#720423).
- Drop balsa-support-webkit2gtk-4.0.patch: fixed upstream.
- Drop libtool BuildRequires and call to autoreconf, as we no
  longer carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1433246400">- Drop conditional pkgconfig(webkit2gtk-3.0) BuildRequires, as
  balsa now only supports webkit2gtk-4.0.
- Stop passing no longer recognized options:
  - -disable-scrollkeeper and --with-unique. Also remove a few
  obsolete conditionals.</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Fix build for Leap 42.1 and 42.2, via tweaking conditional for
  compface/compface-devel BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 2.5.3:
  + More bugfixes and ports.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503230400">- Drop obsolete pkgconfig(unique-1.0) BuildRequires: No longer
  needed, nor used.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512302400">- Add balsa-build-ssl-1.1.patch: Fix build with new openssl 1.1.0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1516276800">- Clean up spec:
  + Drop old and unused pre_checkin.sh for TOUCHSCREEN_OPTIMIZATION
    and all conditionals related to it (base_name et al.).
  + Fixup compface BuildRequires to only be for non-openSUSE.
  + Drop translation-update-upstream BuildRequires and macro.</changelog>
  <changelog author="jengelh@inai.de" date="1516881600">- Replace untrue description.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523102400">- Update to version 2.5.5:
  + Crypto performance improvements.
  + Updates to match glib-2.56 API changes.
  + Fix use-after-free bugs.
  + Improve replying to HTML-only messages.
  + Low level networking re-done.
  + Multiple bugfixes.
- Drop balsa-build-ssl-1.1.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Add pkgconfig(gnutls) and python3-html2text BuildRequires: New
  dependencies.
- Drop conditional compface BuildRequires.
- Add conditional for pkgconfig(enchant) and new
  pkgconfig(enchant-2) BuildRequires.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1530187200">- Update to version 2.5.6:
  + Fix scroll on click issue.
  + Display time stamps of date-only RFC 5545 iCalendar events.
  + Disable reply-to-group when the message is not from an
    RFC-2369-compliant mail list.
  + Mitigate EFail vulnerability for Webkit2.
- Fix a typo that breaks build in released version:
  + Add balsa-2.5.6-fix-build-breaker-typo.patch (picked from
    upstream).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Drop pkgconfig(libnm-glib) BuildRequires: Balsa switched from
  libnm-glib to GNetworkMonitor in version 2.5.2.
- Drop pkgconfig(libsecret-1) BuildRequires: Not used, as we are
  not passing --with-libsecret to configure (upstream default is
  not using it).
- Stop passing --enable-smime, --with-gtkspell and --with-ssl to
  configure, no longer recognized.
- Replace pkgconfig(gtkspell3-3.0) with pkgconfig(gspell-1)
  BuildRequires and pass --with-spell-checker=gspell to configure.
  This also allows for dropping conditionals for
  pkgconfig(enchant-2) and pkgconfig(enchant) BuildRequires.
- Replace openssl-devel with pkgconfig(openssl) BuildRequires,
  align with what configure checks for.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571227200">- Update to version 2.5.8:
  + HTML email improvements; vcal attachment handling.
- Changes from version 2.5.7:
  + encryption, HTML email improvements; bug fixes.
- Drop conditional post(un) handling for obsolete versions of
  openSUSE.
- Drop balsa-2.5.6-fix-build-breaker-typo.patch: Fixed upstream.
- Drop update-desktop-files BuildRequires and macros as well as
  balsa-lang Recommends, no longer needed.
- Add pkgconfig(fribidi) BuildRequires: New dependency.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1586692800">- Update to version 2.5.10:
  + Set message threading correctly on new mailboxes.
  + Display S/MIME and TLS certificate chains.
  + Improve handling of multipart/related message parts.
  + Display text/calendar parts using ical library.
  + Multiple bug fixes and code cleanups; remove obsolete command
    line options.
- Changes from version 2.5.9:
  + Fix HTML message layout issues.
- Add pkgconfig(libical) and pkgconfig(libsecret-1) BuildRequires:
  New dependencies.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1586692801">- Update to version 2.6.0:
  + This release switches to gmime3 library for MIME processing.
- Replace pkgconfig(gmime-2.6) with pkgconfig(gmime-3.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1624536000">- Update to version 2.6.1
  + fix server identity verification (CVE-2020-13645), fixes boo#1172460</changelog>
</package>
<package pkgid="371ece750810719f3a8a80098f32b9c00ec642618f1c1f6c4b08dbfc32f807b7" name="balsa-lang" arch="noarch">
  <version epoch="0" ver="2.6.1" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418731200">- Make comface-devel BuildRequires only for releases newer than
  13.2, the split never made it into release.</changelog>
  <changelog author="dimstar@opensuse.org" date="1433160000">- Update to version 2.5.2:
  + Silence some autoconf and automake complaints.
  + Clean up store-address dialog.
  + Do not use header bar in GtkMessageDialog, it does nothing.
  + Use headerbars.
  + Deprecation cleanups.
  + Abandon buttons with both an icon and text, and use a symbolic
    icon where we keep the icon.
  + Enable the request of Delivery Status Notifications.
  + Disable SSLv3, with an option in the code to override, and
    enable TLSv1.1 and 1.2.
  + balsa.appdata.xml: new appdata file.
  + Fix S/MIME sending and Outlook2007 reception (bgo#720423).
- Drop balsa-support-webkit2gtk-4.0.patch: fixed upstream.
- Drop libtool BuildRequires and call to autoreconf, as we no
  longer carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1433246400">- Drop conditional pkgconfig(webkit2gtk-3.0) BuildRequires, as
  balsa now only supports webkit2gtk-4.0.
- Stop passing no longer recognized options:
  - -disable-scrollkeeper and --with-unique. Also remove a few
  obsolete conditionals.</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Fix build for Leap 42.1 and 42.2, via tweaking conditional for
  compface/compface-devel BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 2.5.3:
  + More bugfixes and ports.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503230400">- Drop obsolete pkgconfig(unique-1.0) BuildRequires: No longer
  needed, nor used.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512302400">- Add balsa-build-ssl-1.1.patch: Fix build with new openssl 1.1.0.</changelog>
  <changelog author="zaitor@opensuse.org" date="1516276800">- Clean up spec:
  + Drop old and unused pre_checkin.sh for TOUCHSCREEN_OPTIMIZATION
    and all conditionals related to it (base_name et al.).
  + Fixup compface BuildRequires to only be for non-openSUSE.
  + Drop translation-update-upstream BuildRequires and macro.</changelog>
  <changelog author="jengelh@inai.de" date="1516881600">- Replace untrue description.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523102400">- Update to version 2.5.5:
  + Crypto performance improvements.
  + Updates to match glib-2.56 API changes.
  + Fix use-after-free bugs.
  + Improve replying to HTML-only messages.
  + Low level networking re-done.
  + Multiple bugfixes.
- Drop balsa-build-ssl-1.1.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Add pkgconfig(gnutls) and python3-html2text BuildRequires: New
  dependencies.
- Drop conditional compface BuildRequires.
- Add conditional for pkgconfig(enchant) and new
  pkgconfig(enchant-2) BuildRequires.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1530187200">- Update to version 2.5.6:
  + Fix scroll on click issue.
  + Display time stamps of date-only RFC 5545 iCalendar events.
  + Disable reply-to-group when the message is not from an
    RFC-2369-compliant mail list.
  + Mitigate EFail vulnerability for Webkit2.
- Fix a typo that breaks build in released version:
  + Add balsa-2.5.6-fix-build-breaker-typo.patch (picked from
    upstream).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Drop pkgconfig(libnm-glib) BuildRequires: Balsa switched from
  libnm-glib to GNetworkMonitor in version 2.5.2.
- Drop pkgconfig(libsecret-1) BuildRequires: Not used, as we are
  not passing --with-libsecret to configure (upstream default is
  not using it).
- Stop passing --enable-smime, --with-gtkspell and --with-ssl to
  configure, no longer recognized.
- Replace pkgconfig(gtkspell3-3.0) with pkgconfig(gspell-1)
  BuildRequires and pass --with-spell-checker=gspell to configure.
  This also allows for dropping conditionals for
  pkgconfig(enchant-2) and pkgconfig(enchant) BuildRequires.
- Replace openssl-devel with pkgconfig(openssl) BuildRequires,
  align with what configure checks for.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571227200">- Update to version 2.5.8:
  + HTML email improvements; vcal attachment handling.
- Changes from version 2.5.7:
  + encryption, HTML email improvements; bug fixes.
- Drop conditional post(un) handling for obsolete versions of
  openSUSE.
- Drop balsa-2.5.6-fix-build-breaker-typo.patch: Fixed upstream.
- Drop update-desktop-files BuildRequires and macros as well as
  balsa-lang Recommends, no longer needed.
- Add pkgconfig(fribidi) BuildRequires: New dependency.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1586692800">- Update to version 2.5.10:
  + Set message threading correctly on new mailboxes.
  + Display S/MIME and TLS certificate chains.
  + Improve handling of multipart/related message parts.
  + Display text/calendar parts using ical library.
  + Multiple bug fixes and code cleanups; remove obsolete command
    line options.
- Changes from version 2.5.9:
  + Fix HTML message layout issues.
- Add pkgconfig(libical) and pkgconfig(libsecret-1) BuildRequires:
  New dependencies.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1586692801">- Update to version 2.6.0:
  + This release switches to gmime3 library for MIME processing.
- Replace pkgconfig(gmime-2.6) with pkgconfig(gmime-3.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1624536000">- Update to version 2.6.1
  + fix server identity verification (CVE-2020-13645), fixes boo#1172460</changelog>
</package>
<package pkgid="83efd73a9109b8d7e27266dfbc6af3f34ed5b55c05ddc1bda0f528ba25d8a786" name="barrier" arch="src">
  <version epoch="0" ver="2.3.3" rel="lp152.3.3.1"/>
  <changelog author="oholecek@suse.com" date="1471521600">- Update to 1.8.2
  * Bug #3044 - Unable to drag-select in MS Office
  * Bug #4768 - Copy paste causes 'server is dead' error on switching
  * Bug #4792 - Server logging crashes when switching with clipboard data
  * Bug #2975 - Middle click does not close Chrome tab on Mac client
  * Bug #5087 - Linux client fails to start due to invalid cursor size
  * Bug #5471 - Serial key textbox on activation screen overflows on Mac
  * Bug #4836 - Stop button resets to Start when settings dialog canceled
  * Enhancement #5277 - Auto restart service when synwinhk.dll fails on Windows
  * Enhancement #4913 - Future-proof GUI login by using newer auth URL
  * Enhancement #4922 - Add --enable-crypto argument to help text
  * Enhancement #5299 - High resolution App icon on Mac
  * Enhancement #4894 - Improve grammar in connection notification dialog
- Drop patch synergy-1.5.0-test.patch
- Remove src/test/CMakeLists.txt to disable tests building</changelog>
  <changelog author="oholecek@suse.com" date="1471608000">- Remove gtest-devel dependency and use bundled one</changelog>
  <changelog author="oholecek@suse.com" date="1471608001">- Remove support for old versions
- Remove hack to disable tests and use bundled gmock</changelog>
  <changelog author="sflees@suse.de" date="1485172800">- Update to 1.8.7
  - 1.8.7 changes
  * Bug #5784 - Edition changes when reopening GUI
  - 1.8.6 changes
  * Bug #5186 - Cursor stuck on client when using multi-DPI server
  * Bug #5722 - Malformed serial key in registry will crash GUI on startup
  * Bug #5752 - Tab order is incorrect on Settings dialog
  - 1.8.5 changes
  * Bug #5680 - Server crashes when disconnecting SSL clients
  * Feature #5707 - User upgrade statistics
  - 1.8.4 changes
  * Bug #4420 When XRandR adds a screen, it is inaccessible
  * Bug #5603 Activation notification depends on existence of /etc/os-release
  * Bug #5624 Update notification sometimes requests a downgrade
  * Bug #5329 Current date is shown for build date in the about dialog
  * Bug #5640 Synergy branding is inconsistent across platforms
  * Enhancement #5617 Remove redundant plugin infrastructure
  * Enhancement #5627 Move SSL certificate generation to main window
  * Enhancement #5628 Move SSL implementation into core binary
  * Enhancement #5629 Move activation from wizard into new dialog window
  - 1.8.3 changes
  * Bug #4740 - Linux client crashes with "Assertion '!m_open' failed"
  * Bug #4879 - Memory leak caused by IpcReader
  * Bug #5373 - Tab behaves like shift tab on client
  * Bug #5502 - Copy and paste from server to client doesn't work
  * Enhancement #123 - Option to disable clipboard sharing</changelog>
  <changelog author="oholecek@suse.com" date="1485864000">- Remove source URL synergy prefix</changelog>
  <changelog author="martin.wilck@suse.com" date="1486382400">- Fix screen size calculation with XRandR enabled (boo#1023635)
  * Added 0001-XRandR-fix-screen-size-calculation.patch</changelog>
  <changelog author="werner@suse.de" date="1493812800">- Update to 1.8.8
  * Bug #5196 - Some keys on Korean and Japanese keyboards have the same keycode
  * Bug #5578 - Pressing Hangul key results in alt+'a'
  * Bug #5785 - Can't switch screens when cursor is in a corner
  * Bug #3992 - macOS: Dragging is broken in Unity 3D
  * Bug #5075 - macOS: Build fails on macOS 10.9 due to unknown compiler flag
  * Bug #5809 - macOS: No version number is shown in the App Info dialog
  * Bug #3197 - Linux: switchDoubleTap option is not working
  * Bug #4477 - Linux: Mouse buttons higher than id 10 result in crash
  * Bug #5832 - Linux: Screen size misdetected on multi-monitor display
  * Enhancement #4504 - Improved Korean language description
  * Enhancement #5525 - Added support for precise screen positioning in config file
  * Enhancement #4290 - Windows: Removed annoying alt+print screen functionality
- Remove patch 0001-XRandR-fix-screen-size-calculation.patch
  as now upstream</changelog>
  <changelog author="oholecek@suse.com" date="1514980800">- Add patch 0001-OpenSSL-1.1.0-build-fix.patch taken from upstream</changelog>
  <changelog author="aloisio@gmx.com" date="1519128000">- Switched build to Qt5
- Enabled PIE</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1519473600">- Add add-support-for-latin-s-and-t-with-comma-below.patch,
  submitted upstream at https://github.com/symless/synergy-core/pull/6261</changelog>
  <changelog author="oholecek@suse.com" date="1528804800">- Update to 1.9.1
  * Fixed issue with screen resolution detection during sleep on macOS
  * Updated OpenSSL to v1.0.2o
- Update to 1.9.0
  * Ported UI to Qt 5
  * Moved GUI build script to CMake
  * Build with MSVC 2015
  * Removal of deprecated 'hm.sh' script and toolchains
- Add Provides and Obsoletes synergy-core (new upstream name)
- Remove patch 0001-OpenSSL-1.1.0-build-fix.patch as now upstream
- Add patch qt5_fixes.patch to fix building under QT5.11
- Refresh patch synergy-1.5.0-pthread.patch
- Refresh patch synergy-1.5.0-disable-version-check.patch</changelog>
  <changelog author="oholecek@suse.com" date="1528891200">- Fix source download URL
  - s/synergy/synergy-core/</changelog>
  <changelog author="oss@c-mauderer.de" date="1537099200">- Adapt package for barrier.</changelog>
  <changelog author="oss@c-mauderer.de" date="1541246400">- Update to 2.1.2.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1563278400">- Update to 2.3.0</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1575979200">- Update to 2.3.2
  + Re-implement patch for horizontal scrolling and extra mouse
    buttons
  + Fix memory leak during SSL socket shutdown
  + Fix retry timer not being unregistered properly
  + Use standard mutex APIs instead of the home-grown wrapper
  + Use explicit memory ownership in SocketMultiplexer
  + Merged mouse drift fix from synergy-core</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586260800">- Drop SUSE Firewall declarations
- Do not use service but just utilize the download URL
- Provide and obsolete synergy as we actual fork of it</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1587124800">- Drop Provides and Obsoletes for synergy (for now) not quite ready
  to migrate users yet.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1605268800">- Updated to version 2.3.3:
  * This release fixes a lot of bugs, and adds several
    enhancmeents, such as testing. Specific mentions
    (gh#debauchee/barrier#488 and gh#debauchee/barrier#487).
- Add ChangeLogs to package.
- Add gmock and gtest to build requires.
- Add barrier-use-system-includes.patch: Use the system gtest and
  gmock files for testing.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605528000">- Fix url for Source</changelog>
</package>
<package pkgid="1b1c39474fc5768fa37b35b21c8bc0cf05280cbc3e4eab44fa2d93f4bae045a5" name="barrier" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp152.3.3.1"/>
  <changelog author="oholecek@suse.com" date="1471521600">- Update to 1.8.2
  * Bug #3044 - Unable to drag-select in MS Office
  * Bug #4768 - Copy paste causes 'server is dead' error on switching
  * Bug #4792 - Server logging crashes when switching with clipboard data
  * Bug #2975 - Middle click does not close Chrome tab on Mac client
  * Bug #5087 - Linux client fails to start due to invalid cursor size
  * Bug #5471 - Serial key textbox on activation screen overflows on Mac
  * Bug #4836 - Stop button resets to Start when settings dialog canceled
  * Enhancement #5277 - Auto restart service when synwinhk.dll fails on Windows
  * Enhancement #4913 - Future-proof GUI login by using newer auth URL
  * Enhancement #4922 - Add --enable-crypto argument to help text
  * Enhancement #5299 - High resolution App icon on Mac
  * Enhancement #4894 - Improve grammar in connection notification dialog
- Drop patch synergy-1.5.0-test.patch
- Remove src/test/CMakeLists.txt to disable tests building</changelog>
  <changelog author="oholecek@suse.com" date="1471608000">- Remove gtest-devel dependency and use bundled one</changelog>
  <changelog author="oholecek@suse.com" date="1471608001">- Remove support for old versions
- Remove hack to disable tests and use bundled gmock</changelog>
  <changelog author="sflees@suse.de" date="1485172800">- Update to 1.8.7
  - 1.8.7 changes
  * Bug #5784 - Edition changes when reopening GUI
  - 1.8.6 changes
  * Bug #5186 - Cursor stuck on client when using multi-DPI server
  * Bug #5722 - Malformed serial key in registry will crash GUI on startup
  * Bug #5752 - Tab order is incorrect on Settings dialog
  - 1.8.5 changes
  * Bug #5680 - Server crashes when disconnecting SSL clients
  * Feature #5707 - User upgrade statistics
  - 1.8.4 changes
  * Bug #4420 When XRandR adds a screen, it is inaccessible
  * Bug #5603 Activation notification depends on existence of /etc/os-release
  * Bug #5624 Update notification sometimes requests a downgrade
  * Bug #5329 Current date is shown for build date in the about dialog
  * Bug #5640 Synergy branding is inconsistent across platforms
  * Enhancement #5617 Remove redundant plugin infrastructure
  * Enhancement #5627 Move SSL certificate generation to main window
  * Enhancement #5628 Move SSL implementation into core binary
  * Enhancement #5629 Move activation from wizard into new dialog window
  - 1.8.3 changes
  * Bug #4740 - Linux client crashes with "Assertion '!m_open' failed"
  * Bug #4879 - Memory leak caused by IpcReader
  * Bug #5373 - Tab behaves like shift tab on client
  * Bug #5502 - Copy and paste from server to client doesn't work
  * Enhancement #123 - Option to disable clipboard sharing</changelog>
  <changelog author="oholecek@suse.com" date="1485864000">- Remove source URL synergy prefix</changelog>
  <changelog author="martin.wilck@suse.com" date="1486382400">- Fix screen size calculation with XRandR enabled (boo#1023635)
  * Added 0001-XRandR-fix-screen-size-calculation.patch</changelog>
  <changelog author="werner@suse.de" date="1493812800">- Update to 1.8.8
  * Bug #5196 - Some keys on Korean and Japanese keyboards have the same keycode
  * Bug #5578 - Pressing Hangul key results in alt+'a'
  * Bug #5785 - Can't switch screens when cursor is in a corner
  * Bug #3992 - macOS: Dragging is broken in Unity 3D
  * Bug #5075 - macOS: Build fails on macOS 10.9 due to unknown compiler flag
  * Bug #5809 - macOS: No version number is shown in the App Info dialog
  * Bug #3197 - Linux: switchDoubleTap option is not working
  * Bug #4477 - Linux: Mouse buttons higher than id 10 result in crash
  * Bug #5832 - Linux: Screen size misdetected on multi-monitor display
  * Enhancement #4504 - Improved Korean language description
  * Enhancement #5525 - Added support for precise screen positioning in config file
  * Enhancement #4290 - Windows: Removed annoying alt+print screen functionality
- Remove patch 0001-XRandR-fix-screen-size-calculation.patch
  as now upstream</changelog>
  <changelog author="oholecek@suse.com" date="1514980800">- Add patch 0001-OpenSSL-1.1.0-build-fix.patch taken from upstream</changelog>
  <changelog author="aloisio@gmx.com" date="1519128000">- Switched build to Qt5
- Enabled PIE</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1519473600">- Add add-support-for-latin-s-and-t-with-comma-below.patch,
  submitted upstream at https://github.com/symless/synergy-core/pull/6261</changelog>
  <changelog author="oholecek@suse.com" date="1528804800">- Update to 1.9.1
  * Fixed issue with screen resolution detection during sleep on macOS
  * Updated OpenSSL to v1.0.2o
- Update to 1.9.0
  * Ported UI to Qt 5
  * Moved GUI build script to CMake
  * Build with MSVC 2015
  * Removal of deprecated 'hm.sh' script and toolchains
- Add Provides and Obsoletes synergy-core (new upstream name)
- Remove patch 0001-OpenSSL-1.1.0-build-fix.patch as now upstream
- Add patch qt5_fixes.patch to fix building under QT5.11
- Refresh patch synergy-1.5.0-pthread.patch
- Refresh patch synergy-1.5.0-disable-version-check.patch</changelog>
  <changelog author="oholecek@suse.com" date="1528891200">- Fix source download URL
  - s/synergy/synergy-core/</changelog>
  <changelog author="oss@c-mauderer.de" date="1537099200">- Adapt package for barrier.</changelog>
  <changelog author="oss@c-mauderer.de" date="1541246400">- Update to 2.1.2.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1563278400">- Update to 2.3.0</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1575979200">- Update to 2.3.2
  + Re-implement patch for horizontal scrolling and extra mouse
    buttons
  + Fix memory leak during SSL socket shutdown
  + Fix retry timer not being unregistered properly
  + Use standard mutex APIs instead of the home-grown wrapper
  + Use explicit memory ownership in SocketMultiplexer
  + Merged mouse drift fix from synergy-core</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586260800">- Drop SUSE Firewall declarations
- Do not use service but just utilize the download URL
- Provide and obsolete synergy as we actual fork of it</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1587124800">- Drop Provides and Obsoletes for synergy (for now) not quite ready
  to migrate users yet.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1605268800">- Updated to version 2.3.3:
  * This release fixes a lot of bugs, and adds several
    enhancmeents, such as testing. Specific mentions
    (gh#debauchee/barrier#488 and gh#debauchee/barrier#487).
- Add ChangeLogs to package.
- Add gmock and gtest to build requires.
- Add barrier-use-system-includes.patch: Use the system gtest and
  gmock files for testing.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605528000">- Fix url for Source</changelog>
</package>
<package pkgid="d0388f2128e6f9db8f8a72b89ee8e4aa20640b2eff714c9b8997c9e28c235ba8" name="barrier" arch="src">
  <version epoch="0" ver="2.4.0" rel="lp152.3.6.1"/>
  <changelog author="oholecek@suse.com" date="1471608000">- Remove support for old versions
- Remove hack to disable tests and use bundled gmock</changelog>
  <changelog author="sflees@suse.de" date="1485172800">- Update to 1.8.7
  - 1.8.7 changes
  * Bug #5784 - Edition changes when reopening GUI
  - 1.8.6 changes
  * Bug #5186 - Cursor stuck on client when using multi-DPI server
  * Bug #5722 - Malformed serial key in registry will crash GUI on startup
  * Bug #5752 - Tab order is incorrect on Settings dialog
  - 1.8.5 changes
  * Bug #5680 - Server crashes when disconnecting SSL clients
  * Feature #5707 - User upgrade statistics
  - 1.8.4 changes
  * Bug #4420 When XRandR adds a screen, it is inaccessible
  * Bug #5603 Activation notification depends on existence of /etc/os-release
  * Bug #5624 Update notification sometimes requests a downgrade
  * Bug #5329 Current date is shown for build date in the about dialog
  * Bug #5640 Synergy branding is inconsistent across platforms
  * Enhancement #5617 Remove redundant plugin infrastructure
  * Enhancement #5627 Move SSL certificate generation to main window
  * Enhancement #5628 Move SSL implementation into core binary
  * Enhancement #5629 Move activation from wizard into new dialog window
  - 1.8.3 changes
  * Bug #4740 - Linux client crashes with "Assertion '!m_open' failed"
  * Bug #4879 - Memory leak caused by IpcReader
  * Bug #5373 - Tab behaves like shift tab on client
  * Bug #5502 - Copy and paste from server to client doesn't work
  * Enhancement #123 - Option to disable clipboard sharing</changelog>
  <changelog author="oholecek@suse.com" date="1485864000">- Remove source URL synergy prefix</changelog>
  <changelog author="martin.wilck@suse.com" date="1486382400">- Fix screen size calculation with XRandR enabled (boo#1023635)
  * Added 0001-XRandR-fix-screen-size-calculation.patch</changelog>
  <changelog author="werner@suse.de" date="1493812800">- Update to 1.8.8
  * Bug #5196 - Some keys on Korean and Japanese keyboards have the same keycode
  * Bug #5578 - Pressing Hangul key results in alt+'a'
  * Bug #5785 - Can't switch screens when cursor is in a corner
  * Bug #3992 - macOS: Dragging is broken in Unity 3D
  * Bug #5075 - macOS: Build fails on macOS 10.9 due to unknown compiler flag
  * Bug #5809 - macOS: No version number is shown in the App Info dialog
  * Bug #3197 - Linux: switchDoubleTap option is not working
  * Bug #4477 - Linux: Mouse buttons higher than id 10 result in crash
  * Bug #5832 - Linux: Screen size misdetected on multi-monitor display
  * Enhancement #4504 - Improved Korean language description
  * Enhancement #5525 - Added support for precise screen positioning in config file
  * Enhancement #4290 - Windows: Removed annoying alt+print screen functionality
- Remove patch 0001-XRandR-fix-screen-size-calculation.patch
  as now upstream</changelog>
  <changelog author="oholecek@suse.com" date="1514980800">- Add patch 0001-OpenSSL-1.1.0-build-fix.patch taken from upstream</changelog>
  <changelog author="aloisio@gmx.com" date="1519128000">- Switched build to Qt5
- Enabled PIE</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1519473600">- Add add-support-for-latin-s-and-t-with-comma-below.patch,
  submitted upstream at https://github.com/symless/synergy-core/pull/6261</changelog>
  <changelog author="oholecek@suse.com" date="1528804800">- Update to 1.9.1
  * Fixed issue with screen resolution detection during sleep on macOS
  * Updated OpenSSL to v1.0.2o
- Update to 1.9.0
  * Ported UI to Qt 5
  * Moved GUI build script to CMake
  * Build with MSVC 2015
  * Removal of deprecated 'hm.sh' script and toolchains
- Add Provides and Obsoletes synergy-core (new upstream name)
- Remove patch 0001-OpenSSL-1.1.0-build-fix.patch as now upstream
- Add patch qt5_fixes.patch to fix building under QT5.11
- Refresh patch synergy-1.5.0-pthread.patch
- Refresh patch synergy-1.5.0-disable-version-check.patch</changelog>
  <changelog author="oholecek@suse.com" date="1528891200">- Fix source download URL
  - s/synergy/synergy-core/</changelog>
  <changelog author="oss@c-mauderer.de" date="1537099200">- Adapt package for barrier.</changelog>
  <changelog author="oss@c-mauderer.de" date="1541246400">- Update to 2.1.2.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1563278400">- Update to 2.3.0</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1575979200">- Update to 2.3.2
  + Re-implement patch for horizontal scrolling and extra mouse
    buttons
  + Fix memory leak during SSL socket shutdown
  + Fix retry timer not being unregistered properly
  + Use standard mutex APIs instead of the home-grown wrapper
  + Use explicit memory ownership in SocketMultiplexer
  + Merged mouse drift fix from synergy-core</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586260800">- Drop SUSE Firewall declarations
- Do not use service but just utilize the download URL
- Provide and obsolete synergy as we actual fork of it</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1587124800">- Drop Provides and Obsoletes for synergy (for now) not quite ready
  to migrate users yet.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1605268800">- Updated to version 2.3.3:
  * This release fixes a lot of bugs, and adds several
    enhancmeents, such as testing. Specific mentions
    (gh#debauchee/barrier#488 and gh#debauchee/barrier#487).
- Add ChangeLogs to package.
- Add gmock and gtest to build requires.
- Add barrier-use-system-includes.patch: Use the system gtest and
  gmock files for testing.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605528000">- Fix url for Source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1635854400">- Drop use of barrier-use-system-includes.patch use commandline
  flag instead</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1637064000">- Updated to version 2.4.0:
  * Barrier now supports client identity verification (fixes CVE-2021-42072,
    CVE-2021-42073).
    Previously a malicious client could connect to Barrier server without any
    authentication and send application-level messages. This made the attack
    surface of Barrier significantly larger. Additionally, in case the malicious
    client got possession of a valid screen name by brute forcing or other means
    it could modify the clipboard contents of the server.
    To support seamless upgrades from older versions of Barrier this is
    currently disabled by default. The feature can be enabled in the settings
    dialog. If enabled, older clients of Barrier will be rejected.
    Barrier now uses SHA256 fingerprints for establishing security of encrypted
    SSL connections. After upgrading client to new version the existing server
    fingerprint will need to be approved again. Client and server will show both
    SHA1 and SHA256 server fingerprints to allow interoperability with older
    versions of Barrier.
  Bugfixes:
  * Fixed build failure on mips*el and riscv64 architecture.
  * Barrier no longer uses openssl CLI tool for any operations and hooks into
    the openssl library directly.
  * More X11 clipboard MIME types have been mapped to corresponding converters
    (#344).
  * Fixed setup of multiple actions associated with a hotkey.
  * Fixed setup of hotkeys with special characters such as comma and semicolon
    (#778).
  * Fixed transfer of non-ASCII characters coming from a Windows server in
    certain cases (#527).
  * Barrier will now regenerate server certificate if it's invalid instead of
    failing to launch (#802)
  * Added support for additional keys on Sun Microsystems USB keyboards (#784).
  * Updated Chinese translation.
  * Updated Slovak translation.
  * Theme icons are now preferred to icons distributed together with Barrier
    (#471).
  Features:
  * Added --drop-target option that improves drag and drop support on Windows
    when Barrier is being run as a portable app.
  * The --enable-crypto command line option has been made the default to reduce
    chances of accidental security mishaps when configuring Barrier from command
    line. A new --disable-crypto command line option has been added to
    explicitly disable encryption.
  * Added support for randomart images for easier comparison of SSL certificate
    fingerprints. The algorithm is identical to what OpenSSH uses.
  * Implemented a configuration option for Server GUI auto-start.
  * Made it possible to use keyboard instead of mouse to modify screen layout.
  * Added support for keyboard backlight media keys
  * Added support for Eisu_toggle and Muhenkan keys
  * Added --profile-dir option that allows to select custom profile directory.
- Bundle Gulrak Filesystem Headers (New Dependency)
- Enable Tests
- Add fix-build.patch</changelog>
</package>
<package pkgid="11178e00410e29f8da0c9d60272756d94a497e06cdc457b4f7e5b7ffb5341a89" name="barrier" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="lp152.3.6.1"/>
  <changelog author="oholecek@suse.com" date="1471608000">- Remove support for old versions
- Remove hack to disable tests and use bundled gmock</changelog>
  <changelog author="sflees@suse.de" date="1485172800">- Update to 1.8.7
  - 1.8.7 changes
  * Bug #5784 - Edition changes when reopening GUI
  - 1.8.6 changes
  * Bug #5186 - Cursor stuck on client when using multi-DPI server
  * Bug #5722 - Malformed serial key in registry will crash GUI on startup
  * Bug #5752 - Tab order is incorrect on Settings dialog
  - 1.8.5 changes
  * Bug #5680 - Server crashes when disconnecting SSL clients
  * Feature #5707 - User upgrade statistics
  - 1.8.4 changes
  * Bug #4420 When XRandR adds a screen, it is inaccessible
  * Bug #5603 Activation notification depends on existence of /etc/os-release
  * Bug #5624 Update notification sometimes requests a downgrade
  * Bug #5329 Current date is shown for build date in the about dialog
  * Bug #5640 Synergy branding is inconsistent across platforms
  * Enhancement #5617 Remove redundant plugin infrastructure
  * Enhancement #5627 Move SSL certificate generation to main window
  * Enhancement #5628 Move SSL implementation into core binary
  * Enhancement #5629 Move activation from wizard into new dialog window
  - 1.8.3 changes
  * Bug #4740 - Linux client crashes with "Assertion '!m_open' failed"
  * Bug #4879 - Memory leak caused by IpcReader
  * Bug #5373 - Tab behaves like shift tab on client
  * Bug #5502 - Copy and paste from server to client doesn't work
  * Enhancement #123 - Option to disable clipboard sharing</changelog>
  <changelog author="oholecek@suse.com" date="1485864000">- Remove source URL synergy prefix</changelog>
  <changelog author="martin.wilck@suse.com" date="1486382400">- Fix screen size calculation with XRandR enabled (boo#1023635)
  * Added 0001-XRandR-fix-screen-size-calculation.patch</changelog>
  <changelog author="werner@suse.de" date="1493812800">- Update to 1.8.8
  * Bug #5196 - Some keys on Korean and Japanese keyboards have the same keycode
  * Bug #5578 - Pressing Hangul key results in alt+'a'
  * Bug #5785 - Can't switch screens when cursor is in a corner
  * Bug #3992 - macOS: Dragging is broken in Unity 3D
  * Bug #5075 - macOS: Build fails on macOS 10.9 due to unknown compiler flag
  * Bug #5809 - macOS: No version number is shown in the App Info dialog
  * Bug #3197 - Linux: switchDoubleTap option is not working
  * Bug #4477 - Linux: Mouse buttons higher than id 10 result in crash
  * Bug #5832 - Linux: Screen size misdetected on multi-monitor display
  * Enhancement #4504 - Improved Korean language description
  * Enhancement #5525 - Added support for precise screen positioning in config file
  * Enhancement #4290 - Windows: Removed annoying alt+print screen functionality
- Remove patch 0001-XRandR-fix-screen-size-calculation.patch
  as now upstream</changelog>
  <changelog author="oholecek@suse.com" date="1514980800">- Add patch 0001-OpenSSL-1.1.0-build-fix.patch taken from upstream</changelog>
  <changelog author="aloisio@gmx.com" date="1519128000">- Switched build to Qt5
- Enabled PIE</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1519473600">- Add add-support-for-latin-s-and-t-with-comma-below.patch,
  submitted upstream at https://github.com/symless/synergy-core/pull/6261</changelog>
  <changelog author="oholecek@suse.com" date="1528804800">- Update to 1.9.1
  * Fixed issue with screen resolution detection during sleep on macOS
  * Updated OpenSSL to v1.0.2o
- Update to 1.9.0
  * Ported UI to Qt 5
  * Moved GUI build script to CMake
  * Build with MSVC 2015
  * Removal of deprecated 'hm.sh' script and toolchains
- Add Provides and Obsoletes synergy-core (new upstream name)
- Remove patch 0001-OpenSSL-1.1.0-build-fix.patch as now upstream
- Add patch qt5_fixes.patch to fix building under QT5.11
- Refresh patch synergy-1.5.0-pthread.patch
- Refresh patch synergy-1.5.0-disable-version-check.patch</changelog>
  <changelog author="oholecek@suse.com" date="1528891200">- Fix source download URL
  - s/synergy/synergy-core/</changelog>
  <changelog author="oss@c-mauderer.de" date="1537099200">- Adapt package for barrier.</changelog>
  <changelog author="oss@c-mauderer.de" date="1541246400">- Update to 2.1.2.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1563278400">- Update to 2.3.0</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1575979200">- Update to 2.3.2
  + Re-implement patch for horizontal scrolling and extra mouse
    buttons
  + Fix memory leak during SSL socket shutdown
  + Fix retry timer not being unregistered properly
  + Use standard mutex APIs instead of the home-grown wrapper
  + Use explicit memory ownership in SocketMultiplexer
  + Merged mouse drift fix from synergy-core</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586260800">- Drop SUSE Firewall declarations
- Do not use service but just utilize the download URL
- Provide and obsolete synergy as we actual fork of it</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1587124800">- Drop Provides and Obsoletes for synergy (for now) not quite ready
  to migrate users yet.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1605268800">- Updated to version 2.3.3:
  * This release fixes a lot of bugs, and adds several
    enhancmeents, such as testing. Specific mentions
    (gh#debauchee/barrier#488 and gh#debauchee/barrier#487).
- Add ChangeLogs to package.
- Add gmock and gtest to build requires.
- Add barrier-use-system-includes.patch: Use the system gtest and
  gmock files for testing.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605528000">- Fix url for Source</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1635854400">- Drop use of barrier-use-system-includes.patch use commandline
  flag instead</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1637064000">- Updated to version 2.4.0:
  * Barrier now supports client identity verification (fixes CVE-2021-42072,
    CVE-2021-42073).
    Previously a malicious client could connect to Barrier server without any
    authentication and send application-level messages. This made the attack
    surface of Barrier significantly larger. Additionally, in case the malicious
    client got possession of a valid screen name by brute forcing or other means
    it could modify the clipboard contents of the server.
    To support seamless upgrades from older versions of Barrier this is
    currently disabled by default. The feature can be enabled in the settings
    dialog. If enabled, older clients of Barrier will be rejected.
    Barrier now uses SHA256 fingerprints for establishing security of encrypted
    SSL connections. After upgrading client to new version the existing server
    fingerprint will need to be approved again. Client and server will show both
    SHA1 and SHA256 server fingerprints to allow interoperability with older
    versions of Barrier.
  Bugfixes:
  * Fixed build failure on mips*el and riscv64 architecture.
  * Barrier no longer uses openssl CLI tool for any operations and hooks into
    the openssl library directly.
  * More X11 clipboard MIME types have been mapped to corresponding converters
    (#344).
  * Fixed setup of multiple actions associated with a hotkey.
  * Fixed setup of hotkeys with special characters such as comma and semicolon
    (#778).
  * Fixed transfer of non-ASCII characters coming from a Windows server in
    certain cases (#527).
  * Barrier will now regenerate server certificate if it's invalid instead of
    failing to launch (#802)
  * Added support for additional keys on Sun Microsystems USB keyboards (#784).
  * Updated Chinese translation.
  * Updated Slovak translation.
  * Theme icons are now preferred to icons distributed together with Barrier
    (#471).
  Features:
  * Added --drop-target option that improves drag and drop support on Windows
    when Barrier is being run as a portable app.
  * The --enable-crypto command line option has been made the default to reduce
    chances of accidental security mishaps when configuring Barrier from command
    line. A new --disable-crypto command line option has been added to
    explicitly disable encryption.
  * Added support for randomart images for easier comparison of SSL certificate
    fingerprints. The algorithm is identical to what OpenSSH uses.
  * Implemented a configuration option for Server GUI auto-start.
  * Made it possible to use keyboard instead of mouse to modify screen layout.
  * Added support for keyboard backlight media keys
  * Added support for Eisu_toggle and Muhenkan keys
  * Added --profile-dir option that allows to select custom profile directory.
- Bundle Gulrak Filesystem Headers (New Dependency)
- Enable Tests
- Add fix-build.patch</changelog>
</package>
<package pkgid="83a07c4728b694aed435ab81ac1a5e7e692f7cc638a07b7a974bc3b1fdd1a3c3" name="bash" arch="i586">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="0f6d0976908bc0616e4bcc71f5233298717280a05733f91fa9aaa3af59e2e9af" name="bash" arch="src">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="6295a374097676d62a35e0da9f9e11e1bc7b064478ecaf9aa8bdd6590c97ba37" name="bash" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="8fbe4ffa8931e41c63eb0e954ab175b2921cd92b7fce1565a1b7170db88c17ef" name="bash-completion" arch="noarch">
  <version epoch="0" ver="2.7" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1633348800">- Add patch boo1190929-9af4afd0.patch for boo#1190929
  modinfo completion fails to recognize .ko.xz</changelog>
</package>
<package pkgid="1711a9a927061d4f4d6f63bc8bccbcc47b5ad47b316eac120a7b0401f5228d6f" name="bash-completion" arch="src">
  <version epoch="0" ver="2.7" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1633348800">- Add patch boo1190929-9af4afd0.patch for boo#1190929
  modinfo completion fails to recognize .ko.xz</changelog>
</package>
<package pkgid="e3aa715ffa0eceb401a0efcc4d6d63400309228cc5f789b44c9222b00a5748cd" name="bash-completion-devel" arch="noarch">
  <version epoch="0" ver="2.7" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1633348800">- Add patch boo1190929-9af4afd0.patch for boo#1190929
  modinfo completion fails to recognize .ko.xz</changelog>
</package>
<package pkgid="46a668dcffe40080311de7ad06d7ec56ac1b3e6467c8ec2c975853a34e316787" name="bash-completion-doc" arch="noarch">
  <version epoch="0" ver="2.7" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1416225600">- Add patch PS1-completion-boo903362.patch to avoid trouble if
  restricted characters of the shell are used in PS1 like
  exclamation mark (boo#903362).
- Add patch FOO-dir-completion-boo905348.patch to expand variables
  which value is actual a directory to avoid excaped dollar sign
  (boo#905348).</changelog>
  <changelog author="werner@suse.de" date="1426680000">- Port my dollar completion from /etc/profile.d/completion.bash to
  bash_completion which modifies FOO-dir-completion-boo905348.patch
- Avoid negative cword position counter (boo#922758), this adds
  the patch init-completion-boo922758.patch</changelog>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
</package>
<package pkgid="6d756a5e5c792aee4462b05610d1099b1df7fd8ccf20c46187c00d4c0f083120" name="bash-completion-doc" arch="src">
  <version epoch="0" ver="2.7" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1416225600">- Add patch PS1-completion-boo903362.patch to avoid trouble if
  restricted characters of the shell are used in PS1 like
  exclamation mark (boo#903362).
- Add patch FOO-dir-completion-boo905348.patch to expand variables
  which value is actual a directory to avoid excaped dollar sign
  (boo#905348).</changelog>
  <changelog author="werner@suse.de" date="1426680000">- Port my dollar completion from /etc/profile.d/completion.bash to
  bash_completion which modifies FOO-dir-completion-boo905348.patch
- Avoid negative cword position counter (boo#922758), this adds
  the patch init-completion-boo922758.patch</changelog>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
</package>
<package pkgid="bba395c7024078c6d2e13fb92251d645316083d5c6afc649cd298fa629bfad4f" name="bash-devel" arch="i586">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="eb344de0a6202e8bfb3f75e62ffcbecb3165f028feb81783be50ab797a48a6da" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="67bd51df558a3faccec22ffafea0806b8a827f7bc8b3c4e5a3868bca52860f33" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="63db10377c3a9aa8a0c4debb2cb0d74ea0f651fbf4f4bc5eaa7a8926098e604c" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="f82531276b1a3342dbb3506cab76ea6468e739ed80954b3ea226fd9c4500183d" name="bash-loadables" arch="i586">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="48a8947def4360a9fa34d4f4d98f2352e7344ff24012f6fb5264151ee9c1b682" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="dc3dfe0f51019685aefd3ab6aed14a9208af950739f2ad9e4bd802dca492e5fd" name="bbswitch" arch="src">
  <version epoch="0" ver="0.8" rel="lp152.6.2.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="6dcaf591ef33ed1e64c5abffe3c0c7a2f5d072861cacf2dc21fc570862bc3f66" name="bbswitch" arch="x86_64">
  <version epoch="0" ver="0.8" rel="lp152.6.2.1"/>
  <changelog author="tchvatal@suse.com" date="1401883200">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="45bbc69e0267df745634e212e128c6ab1817f58b6f770ad6d39c6460d98c68d1" name="bbswitch" arch="src">
  <version epoch="0" ver="0.8" rel="lp152.6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="7404e25e37d89dd8c101ef309a2b5171749bda57b1c509fdf13808e411250923" name="bbswitch" arch="x86_64">
  <version epoch="0" ver="0.8" rel="lp152.6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1401883200">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="ee4fbf03f086c32e16f2e55e0005e659868a41004fc4c8926e22f8f9fb8435c6" name="bbswitch-kmp-default" arch="x86_64">
  <version epoch="0" ver="0.8_k5.3.18_lp152.36" rel="lp152.6.2.1"/>
  <changelog author="tchvatal@suse.com" date="1401883200">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="0326f36240acecf30b175092f7d43235db8838b541fbe5a4dcac7e4f0dbf598d" name="bbswitch-kmp-default" arch="x86_64">
  <version epoch="0" ver="0.8_k5.3.18_lp152.69" rel="lp152.6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1401883200">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="689906c5d3aa35bcfbd765ccea65d4eb8cf3cce757f9c458ec7fba3302e4d4f2" name="bbswitch-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="0.8_k5.3.18_lp152.36" rel="lp152.6.2.1"/>
  <changelog author="tchvatal@suse.com" date="1401883200">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="a5535559a7610a87ad1eb4aac90853c7568c3f5383f47c97be730f9018dfb4c5" name="bbswitch-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="0.8_k5.3.18_lp152.69" rel="lp152.6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1401883200">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="0c5db6d6af1ac90fa7090884fa54fd30c1f7a7e1393806b27a6b3fb66b429140" name="bcache-tools" arch="i586">
  <version epoch="0" ver="1.1" rel="lp152.2.12.1"/>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1614168000">- bcache-tools: Update super block version in bch_set_feature_*
  routines (jsc#SLE-9807)
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch</changelog>
</package>
<package pkgid="9ee8fe2bbb45599822997715c5be3d7c5322e81a16445fc79fcbaf59a096f040" name="bcache-tools" arch="src">
  <version epoch="0" ver="1.1" rel="lp152.2.12.1"/>
  <changelog author="ro@suse.de" date="1298289600">- create package</changelog>
  <changelog author="jengelh@inai.de" date="1361880000">- Update to new current snapshot
  42c182c6ab1530b5e3b18893f284da3eaec46e74 (0.1.g45)</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Move udev rules to /usr/lib/udev/rules.d</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1614168000">- bcache-tools: Update super block version in bch_set_feature_*
  routines (jsc#SLE-9807)
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch</changelog>
</package>
<package pkgid="123f1e2fa2f65b9c853ec5c2b550be4d89d925c42ca5873950a32e587d538ab1" name="bcache-tools" arch="x86_64">
  <version epoch="0" ver="1.1" rel="lp152.2.12.1"/>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1614168000">- bcache-tools: Update super block version in bch_set_feature_*
  routines (jsc#SLE-9807)
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch</changelog>
</package>
<package pkgid="7051f6275164354599eaf53ec7d0141b4b065c8266d8181a1c08902e39853272" name="bcache-tools" arch="i586">
  <version epoch="0" ver="1.1" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
</package>
<package pkgid="13e29d7430b4ef8a3b0d6d82805d4cca295f238f313429106d35feea865aa4e3" name="bcache-tools" arch="src">
  <version epoch="0" ver="1.1" rel="lp152.2.3.1"/>
  <changelog author="ro@suse.de" date="1298289600">- create package</changelog>
  <changelog author="jengelh@inai.de" date="1361880000">- Update to new current snapshot
  42c182c6ab1530b5e3b18893f284da3eaec46e74 (0.1.g45)</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Move udev rules to /usr/lib/udev/rules.d</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
</package>
<package pkgid="3524217c6c6d43a18a272aeab9b99115b9d0f19ebc262a5dc14c234f909475c1" name="bcache-tools" arch="x86_64">
  <version epoch="0" ver="1.1" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
</package>
<package pkgid="664be1017336ffb3096b9babae3e21127164a6dbd48bd91c311feaf4d9057d62" name="bcache-tools" arch="i586">
  <version epoch="0" ver="1.1" rel="lp152.2.6.1"/>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
</package>
<package pkgid="3eba4088d0b05204a52fa83603a62f7847b5d57f8f52e97bf35be3985b7539cc" name="bcache-tools" arch="src">
  <version epoch="0" ver="1.1" rel="lp152.2.6.1"/>
  <changelog author="ro@suse.de" date="1298289600">- create package</changelog>
  <changelog author="jengelh@inai.de" date="1361880000">- Update to new current snapshot
  42c182c6ab1530b5e3b18893f284da3eaec46e74 (0.1.g45)</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Move udev rules to /usr/lib/udev/rules.d</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
</package>
<package pkgid="49a51ee1b451a69edd63378f76876955b39605925e28d8f4002dc4c4e29dce0e" name="bcache-tools" arch="x86_64">
  <version epoch="0" ver="1.1" rel="lp152.2.6.1"/>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
</package>
<package pkgid="42b89e38ebc6a39d14dc9daf5f16c539b274420e804b20af398bd320b7ea8fb2" name="bcache-tools" arch="i586">
  <version epoch="0" ver="1.1" rel="lp152.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
</package>
<package pkgid="578cdb918bbd1561902c8ff77636840e0db55d826d8ee6a1a0f1b51206eeef20" name="bcache-tools" arch="src">
  <version epoch="0" ver="1.1" rel="lp152.2.9.1"/>
  <changelog author="ro@suse.de" date="1298289600">- create package</changelog>
  <changelog author="jengelh@inai.de" date="1361880000">- Update to new current snapshot
  42c182c6ab1530b5e3b18893f284da3eaec46e74 (0.1.g45)</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Move udev rules to /usr/lib/udev/rules.d</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
</package>
<package pkgid="fa7706cbbd9ede35eb04a1938d0883c5bf5e3a7beeb5a6cdeb6788d7c70f8f15" name="bcache-tools" arch="x86_64">
  <version epoch="0" ver="1.1" rel="lp152.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
</package>
<package pkgid="77b775f95161d1e751293c14e234522c1c9cade4202814d6fa40735fb706a94a" name="bcc" arch="src">
  <version epoch="0" ver="0.12.0" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1523016000">- Add bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  to fix build with LLVM6.</changelog>
  <changelog author="glin@suse.com" date="1529409600">- Update to 0.6.0
- Add upstream patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Drop upstreamed patches
  + bcc-fix-build-for-llvm-5.0.1.patch
  + bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  + bcc-bsc1080085-backport-bytes-strings.patch
  + bcc-bsc1080085-detect-slab-for-slabratetop.patch
  + bcc-bsc1080085-fix-cachetop-py3-str.patch
  + bcc-bsc1080085-fix-syscount-str.patch
- Refresh bcc-python3.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1539259200">- Update to 0.7.0
- Refresh bcc-python3.patch
- Drop upstreamed patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Remove bcc-bsc1065593-llvm4-hack.patch and set ENABLE_LLVM_SHARED
- Remove COPYRIGHT.txt which was dropped by upstream</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to %license over %doc for licenses.
- Add upstream patch for bpftrace builds. boo#1117223
  + bsc-install-additional-headers.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update to 0.8.0.
- Remove upstreamed patches, and un-needed ones.
  - bcc-check_int128.patch
  - bcc-python3.patch (replaced with sed pipeline)
  - bcc-install-additional-headers.patch (bpftrace has fixes now)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547726400">- Remove unnecessary use of xargs.
- Remove idempotent %if..%endif guards.
- Update descriptions for grammar.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1551960000">- Correct the library version</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552305600">- Update to 0.9.0
- Add libbpf-5beb8a2ebffd.tar.gz since libbpf became a submodule
  of bcc
- Drop bcc-bsc1080085-import-readline-from-lib.patch
  + Upstream provide an additional argutment for the shared
    readline</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1556020800">- Add upstream patches to improve python3 compatibility
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1559649600">- Update to 0.10.0
  + Support for kernel up to 5.1
  + corresponding libbpf submodule release is v0.0.3
  + support for reading kernel headers from /proc
  + libbpf.{a,so} renamed to libcc_bpf.{a,so}
  + new common options for some tools
  + new tool: drsnoop
  + s390 USDT support
- Update libbpf to 0.0.3
  + Also add the source url of libbpf
- Drop upstreamed patches
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch
- Drop bcc-libbpf0 since upstream dropped the so file
- Enable SMP build flags since we don't need static clang anymore</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571054400">- Update to 0.11.0
  + Support for kernel up to 5.3
  + Corresponding libbpf submodule release is v0.0.5
  + Fix USDT issue with multi-threaded applications
  + Fixed the early return behavior of lookup_or_init
  + Support for nic hardware offload
  + Fixed and Enabled Travis CI
  + A lot of tools change with added new options, etc.
- Update libbpf to 0.0.5
  + bpf_btf_get_next_id() API to iterate over system's BTF objects
  + libbpf_set_print() now returns previously set print callback
  + libbpf versioning, build, and packaging improvements
  + convenience helpers for working with BTF types
  + experimental BPF CO-RE relocation support
  + various AF_XDP fixes and enhancements
  + BTF-defined maps
  + tracing attachment APIs and bpf_link abstraction
  + perf buffer API
  + BTF-to-C conversion API
  + btf__parse_elf API for loading .BTF from ELF files
  + libbpf_num_possible_cpus() added
  + passing through prog_flags through bpf_object__open
  + new attach types detection added
- Use version for REVISION instead of libversion</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add support-clang9.patch and apply it for llvm &gt;= 9
- Fix sed call for python</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Enable USDT for s390x since 0.10.0 already supports it</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1576497600">- Update to 0.12.0
  + Support for kernel up to 5.4
  + klockstat tool to track kernel mutex lock statistics
  + cmake option CMAKE_USE_LIBBPF_PACKAGE to build a bcc shared
    library
  + linking with distro libbpf_static.a
  + new map.lookup_or_try_init() API to remove hidden return in
    map.lookup_or_init()
  + BPF_ARRAY_OF_MAPS and BPF_HASH_OF_MAPS support
  + support symbol offset for uprobe in both C++ and python API,
    kprobe already has the support
  + bug fixes for trace.py, tcpretrans.py, runqslower.py, etc.
- Update libbpf to 0.0.6
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code
- Replace lua51-luajit-devel with luajit-devel to reflect the
  recent change in Factory (bsc#1159191)
- Add bcc-fix-test_map_in_map.patch to fix the build error in the
  test case</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Add bcc-bsc1172493-Make-reading-blacklist-optional.patch to make
  reading kprobe blacklist optional so that the bcc scripts can
  work with the locked down kernel (bsc#1172493)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617019200">- Add bcc-bsc1183399-make-no-pie-optional.patch and set
  ENABLE_NO_PIE to "OFF" to enable PIE for bcc-lua if lua support
  is enabled (bsc#1183399)</changelog>
</package>
<package pkgid="d4d6ead7fb1999dd4c292d10b31fca64f6ef067972932e8bea84541b28884c2a" name="bcc-devel" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1523016000">- Add bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  to fix build with LLVM6.</changelog>
  <changelog author="glin@suse.com" date="1529409600">- Update to 0.6.0
- Add upstream patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Drop upstreamed patches
  + bcc-fix-build-for-llvm-5.0.1.patch
  + bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  + bcc-bsc1080085-backport-bytes-strings.patch
  + bcc-bsc1080085-detect-slab-for-slabratetop.patch
  + bcc-bsc1080085-fix-cachetop-py3-str.patch
  + bcc-bsc1080085-fix-syscount-str.patch
- Refresh bcc-python3.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1539259200">- Update to 0.7.0
- Refresh bcc-python3.patch
- Drop upstreamed patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Remove bcc-bsc1065593-llvm4-hack.patch and set ENABLE_LLVM_SHARED
- Remove COPYRIGHT.txt which was dropped by upstream</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to %license over %doc for licenses.
- Add upstream patch for bpftrace builds. boo#1117223
  + bsc-install-additional-headers.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update to 0.8.0.
- Remove upstreamed patches, and un-needed ones.
  - bcc-check_int128.patch
  - bcc-python3.patch (replaced with sed pipeline)
  - bcc-install-additional-headers.patch (bpftrace has fixes now)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547726400">- Remove unnecessary use of xargs.
- Remove idempotent %if..%endif guards.
- Update descriptions for grammar.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1551960000">- Correct the library version</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552305600">- Update to 0.9.0
- Add libbpf-5beb8a2ebffd.tar.gz since libbpf became a submodule
  of bcc
- Drop bcc-bsc1080085-import-readline-from-lib.patch
  + Upstream provide an additional argutment for the shared
    readline</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1556020800">- Add upstream patches to improve python3 compatibility
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1559649600">- Update to 0.10.0
  + Support for kernel up to 5.1
  + corresponding libbpf submodule release is v0.0.3
  + support for reading kernel headers from /proc
  + libbpf.{a,so} renamed to libcc_bpf.{a,so}
  + new common options for some tools
  + new tool: drsnoop
  + s390 USDT support
- Update libbpf to 0.0.3
  + Also add the source url of libbpf
- Drop upstreamed patches
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch
- Drop bcc-libbpf0 since upstream dropped the so file
- Enable SMP build flags since we don't need static clang anymore</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571054400">- Update to 0.11.0
  + Support for kernel up to 5.3
  + Corresponding libbpf submodule release is v0.0.5
  + Fix USDT issue with multi-threaded applications
  + Fixed the early return behavior of lookup_or_init
  + Support for nic hardware offload
  + Fixed and Enabled Travis CI
  + A lot of tools change with added new options, etc.
- Update libbpf to 0.0.5
  + bpf_btf_get_next_id() API to iterate over system's BTF objects
  + libbpf_set_print() now returns previously set print callback
  + libbpf versioning, build, and packaging improvements
  + convenience helpers for working with BTF types
  + experimental BPF CO-RE relocation support
  + various AF_XDP fixes and enhancements
  + BTF-defined maps
  + tracing attachment APIs and bpf_link abstraction
  + perf buffer API
  + BTF-to-C conversion API
  + btf__parse_elf API for loading .BTF from ELF files
  + libbpf_num_possible_cpus() added
  + passing through prog_flags through bpf_object__open
  + new attach types detection added
- Use version for REVISION instead of libversion</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add support-clang9.patch and apply it for llvm &gt;= 9
- Fix sed call for python</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Enable USDT for s390x since 0.10.0 already supports it</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1576497600">- Update to 0.12.0
  + Support for kernel up to 5.4
  + klockstat tool to track kernel mutex lock statistics
  + cmake option CMAKE_USE_LIBBPF_PACKAGE to build a bcc shared
    library
  + linking with distro libbpf_static.a
  + new map.lookup_or_try_init() API to remove hidden return in
    map.lookup_or_init()
  + BPF_ARRAY_OF_MAPS and BPF_HASH_OF_MAPS support
  + support symbol offset for uprobe in both C++ and python API,
    kprobe already has the support
  + bug fixes for trace.py, tcpretrans.py, runqslower.py, etc.
- Update libbpf to 0.0.6
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code
- Replace lua51-luajit-devel with luajit-devel to reflect the
  recent change in Factory (bsc#1159191)
- Add bcc-fix-test_map_in_map.patch to fix the build error in the
  test case</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Add bcc-bsc1172493-Make-reading-blacklist-optional.patch to make
  reading kprobe blacklist optional so that the bcc scripts can
  work with the locked down kernel (bsc#1172493)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617019200">- Add bcc-bsc1183399-make-no-pie-optional.patch and set
  ENABLE_NO_PIE to "OFF" to enable PIE for bcc-lua if lua support
  is enabled (bsc#1183399)</changelog>
</package>
<package pkgid="f2f59a6e937753ceba6996443e950e8738b1c8e652d7650a428b02b5046a13df" name="bcc-docs" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1523016000">- Add bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  to fix build with LLVM6.</changelog>
  <changelog author="glin@suse.com" date="1529409600">- Update to 0.6.0
- Add upstream patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Drop upstreamed patches
  + bcc-fix-build-for-llvm-5.0.1.patch
  + bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  + bcc-bsc1080085-backport-bytes-strings.patch
  + bcc-bsc1080085-detect-slab-for-slabratetop.patch
  + bcc-bsc1080085-fix-cachetop-py3-str.patch
  + bcc-bsc1080085-fix-syscount-str.patch
- Refresh bcc-python3.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1539259200">- Update to 0.7.0
- Refresh bcc-python3.patch
- Drop upstreamed patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Remove bcc-bsc1065593-llvm4-hack.patch and set ENABLE_LLVM_SHARED
- Remove COPYRIGHT.txt which was dropped by upstream</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to %license over %doc for licenses.
- Add upstream patch for bpftrace builds. boo#1117223
  + bsc-install-additional-headers.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update to 0.8.0.
- Remove upstreamed patches, and un-needed ones.
  - bcc-check_int128.patch
  - bcc-python3.patch (replaced with sed pipeline)
  - bcc-install-additional-headers.patch (bpftrace has fixes now)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547726400">- Remove unnecessary use of xargs.
- Remove idempotent %if..%endif guards.
- Update descriptions for grammar.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1551960000">- Correct the library version</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552305600">- Update to 0.9.0
- Add libbpf-5beb8a2ebffd.tar.gz since libbpf became a submodule
  of bcc
- Drop bcc-bsc1080085-import-readline-from-lib.patch
  + Upstream provide an additional argutment for the shared
    readline</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1556020800">- Add upstream patches to improve python3 compatibility
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1559649600">- Update to 0.10.0
  + Support for kernel up to 5.1
  + corresponding libbpf submodule release is v0.0.3
  + support for reading kernel headers from /proc
  + libbpf.{a,so} renamed to libcc_bpf.{a,so}
  + new common options for some tools
  + new tool: drsnoop
  + s390 USDT support
- Update libbpf to 0.0.3
  + Also add the source url of libbpf
- Drop upstreamed patches
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch
- Drop bcc-libbpf0 since upstream dropped the so file
- Enable SMP build flags since we don't need static clang anymore</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571054400">- Update to 0.11.0
  + Support for kernel up to 5.3
  + Corresponding libbpf submodule release is v0.0.5
  + Fix USDT issue with multi-threaded applications
  + Fixed the early return behavior of lookup_or_init
  + Support for nic hardware offload
  + Fixed and Enabled Travis CI
  + A lot of tools change with added new options, etc.
- Update libbpf to 0.0.5
  + bpf_btf_get_next_id() API to iterate over system's BTF objects
  + libbpf_set_print() now returns previously set print callback
  + libbpf versioning, build, and packaging improvements
  + convenience helpers for working with BTF types
  + experimental BPF CO-RE relocation support
  + various AF_XDP fixes and enhancements
  + BTF-defined maps
  + tracing attachment APIs and bpf_link abstraction
  + perf buffer API
  + BTF-to-C conversion API
  + btf__parse_elf API for loading .BTF from ELF files
  + libbpf_num_possible_cpus() added
  + passing through prog_flags through bpf_object__open
  + new attach types detection added
- Use version for REVISION instead of libversion</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add support-clang9.patch and apply it for llvm &gt;= 9
- Fix sed call for python</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Enable USDT for s390x since 0.10.0 already supports it</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1576497600">- Update to 0.12.0
  + Support for kernel up to 5.4
  + klockstat tool to track kernel mutex lock statistics
  + cmake option CMAKE_USE_LIBBPF_PACKAGE to build a bcc shared
    library
  + linking with distro libbpf_static.a
  + new map.lookup_or_try_init() API to remove hidden return in
    map.lookup_or_init()
  + BPF_ARRAY_OF_MAPS and BPF_HASH_OF_MAPS support
  + support symbol offset for uprobe in both C++ and python API,
    kprobe already has the support
  + bug fixes for trace.py, tcpretrans.py, runqslower.py, etc.
- Update libbpf to 0.0.6
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code
- Replace lua51-luajit-devel with luajit-devel to reflect the
  recent change in Factory (bsc#1159191)
- Add bcc-fix-test_map_in_map.patch to fix the build error in the
  test case</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Add bcc-bsc1172493-Make-reading-blacklist-optional.patch to make
  reading kprobe blacklist optional so that the bcc scripts can
  work with the locked down kernel (bsc#1172493)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617019200">- Add bcc-bsc1183399-make-no-pie-optional.patch and set
  ENABLE_NO_PIE to "OFF" to enable PIE for bcc-lua if lua support
  is enabled (bsc#1183399)</changelog>
</package>
<package pkgid="2a72a128ebff7a5fc70413dfbec5866eae6efa502dc8e8c009b78b257a2b3029" name="bcc-examples" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1523016000">- Add bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  to fix build with LLVM6.</changelog>
  <changelog author="glin@suse.com" date="1529409600">- Update to 0.6.0
- Add upstream patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Drop upstreamed patches
  + bcc-fix-build-for-llvm-5.0.1.patch
  + bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  + bcc-bsc1080085-backport-bytes-strings.patch
  + bcc-bsc1080085-detect-slab-for-slabratetop.patch
  + bcc-bsc1080085-fix-cachetop-py3-str.patch
  + bcc-bsc1080085-fix-syscount-str.patch
- Refresh bcc-python3.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1539259200">- Update to 0.7.0
- Refresh bcc-python3.patch
- Drop upstreamed patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Remove bcc-bsc1065593-llvm4-hack.patch and set ENABLE_LLVM_SHARED
- Remove COPYRIGHT.txt which was dropped by upstream</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to %license over %doc for licenses.
- Add upstream patch for bpftrace builds. boo#1117223
  + bsc-install-additional-headers.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update to 0.8.0.
- Remove upstreamed patches, and un-needed ones.
  - bcc-check_int128.patch
  - bcc-python3.patch (replaced with sed pipeline)
  - bcc-install-additional-headers.patch (bpftrace has fixes now)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547726400">- Remove unnecessary use of xargs.
- Remove idempotent %if..%endif guards.
- Update descriptions for grammar.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1551960000">- Correct the library version</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552305600">- Update to 0.9.0
- Add libbpf-5beb8a2ebffd.tar.gz since libbpf became a submodule
  of bcc
- Drop bcc-bsc1080085-import-readline-from-lib.patch
  + Upstream provide an additional argutment for the shared
    readline</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1556020800">- Add upstream patches to improve python3 compatibility
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1559649600">- Update to 0.10.0
  + Support for kernel up to 5.1
  + corresponding libbpf submodule release is v0.0.3
  + support for reading kernel headers from /proc
  + libbpf.{a,so} renamed to libcc_bpf.{a,so}
  + new common options for some tools
  + new tool: drsnoop
  + s390 USDT support
- Update libbpf to 0.0.3
  + Also add the source url of libbpf
- Drop upstreamed patches
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch
- Drop bcc-libbpf0 since upstream dropped the so file
- Enable SMP build flags since we don't need static clang anymore</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571054400">- Update to 0.11.0
  + Support for kernel up to 5.3
  + Corresponding libbpf submodule release is v0.0.5
  + Fix USDT issue with multi-threaded applications
  + Fixed the early return behavior of lookup_or_init
  + Support for nic hardware offload
  + Fixed and Enabled Travis CI
  + A lot of tools change with added new options, etc.
- Update libbpf to 0.0.5
  + bpf_btf_get_next_id() API to iterate over system's BTF objects
  + libbpf_set_print() now returns previously set print callback
  + libbpf versioning, build, and packaging improvements
  + convenience helpers for working with BTF types
  + experimental BPF CO-RE relocation support
  + various AF_XDP fixes and enhancements
  + BTF-defined maps
  + tracing attachment APIs and bpf_link abstraction
  + perf buffer API
  + BTF-to-C conversion API
  + btf__parse_elf API for loading .BTF from ELF files
  + libbpf_num_possible_cpus() added
  + passing through prog_flags through bpf_object__open
  + new attach types detection added
- Use version for REVISION instead of libversion</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add support-clang9.patch and apply it for llvm &gt;= 9
- Fix sed call for python</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Enable USDT for s390x since 0.10.0 already supports it</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1576497600">- Update to 0.12.0
  + Support for kernel up to 5.4
  + klockstat tool to track kernel mutex lock statistics
  + cmake option CMAKE_USE_LIBBPF_PACKAGE to build a bcc shared
    library
  + linking with distro libbpf_static.a
  + new map.lookup_or_try_init() API to remove hidden return in
    map.lookup_or_init()
  + BPF_ARRAY_OF_MAPS and BPF_HASH_OF_MAPS support
  + support symbol offset for uprobe in both C++ and python API,
    kprobe already has the support
  + bug fixes for trace.py, tcpretrans.py, runqslower.py, etc.
- Update libbpf to 0.0.6
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code
- Replace lua51-luajit-devel with luajit-devel to reflect the
  recent change in Factory (bsc#1159191)
- Add bcc-fix-test_map_in_map.patch to fix the build error in the
  test case</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Add bcc-bsc1172493-Make-reading-blacklist-optional.patch to make
  reading kprobe blacklist optional so that the bcc scripts can
  work with the locked down kernel (bsc#1172493)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617019200">- Add bcc-bsc1183399-make-no-pie-optional.patch and set
  ENABLE_NO_PIE to "OFF" to enable PIE for bcc-lua if lua support
  is enabled (bsc#1183399)</changelog>
</package>
<package pkgid="6d6cdd3495397199debcad465ab1af30dd0c50931c41d886bdbe78b81988396c" name="bcc-lua" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1523016000">- Add bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  to fix build with LLVM6.</changelog>
  <changelog author="glin@suse.com" date="1529409600">- Update to 0.6.0
- Add upstream patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Drop upstreamed patches
  + bcc-fix-build-for-llvm-5.0.1.patch
  + bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  + bcc-bsc1080085-backport-bytes-strings.patch
  + bcc-bsc1080085-detect-slab-for-slabratetop.patch
  + bcc-bsc1080085-fix-cachetop-py3-str.patch
  + bcc-bsc1080085-fix-syscount-str.patch
- Refresh bcc-python3.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1539259200">- Update to 0.7.0
- Refresh bcc-python3.patch
- Drop upstreamed patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Remove bcc-bsc1065593-llvm4-hack.patch and set ENABLE_LLVM_SHARED
- Remove COPYRIGHT.txt which was dropped by upstream</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to %license over %doc for licenses.
- Add upstream patch for bpftrace builds. boo#1117223
  + bsc-install-additional-headers.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update to 0.8.0.
- Remove upstreamed patches, and un-needed ones.
  - bcc-check_int128.patch
  - bcc-python3.patch (replaced with sed pipeline)
  - bcc-install-additional-headers.patch (bpftrace has fixes now)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547726400">- Remove unnecessary use of xargs.
- Remove idempotent %if..%endif guards.
- Update descriptions for grammar.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1551960000">- Correct the library version</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552305600">- Update to 0.9.0
- Add libbpf-5beb8a2ebffd.tar.gz since libbpf became a submodule
  of bcc
- Drop bcc-bsc1080085-import-readline-from-lib.patch
  + Upstream provide an additional argutment for the shared
    readline</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1556020800">- Add upstream patches to improve python3 compatibility
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1559649600">- Update to 0.10.0
  + Support for kernel up to 5.1
  + corresponding libbpf submodule release is v0.0.3
  + support for reading kernel headers from /proc
  + libbpf.{a,so} renamed to libcc_bpf.{a,so}
  + new common options for some tools
  + new tool: drsnoop
  + s390 USDT support
- Update libbpf to 0.0.3
  + Also add the source url of libbpf
- Drop upstreamed patches
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch
- Drop bcc-libbpf0 since upstream dropped the so file
- Enable SMP build flags since we don't need static clang anymore</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571054400">- Update to 0.11.0
  + Support for kernel up to 5.3
  + Corresponding libbpf submodule release is v0.0.5
  + Fix USDT issue with multi-threaded applications
  + Fixed the early return behavior of lookup_or_init
  + Support for nic hardware offload
  + Fixed and Enabled Travis CI
  + A lot of tools change with added new options, etc.
- Update libbpf to 0.0.5
  + bpf_btf_get_next_id() API to iterate over system's BTF objects
  + libbpf_set_print() now returns previously set print callback
  + libbpf versioning, build, and packaging improvements
  + convenience helpers for working with BTF types
  + experimental BPF CO-RE relocation support
  + various AF_XDP fixes and enhancements
  + BTF-defined maps
  + tracing attachment APIs and bpf_link abstraction
  + perf buffer API
  + BTF-to-C conversion API
  + btf__parse_elf API for loading .BTF from ELF files
  + libbpf_num_possible_cpus() added
  + passing through prog_flags through bpf_object__open
  + new attach types detection added
- Use version for REVISION instead of libversion</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add support-clang9.patch and apply it for llvm &gt;= 9
- Fix sed call for python</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Enable USDT for s390x since 0.10.0 already supports it</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1576497600">- Update to 0.12.0
  + Support for kernel up to 5.4
  + klockstat tool to track kernel mutex lock statistics
  + cmake option CMAKE_USE_LIBBPF_PACKAGE to build a bcc shared
    library
  + linking with distro libbpf_static.a
  + new map.lookup_or_try_init() API to remove hidden return in
    map.lookup_or_init()
  + BPF_ARRAY_OF_MAPS and BPF_HASH_OF_MAPS support
  + support symbol offset for uprobe in both C++ and python API,
    kprobe already has the support
  + bug fixes for trace.py, tcpretrans.py, runqslower.py, etc.
- Update libbpf to 0.0.6
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code
- Replace lua51-luajit-devel with luajit-devel to reflect the
  recent change in Factory (bsc#1159191)
- Add bcc-fix-test_map_in_map.patch to fix the build error in the
  test case</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Add bcc-bsc1172493-Make-reading-blacklist-optional.patch to make
  reading kprobe blacklist optional so that the bcc scripts can
  work with the locked down kernel (bsc#1172493)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617019200">- Add bcc-bsc1183399-make-no-pie-optional.patch and set
  ENABLE_NO_PIE to "OFF" to enable PIE for bcc-lua if lua support
  is enabled (bsc#1183399)</changelog>
</package>
<package pkgid="2285a05943a52fe8a794deaa3b8315b958537cc7010da8079d0313a584e1dfe2" name="bcc-tools" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1523016000">- Add bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  to fix build with LLVM6.</changelog>
  <changelog author="glin@suse.com" date="1529409600">- Update to 0.6.0
- Add upstream patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Drop upstreamed patches
  + bcc-fix-build-for-llvm-5.0.1.patch
  + bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  + bcc-bsc1080085-backport-bytes-strings.patch
  + bcc-bsc1080085-detect-slab-for-slabratetop.patch
  + bcc-bsc1080085-fix-cachetop-py3-str.patch
  + bcc-bsc1080085-fix-syscount-str.patch
- Refresh bcc-python3.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1539259200">- Update to 0.7.0
- Refresh bcc-python3.patch
- Drop upstreamed patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Remove bcc-bsc1065593-llvm4-hack.patch and set ENABLE_LLVM_SHARED
- Remove COPYRIGHT.txt which was dropped by upstream</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to %license over %doc for licenses.
- Add upstream patch for bpftrace builds. boo#1117223
  + bsc-install-additional-headers.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update to 0.8.0.
- Remove upstreamed patches, and un-needed ones.
  - bcc-check_int128.patch
  - bcc-python3.patch (replaced with sed pipeline)
  - bcc-install-additional-headers.patch (bpftrace has fixes now)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547726400">- Remove unnecessary use of xargs.
- Remove idempotent %if..%endif guards.
- Update descriptions for grammar.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1551960000">- Correct the library version</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552305600">- Update to 0.9.0
- Add libbpf-5beb8a2ebffd.tar.gz since libbpf became a submodule
  of bcc
- Drop bcc-bsc1080085-import-readline-from-lib.patch
  + Upstream provide an additional argutment for the shared
    readline</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1556020800">- Add upstream patches to improve python3 compatibility
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1559649600">- Update to 0.10.0
  + Support for kernel up to 5.1
  + corresponding libbpf submodule release is v0.0.3
  + support for reading kernel headers from /proc
  + libbpf.{a,so} renamed to libcc_bpf.{a,so}
  + new common options for some tools
  + new tool: drsnoop
  + s390 USDT support
- Update libbpf to 0.0.3
  + Also add the source url of libbpf
- Drop upstreamed patches
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch
- Drop bcc-libbpf0 since upstream dropped the so file
- Enable SMP build flags since we don't need static clang anymore</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571054400">- Update to 0.11.0
  + Support for kernel up to 5.3
  + Corresponding libbpf submodule release is v0.0.5
  + Fix USDT issue with multi-threaded applications
  + Fixed the early return behavior of lookup_or_init
  + Support for nic hardware offload
  + Fixed and Enabled Travis CI
  + A lot of tools change with added new options, etc.
- Update libbpf to 0.0.5
  + bpf_btf_get_next_id() API to iterate over system's BTF objects
  + libbpf_set_print() now returns previously set print callback
  + libbpf versioning, build, and packaging improvements
  + convenience helpers for working with BTF types
  + experimental BPF CO-RE relocation support
  + various AF_XDP fixes and enhancements
  + BTF-defined maps
  + tracing attachment APIs and bpf_link abstraction
  + perf buffer API
  + BTF-to-C conversion API
  + btf__parse_elf API for loading .BTF from ELF files
  + libbpf_num_possible_cpus() added
  + passing through prog_flags through bpf_object__open
  + new attach types detection added
- Use version for REVISION instead of libversion</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add support-clang9.patch and apply it for llvm &gt;= 9
- Fix sed call for python</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Enable USDT for s390x since 0.10.0 already supports it</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1576497600">- Update to 0.12.0
  + Support for kernel up to 5.4
  + klockstat tool to track kernel mutex lock statistics
  + cmake option CMAKE_USE_LIBBPF_PACKAGE to build a bcc shared
    library
  + linking with distro libbpf_static.a
  + new map.lookup_or_try_init() API to remove hidden return in
    map.lookup_or_init()
  + BPF_ARRAY_OF_MAPS and BPF_HASH_OF_MAPS support
  + support symbol offset for uprobe in both C++ and python API,
    kprobe already has the support
  + bug fixes for trace.py, tcpretrans.py, runqslower.py, etc.
- Update libbpf to 0.0.6
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code
- Replace lua51-luajit-devel with luajit-devel to reflect the
  recent change in Factory (bsc#1159191)
- Add bcc-fix-test_map_in_map.patch to fix the build error in the
  test case</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Add bcc-bsc1172493-Make-reading-blacklist-optional.patch to make
  reading kprobe blacklist optional so that the bcc scripts can
  work with the locked down kernel (bsc#1172493)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617019200">- Add bcc-bsc1183399-make-no-pie-optional.patch and set
  ENABLE_NO_PIE to "OFF" to enable PIE for bcc-lua if lua support
  is enabled (bsc#1183399)</changelog>
</package>
<package pkgid="ddb22b6169c6db4ce959223b357eeacd980346ab5c6655d2ee5592207ee1426c" name="bcm43xx-firmware" arch="noarch">
  <version epoch="0" ver="20180314" rel="lp152.10.3.1"/>
  <changelog author="fvogt@suse.com" date="1472126400">- Add initial package</changelog>
  <changelog author="fvogt@suse.com" date="1472472000">- Make Source: URLs absolute
- Update brcmfmac43430-sdio.bin to 7.45.41.26</changelog>
  <changelog author="afaerber@suse.de" date="1472558400">- Renamed package from brcm43430-firmware to bcm43430-firmware</changelog>
  <changelog author="afaerber@suse.de" date="1472904000">- Renamed package from bcm43430-firmware to bcm43xx-firmware (duwe)
- Renamed brcmfmac43430-sdio.txt to brcmfmac43430-sdio-rpi3.txt and
  added post-install script to symlink
  * Added brcmfmac43362-sdio-{cubietruck,bananapi-{m1+,m2}}.txt</changelog>
  <changelog author="afaerber@suse.de" date="1473249600">- Move %post script to install-brcmfmac.sh, add 50-brcmfmac.conf.
  This avoids workarounds for Kiwi images. (tiwai)</changelog>
  <changelog author="afaerber@suse.de" date="1476792000">- Dropped brcmfmac43430-sdio.bin (in kernel-firmware now)</changelog>
  <changelog author="tbechtold@suse.com" date="1483444800">- Add brcmfmac4329-sdio-cubox-i.txt and brcmfmac4330-sdio-cubox-i.txt.</changelog>
  <changelog author="afaerber@suse.de" date="1483876800">- Add vendor prefix for CuBox-i compatible string
- Reorder by board name</changelog>
  <changelog author="afaerber@suse.de" date="1484481600">- Add brcmfmac4339-sdio-vega-s95-telos.txt</changelog>
  <changelog author="afaerber@suse.de" date="1491825600">- Require kernel-firmware, suggested by fvogt. (bsc#1033137)
  Don't require version 20161005 or later, to remain compatible
  with older distributions.
- Bump version to today's date. This will allow other packages
  such as kernel-firmware to conflict against our older version.</changelog>
  <changelog author="afaerber@suse.de" date="1497268800">- Add Supplements for Raspberry Pi 3 (bsc#1041823)
- Resolve NUL char warning on modprobe for Tumbleweed by properly
  iterating over zero-separated DT compatible strings</changelog>
  <changelog author="agraf@suse.com" date="1521028800">- Add support for RPi 3 B+ (bcm43455, bsc#1085262)</changelog>
  <changelog author="tiwai@suse.de" date="1530014400">- Add brcmfmac4356-pcie.txt for BCM 4356 PCI (bsc#1099149)</changelog>
  <changelog author="fvogt@suse.com" date="1535630400">- Add bluetooth firmware for RPi 3 B+ (bsc#1103587)
- Update brcmfmac43430-sdio.txt and brcmfmac43455-sdio.txt:
  * Improved brcmfmac BT coexistence parameters
- Switch BCM43430A1.hcd to official source:
  * No changelog available
- Use %license
- Run spec-cleaner</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1548331200">- Remove files that are now present in kernel-firmware (fate#326215).
- Delete softlink creation for this files. (bsc#1098041).</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1570017600">- Add brcmfmac43455-sdio.raspberrypi,4-model-b.txt</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574856000">- Update boardflags3 value for brcmfmac43455-sdio.raspberrypi,4-model-b.txt
  to fix WiFi connection on RPi4</changelog>
  <changelog author="Nicolas Patricio Saenz Julienne &lt;nsaenzjulienne@suse.com&gt;" date="1582113600">- Remove brcmfmac43455-sdio.raspberrypi,4-model-b.txt, already available in
  kernel-firmware (bsc#1163237)</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1600257600">- Update bluetooth firmware to address Sweyntooth and Spectra issues (bsc#1176631):
  * BCM43430A1.hcd
  * BCM4345C0.hcd
- Remove wildcards in %files
- Delete brcmfmac43362-sdio-cubietruck.txt as now part of kernel-firmware (as brcmfmac43362-sdio.cubietech,cubietruck.txt)
- brcmfmac driver loads file depending on compatible. Rename files correspondingly. (bsc#1169094)
  * brcmfmac4329-sdio-cubox-i.txt -&gt; brcmfmac4329-sdio.solidrun,cubox-i-dl.txt
  * brcmfmac4330-sdio-cubox-i.txt -&gt; brcmfmac4330-sdio.solidrun,cubox-i-q.txt
  * brcmfmac4339-sdio-vega-s95-telos.txt -&gt; brcmfmac4339-sdio.tronsmart,vega-s95-telos.txt
  * brcmfmac43362-sdio-bananapi-m2.txt -&gt; brcmfmac43362-sdio.sinovoip,bpi-m2.txt
- delete modprobe config file and install-brcmfmac.sh as no longer needed</changelog>
</package>
<package pkgid="65bc12885ec0b930357f364917449d2399e12bf86a77d806264fb5ad49981463" name="bcm43xx-firmware" arch="src">
  <version epoch="0" ver="20180314" rel="lp152.10.3.1"/>
  <changelog author="fvogt@suse.com" date="1472126400">- Add initial package</changelog>
  <changelog author="fvogt@suse.com" date="1472472000">- Make Source: URLs absolute
- Update brcmfmac43430-sdio.bin to 7.45.41.26</changelog>
  <changelog author="afaerber@suse.de" date="1472558400">- Renamed package from brcm43430-firmware to bcm43430-firmware</changelog>
  <changelog author="afaerber@suse.de" date="1472904000">- Renamed package from bcm43430-firmware to bcm43xx-firmware (duwe)
- Renamed brcmfmac43430-sdio.txt to brcmfmac43430-sdio-rpi3.txt and
  added post-install script to symlink
  * Added brcmfmac43362-sdio-{cubietruck,bananapi-{m1+,m2}}.txt</changelog>
  <changelog author="afaerber@suse.de" date="1473249600">- Move %post script to install-brcmfmac.sh, add 50-brcmfmac.conf.
  This avoids workarounds for Kiwi images. (tiwai)</changelog>
  <changelog author="afaerber@suse.de" date="1476792000">- Dropped brcmfmac43430-sdio.bin (in kernel-firmware now)</changelog>
  <changelog author="tbechtold@suse.com" date="1483444800">- Add brcmfmac4329-sdio-cubox-i.txt and brcmfmac4330-sdio-cubox-i.txt.</changelog>
  <changelog author="afaerber@suse.de" date="1483876800">- Add vendor prefix for CuBox-i compatible string
- Reorder by board name</changelog>
  <changelog author="afaerber@suse.de" date="1484481600">- Add brcmfmac4339-sdio-vega-s95-telos.txt</changelog>
  <changelog author="afaerber@suse.de" date="1491825600">- Require kernel-firmware, suggested by fvogt. (bsc#1033137)
  Don't require version 20161005 or later, to remain compatible
  with older distributions.
- Bump version to today's date. This will allow other packages
  such as kernel-firmware to conflict against our older version.</changelog>
  <changelog author="afaerber@suse.de" date="1497268800">- Add Supplements for Raspberry Pi 3 (bsc#1041823)
- Resolve NUL char warning on modprobe for Tumbleweed by properly
  iterating over zero-separated DT compatible strings</changelog>
  <changelog author="agraf@suse.com" date="1521028800">- Add support for RPi 3 B+ (bcm43455, bsc#1085262)</changelog>
  <changelog author="tiwai@suse.de" date="1530014400">- Add brcmfmac4356-pcie.txt for BCM 4356 PCI (bsc#1099149)</changelog>
  <changelog author="fvogt@suse.com" date="1535630400">- Add bluetooth firmware for RPi 3 B+ (bsc#1103587)
- Update brcmfmac43430-sdio.txt and brcmfmac43455-sdio.txt:
  * Improved brcmfmac BT coexistence parameters
- Switch BCM43430A1.hcd to official source:
  * No changelog available
- Use %license
- Run spec-cleaner</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1548331200">- Remove files that are now present in kernel-firmware (fate#326215).
- Delete softlink creation for this files. (bsc#1098041).</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1570017600">- Add brcmfmac43455-sdio.raspberrypi,4-model-b.txt</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1574856000">- Update boardflags3 value for brcmfmac43455-sdio.raspberrypi,4-model-b.txt
  to fix WiFi connection on RPi4</changelog>
  <changelog author="Nicolas Patricio Saenz Julienne &lt;nsaenzjulienne@suse.com&gt;" date="1582113600">- Remove brcmfmac43455-sdio.raspberrypi,4-model-b.txt, already available in
  kernel-firmware (bsc#1163237)</changelog>
  <changelog author="Matthias Brugger &lt;mbrugger@suse.com&gt;" date="1600257600">- Update bluetooth firmware to address Sweyntooth and Spectra issues (bsc#1176631):
  * BCM43430A1.hcd
  * BCM4345C0.hcd
- Remove wildcards in %files
- Delete brcmfmac43362-sdio-cubietruck.txt as now part of kernel-firmware (as brcmfmac43362-sdio.cubietech,cubietruck.txt)
- brcmfmac driver loads file depending on compatible. Rename files correspondingly. (bsc#1169094)
  * brcmfmac4329-sdio-cubox-i.txt -&gt; brcmfmac4329-sdio.solidrun,cubox-i-dl.txt
  * brcmfmac4330-sdio-cubox-i.txt -&gt; brcmfmac4330-sdio.solidrun,cubox-i-q.txt
  * brcmfmac4339-sdio-vega-s95-telos.txt -&gt; brcmfmac4339-sdio.tronsmart,vega-s95-telos.txt
  * brcmfmac43362-sdio-bananapi-m2.txt -&gt; brcmfmac43362-sdio.sinovoip,bpi-m2.txt
- delete modprobe config file and install-brcmfmac.sh as no longer needed</changelog>
</package>
<package pkgid="34b08caa59b8d686f78abbbaa576ab757e468cd8627786702b2e7ffe06ad958d" name="bgzip" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="lp152.2.4.1"/>
  <changelog author="flyos@mailoo.org" date="1461067200">- Initial release.</changelog>
  <changelog author="flyos@mailoo.org" date="1461240000">- Changed "./configure" and "make install" for "%configure" and
  "%make_install"
- Moved "%_libdir/libhts.so" and "%_libdir/pkgconfig/htslib.pc"
  to the *-devel package.</changelog>
  <changelog author="flyos@mailoo.org" date="1462017600">- Cleaner spec file
- Added baselibs.conf</changelog>
  <changelog author="flyos@mailoo.org" date="1462017601">- Update to 1.3.1</changelog>
  <changelog author="flyos@mailoo.org" date="1499688000">- Update to 1.5
- Change in SONAME, updated the package name to libhts2
- New dependencies to libbz2 and lzma</changelog>
  <changelog author="flyos@mailoo.org" date="1499688001">- Cleaner structure of the spec file and baselibs.conf,
  thanks to the amazing help of the packaging mailing list guys!</changelog>
  <changelog author="flyos@mailoo.org" date="1499860800">- Separated the binaries from the shared lib package</changelog>
  <changelog author="flyos@mailoo.org" date="1531396800">- Better formatting of the descriptions
- Spec file cleaned up using spec-cleaner
- Update to 1.8
  * The URL to get sequences from the EBI reference server has been changed
    to https://.  This is because the EBI no longer serve sequences via
    plain HTTP - requests to the http:// endpoint just get redirected.
    HTSlib needs to be linked against libcurl to download https:// URLs,
    so CRAM users who want to get references from the EBI will need to
    run configure and ensure libcurl support is enabled using the
  - -enable-libcurl option.
  * Added libdeflate as a build option for alternative faster compression and
    decompression.  Results vary by CPU but compression should be twice as fast
    and decompression faster.
  * It is now possible to set the compression level in bgzip.  (#675; thanks
    to Nathan Weeks).
  * bgzip now gets its own manual page.
  * CRAM encoding now stored MD and NM tags verbatim where the reference
    contains 'N' characters, to work around ambiguities in the SAM
    specification (samtools #717/762).
    Also added "store_md" and "store_nm" cram-options for forcing these
    tags to be stored at all locations.  This is best when combined with
    a subsequent decode_md=0 option while reading CRAM.
  * Multiple CRAM bug fixes, including a fix to free and the subsequent reuse of
    references with `-T ref.fa`. (#654; reported by Chris Saunders)
  * CRAM multi-threading bugs fixed: don't try to call flush on reading;
    processing of multiple range queries; problems with multi-slice containers.
  * Fixed crashes caused when decoding some cramtools produced CRAM files.
  * Fixed a couple of minor rANS issues with handling invalid data.
  * Fixed bug where probaln_glocal() tried to allocate far more memory than
    needed when the query sequence was much longer than the reference.  This
    caused crashes in samtools and bcftools mpileup when used on data with very
    long reads. (#572, problem reported by Felix Bemm via minimap2).
  * sam_prop_realn() now returns -1 (the same value as for unmapped reads)
    on reads that do not include at least one 'M', 'X' or '=' CIGAR operator,
    and no longer adds BQ or ZQ tags.  BAQ adjustments are only made to bases
    covered by these operators so there is no point in trying to align
    reads that do not have them. (#572)
  * BAM: HTSlib now supports BAMs which include CIGARs with more than
    65535 operations as per HTS-Specs 18th November (dab57f4 and 2f915a8).
  * BCF/VCF:
  - Removed the need for long double in pileup calculations.
  - Sped up the synced reader in some situations.
  - Bug fixing: removed memory leak in bcf_copy.
  * CRAM:
  - Added support for HTS_IDX_START in cram iterators.
  - Easier to build when lzma header files are absent.
  - Bug fixing: a region query with REQUIRED_FIELDS option to
    disable sequence retrieval now gives correct results.
  - Bug fixing: stop queries to regions starting after the last
    read on a chromosome from incorrectly reporting errors
    (#651, #653; reported by Imran Haque and @egafni via pysam).
  * Multi-region iterator: The new structure takes a list of regions and
    iterates over all, deduplicating reads in the process, and producing a
    full list of file offset intervals. This is usually much faster than
    repeatedly using the old single-region iterator on a series of regions.
  * Curl improvements:
  - Add Bearer token support via HTS_AUTH_LOCATION env (#600).
  - Use CURL_CA_BUNDLE environment variable to override the CA (#622;
    thanks to Garret Kelly &amp; David Alexander).
  - Speed up (removal of excessive waiting) for both http(s) and ftp.
  - Avoid repeatedly reconnecting by removal of unnecessary seeks.
  - Bug fixing: double free when libcurl_open fails.
  * BGZF block caching, if enabled, now performs far better (#629; reported
    by Ram Yalamanchili).
  * Added an hFILE layer for in-memory I/O buffers (#590; thanks to Thomas
    Hickman).
  * Tidied up the drand48 support (intended for systems that do not
    provide this function).
  * Fixed bug where iterators on CRAM files did not propagate error return
    values to the caller correctly.  Thanks go to Chris Saunders.
  * Overhauled Windows builds.  Building with msys2/mingw64 now works
    correctly and passes all tests.
  * More improvements to logging output (thanks again to Anders Kaplan).
  * Return codes from sam_read1() when reading cram have been made
    consistent with those returned when reading sam/bam.  Thanks to
    Chris Saunders (#575).
  * BGZF CRC32 checksums are now always verified.
  * It's now possible to set nthreads = 1 for cram files.
  * hfile_libcurl has been modified to make it thread-safe.  It's also
    better at handling web servers that do not honour byte range requests
    when attempting to seek - it now sets errno to ESPIPE and keeps
    the existing connection open so callers can revert to streaming mode
    it they want to.
  * hfile_s3 now recalculates access tokens if they have become stale.  This
    fixes a reported problem where authentication failed after a file
    had been in use for more than 15 minutes.
  * Fixed bug where remote index fetches would fail to notice errors when
    writing files.
  * bam_read1() now checks that the query sequence length derived from the
    CIGAR alignment matches the sequence length in the BAM record.</changelog>
  <changelog author="flyos@mailoo.org" date="1536235200">- Update to 1.9
  * If `./configure` fails, `make` will stop working until either configure
    is re-run successfully, or `make distclean` is used.  This makes
    configuration failures more obvious.  (#711, thanks to John Marshall)
  * The default SAM version has been changed to 1.6.  This is in line with the
    latest version specification and indicates that HTSlib supports the
    CG tag used to store long CIGAR data in BAM format.
  * bgzip integrity check option '--test' (#682, thanks to @sd4B75bJ, @jrayner)
  * Faidx can now index fastq files as well as fasta.  The fastq index adds
    an extra column to the `.fai` index which gives the offset to the quality
    values.  New interfaces have been added to `htslib/faidx.h` to read the
    fastq index and retrieve the quality values.  It is possible to open
    a fastq index as if fasta (only sequences will be returned), but not
    the other way round. (#701)
  * New API interfaces to add or update integer, float and array aux tags. (#694)
  * Add `level=&lt;number&gt;` option to `hts_set_opt()` to allow the compression
    level to be set.  Setting `level=0` enables uncompressed output. (#715)
  * Improved bgzip error reporting.
  * Better error reporting when CRAM reference files can't be opened. (#706)
  * Fixes to make tests work properly on Windows/MinGW - mainly to handle
    line ending differences. (#716)
  * Efficiency improvements:
  - Small speed-up for CRAM indexing.
  - Reduce the number of unnecessary wake-ups in the thread pool. (#703)
  - Avoid some memory copies when writing data, notably for uncompressed
    BGZF output. (#703)
  * Bug fixes:
  - Fix multi-region iterator bugs on CRAM files. (#684)
  - Fixed multi-region iterator bug that caused some reads to be skipped
    incorrectly when reading BAM files. (#687)
  - Fixed synced_bcf_reader() bug when reading contigs multiple times. (#691,
    reported by @freeseek)
  - Fixed bug where bcf_hdr_set_samples() did not update the sample dictionary
    when removing samples. (#692, reported by @freeseek)
  - Fixed bug where the VCF record ref length was calculated incorrectly
    if an INFO END tag was present. (71b00a)
  - Fixed warnings found when compiling with gcc 8.1.0. (#700)
  - sam_hdr_read() and sam_hdr_write() will now return an error code
    if passed a NULL file pointer, instead of crashing.
  - Fixed possible negative array look-up in sam_parse1() that somehow
    escaped previous fuzz testing. (#731, reported by @fCorleone)
  - Fixed bug where cram range queries could incorrectly report an error
    when using multiple threads. (#734, reported by Brent Pedersen)
  - Fixed very rare rANS normalisation bug that could cause an assertion
    failure when writing CRAM files. (#739, reported by @carsonhh)</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1580904000">- Update to release 1.10.2
  * This is a release fix that corrects minor inconsistencies discovered in
    previous deliverables.
- Update to release 1.10.1
  * The support for 64-bit coordinates in VCF brought problems for files
    not conforming to VCF/BCF specification. While previous versions would
    make out-of-range values silently overflow creating nonsense values
    but parseable file, the version 1.10 would silently create an invalid BCF.
- Update to release 1.10
  + Brief summary
  * Addition of support for references longer than 2Gb (NB: SAM and VCF
    formats only, not their binary counterparts).  This may need changes
    in code using HTSlib.  See README.large_positions.md for more information.
  * Added a SAM header API.
  * Major speed up to SAM reading and writing.  This also now supports
    multi-threading.
  * We can now auto-index on-the-fly while writing a file.  This also
    includes to bgzipped SAM.gz.
  * Overhaul of the S3 interface, which now supports version 4
    signatures.  This also makes writing to S3 work.</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1581336000">- Include baselibs.conf as source file.
- Update baselibs.conf.</changelog>
  <changelog author="Pierre Bonamy &lt;flyos@mailoo.org&gt;" date="1628164800">- CVE-2020-36403.diff: Add patch fixing CVE-2020-36403 #boo1187917</changelog>
</package>
<package pkgid="93e5c3a0f4e1a7c1de5ef98237f21fa9e3baabcb24855ff70f649e9a4ad9f41d" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="04b76255ceae824a3172484781d1d74a80a6caac6b2d84bfb44feb10b819d398" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="88e6f3cfb13e092aa0ae4dcb7647891fe408b4364bd682787e22a91b92a74eaa" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="d4db0161e27837c2227c30ae453fa3b1c3391d988b03c65898c0ad76f98242ed" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="f14f8a61a0c81994f093dca0ba5b13ece7cc2232278a5909511ae8895fb6c36b" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="e2f30bbc1be478595426547bd8bc16544cc3ca2a9a986e9c90cf96b7dfdc566b" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="fbbb835ed91d426f8221c8e922b34deedfb7b2222d37d2f5631fcc489f12573e" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="d01e7b76f6814dbbfa19e100a9fde4607b28f2a2960c5c610194b4b89c4922cd" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="fcb956bcb0e6be565a1dc63ec0614b0f103effd9666c509313c3468961f8a58b" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="f3b9ac110670c9f9f0f04b8c016c04e2df370dfc3451b509096914e7ef977d75" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.22.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
</package>
<package pkgid="6bf5116735e7a33d9d46ec6ef9cc6b5fb24910da0cade87c7c917401b2b69c43" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="lp152.14.22.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
</package>
<package pkgid="a365f1058fede8a966f98bb332cd9f6ff916ccd0d4c19ed4405bbc3bdcd8a686" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.22.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
</package>
<package pkgid="a4348abad4d95584d4bbf6107480011c80114f57d61d25613ff50df47abc2baa" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.25.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
</package>
<package pkgid="40f5459e70553aa83937b514658db2b3be647a92db2b4888d30c3dd6545e294d" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="lp152.14.25.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
</package>
<package pkgid="f8f859d0e336bdad31e03123e9c8e3fa122e1829d8746b12354e32afcfeb7295" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.25.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
</package>
<package pkgid="174f7fdcc4c02a846df2d3a5df99af123dadfb0e59c2d2a45875056a01dc9646" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="96ebbd464979f46adbdb60078245deaff08bc31d0ec5292e1807ea3540078f1f" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="e657b11df55b6cbbb3982862b9baaa8ad711fdbb7c7755403e052a5f6a4cc864" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="1133ad71cd66b0aec8edd38b270c64ffe6b975ff63b63523d5738fa4276c9e5b" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="bae7425d439408ea205de6f013fb27811a96bb5eb62a1eeb828b0fd884f6fd98" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="2ea02af18a78b1916b00dfab60df42979ad007fa2e6c3e73cc1814c01a8965cb" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="97d3a5619c9005e432ec7aed8973e226f1fbd3ef16e9aba8841af3d3e5722453" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="6b4bfe65d8e3f8110ddfb89b5ecafc63e003e8c2a9b7a27e5f047488e09fcc4c" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="d94742cfc96bf6689f3a731a45fd71d3876f8fce688e6e06161b772aa38204ad" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="6768349039952c2cd621a5316459b1b7a71f71fd9528930f8c63087f59be0f49" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="19e172a716cf7985ba46beae33e5dcf0041b16da3f24b574d86bb5c88f271876" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="0c6085960963183c839e82d9be903fbfd1c136c01a4833d37535d544cca678e6" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="7f70ff5c48344dbe8605bfcc80d48560e85c35197abb65f6ff3035ac138c3438" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="6c193aec8d53d0d5fe2750045fde5830a4cddfc887cc2f6710a58a61da537d07" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="50ca23ffe22967e4ddaae05564cd0f2704deadb0143ec0e3d70b6c8d5c330582" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="df7ba50c08afcec47c75984b121abe5cbe1002ccddd8f1421f0fbf8729c7a1d9" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.22.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
</package>
<package pkgid="698c66d9f0343bc020dd8113fc51e6294dac6207982a55fd511941d18491108c" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.22.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
</package>
<package pkgid="c9098c614135f422dbbc4f4380c5f4bd559550e631e053b0a268ed27de9efd5b" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.25.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
</package>
<package pkgid="83306b4284a2a5b6539d0dfc0a7a7b165dfa142e6be9afe5e3b193ddfdab94e8" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.25.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
</package>
<package pkgid="0a82c96d111b827a9614669949dd5d5b445b00b3ace8feed220c3c9d2d978271" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="dc817403530cc0976f50cdb6678451e43e482e9ab2d54c5198f1b5e33b880550" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="a3e4520bf5935f126590de3a5aef2fb13c5fc0a87830bbcdb3565988071960a4" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="6a4f35e4f54514cdf5d302e5aace74b08a6cad5a5d04e64c98d5a9b19bcfe42c" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="6f3c88fe1ad591953363d347ba61de1bfc74b1c604c093355e0c1e592cdbaf9d" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="db92a737469eaf34fe411a109cbc3780e8254502fc0e084cd56b24a4e6a938dc" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="047defc4d2e8ea59aa0c661bd51b2e818ee8ccc40ba12844470cd60a0b4675e5" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="9d96482cd82c3e87d629a0dee817690377ddc8bb178c53cd1bb87553732c3efa" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="612c0984deb39e86ea59702876d84c22f156d521d8be8f0f5db2f4a8726097bb" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="daa9db5cd9e9a443d9f39c63dde22d83ac8611d5372f8bdd6ae4219aef327dd1" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.22.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
</package>
<package pkgid="95616bd2f8d56cc3413bc86fdc0dc4b1f28a3fe2f696c70a4e4541c32528d4e3" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.25.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
</package>
<package pkgid="7049db5c346b6cab31ea2c6e68a3fc2c2221b8e78beadd9d86a2b5e1dc79dd64" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="7ee221d1e4f96a3c29930cb5e9f02ee6f98febaac426518531265217cc688056" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="3616749c8266e6107687961584d5df170c6c871c77d5b947f50db6e745ca8c74" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="7cc88a5484a8bf2c51cb75db881baa7380bf1b22d1d9f356cd45d4a12d52e3f2" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="78e77801f54cf2fffb4b4de9380cf1be4629fe72b96025ce1b8739de27575587" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="88aad7328dd8a776200275def5ec84ce5ea4c57797f0db046e5cc2e76634e269" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="ef074c6698b859a1aab7918e9d8827f5f80d2dee1c70339e75067afa1c98a02d" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="368f1f399215c9ec57e47b0af68b1d52badd4ccd181acefc2c6b2903b42aba82" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="55a12e1c6cc287880074a3d9993b685e214ff2f361828fc9b01d0253fa2055db" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="00ee0f310177b34885e23eaac66efa994be1d0d5c3837d73813109c2c3c256be" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.22.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
</package>
<package pkgid="422803533ca329b47cb102740f6d795d3a5b4d566ce85e2032497a515d887f46" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.22.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
</package>
<package pkgid="5bfab2face62d976f513a9584a64215f8d7c4f835372021041d5581d88dabd6f" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.25.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
</package>
<package pkgid="7b681202d09a03ae1fcc76072a65f5cdbe8794c04ae041313dd117faccc7050a" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.25.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
</package>
<package pkgid="aae6eb510a6872707fd8854522b57d44d0e91f47ab255533feda8dc75c00b49b" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="1941a09c5aab431a123eac4e76429828e4f9c625f0db640a089c98bf1b1dfd73" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="6c186d6b3916dcf35d1268c8d7b8185e58d4c1b85d696b33eacc40b5d7349934" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="9cc6221c1b873ab329b411231021e438abaa8e88a8bbc5e33c4d6684e6569496" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="83ce7084b89e676f984e6793a08b6091e4a17707c4b0cdd938e16411da750bf7" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="b48e8a585662d2c1655fae8de491f4f796b3ba413098c7d84f8a46fb493f43df" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="4e36b5228470441a86a7da2bfb68731a3135c9e6fe57f91edf75afa8301bd3e1" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="a628e93bd3f25d97834c980eabb6b4203263ae7fbe4297f5cff9f1635af145de" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="f4876adfb55dbc0daed7317a732c094cb75edcf28e74932d4927adf554c977ec" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="c69ba1ba1e75db5535067ada2a186a38728ac3928c4013ee13afd165586e4a2c" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="lp152.14.22.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
</package>
<package pkgid="0e2b6c928eb11fbed47b5b0ae8965b13b99ea67937dc06591bb56ce849067a9f" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="lp152.14.25.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
</package>
<package pkgid="3d071412e36f4bdf777d84f27256faf848b0911be6356d0886d2916d65aecf59" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="bab54ad60e1bfec527c71c313270b7974d2b7be3b8b7ba70e7e0b5571f2b7ed9" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="963ff1fb1499d437dd71b411743f7b93240c957f720f9ddfdefa46310cc3a1f4" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="e79ff8c847046950386902ad4cf2f7497bd1b7a288a1e89d3358864c3c987f74" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="c5f2a3e920f292ec0b57a0cc7ed9cd8eed3ac9b738b039398c4c7772feb35f8c" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="bdf003ee0c357fc4bc4b00fdc5d07f2376ac5f4cc1af5e91be3e0aa06ac18caa" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="8cf666ad10f60a26714dde616be4f9b412b4971393c5553ac5057f4e0eb10c85" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="d2acf44ef0e8eaa3cc4dfc40c73a34e531c959667b8ce4f347b161f3f603c3cf" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="488a03d728608b7b6071711114e43e8e1a50ffdc689b644d118bd5d393e3153f" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="df448d1c2c468bcc4c53c244df91e5762592dfa76ab80b01cda5ec393ec13b41" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.22.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
</package>
<package pkgid="2c86ec8237c5a424c02146ebedac51cd8a1df2b65641e359f8513c2f39b4240f" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.22.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
</package>
<package pkgid="52a8ad2aca70ce7e49b66048a05299c54cc9ab22c58eee84218bb9d17e189fe2" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.25.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
</package>
<package pkgid="5f62339586544ddcf07dd1b7e690effbe8a82588f48cef633a8ddc8caaafd451" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.25.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
</package>
<package pkgid="c3d554c2fd944613fe2cb571c770ac84555e012180623d58a9647705057f45ab" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="af648bd9fd66af9691945db8c120d7bb2d8c6d4e22ca0a355e246039c06ff1ce" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="1a029c8f9bdaa300c28f6a92d6a82b5d223945141288e17c1db539606ae96190" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="419fe028003999ba9241c196d1ad3d12e03eb434442b625deb5cee9027b37a65" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="405e35ac15f61aef322797dfcbf4249548a7b1e54574a8c76f946ce62de41483" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="9c0f527f0d7a5d43c4f5b754bf539f60598400da87fb9dbca8c23da3554ef930" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="e5b58c151fa6e7549bf75ea83d4ba0029aab4a054286285e91a84473f56a0c63" name="binutils" arch="i586">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="957db5137ec80296d3948197dddeb4a8767bf3a1a7f40a243f6549b8b364e61f" name="binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="c00e305f4b5d82786e83b625f008abac9a4acf8b16b37af1702648af49847e18" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="d4ffc182022217134f4df0afd46b3f3a07e380d2e61edb19cac522efce87b62b" name="binutils" arch="i586">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="c06f92b89116bbac8ec5a3298874d1fc4c0b246e513ca2e53f7577699ea118b1" name="binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="467021c4a4cd3380839faa6ab39399e07dc6f2ba866e1efb7b70d29508321372" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="ff6b8a785dcfaea6088c337e85756867af5b328acc1e13452556dd6e3c31bca9" name="binutils" arch="i586">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="01eafe7e27b25632a66a895a33e7d4c07b1d09778441deb888999e859f0fbbb1" name="binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="70d085526e49d12f251e4871d0e72b12ef5970466559d9e5682b5c955b7ae497" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="2dc1ac10e8428a64406462261f765b8102af7e3f52b6f6e2c6248d8b4906cf4a" name="binutils-devel" arch="i586">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="ab86d9fff6e6610f557d2a5127f1be39f4b9dceb356e057a036b507684164240" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="94bd46fd018bff2705fe0d409b276d519af0c292c66f30cbe2268e2a04c45142" name="binutils-devel" arch="i586">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="af9adceff8b6a7e217539d4bbd9e434425958c685f224b6a024d7d8a444e51ad" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="dfce10d49dc50a5977bda1d5df73fac878c7b0d2190ea9fcf58c87f1b577d975" name="binutils-devel" arch="i586">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="945975eb0f17bdaad872587b42ef79153e47581a980801cddcba616150ef2abd" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="dd622f31bc7d374ce2930b8662f75b72f6aed8e6e885d62f3180cce62559cc96" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="f6927e59e306cf348a6ea506bd0dc3930f094bad4aee193aa0aa1cb4df932159" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="3bc5689c8304a283819b8218a92f2b0e42d30b3210393634cbf38f58690fa309" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="ff7dfc80ba4f30f0abbf0445f9520332e3ad387b65390ee904508845d3dea3fc" name="binutils-gold" arch="i586">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="3d01be65a760c5ddce2f339aac761e39f61e61d00139d4d5ef26b8e3ccd4a2e4" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="b311ccdbb957a6dab3fa382f1e921d2fb54cfc026f94d08160a3e42c00475508" name="binutils-gold" arch="i586">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="b639793729c05aacd556b6612a11539d9e7557256891c3e8255166623ae2b0ba" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="525a8097002e4a8fd406b76257933c7900db0d2b3bf31152a5dc43084dbb9e13" name="binutils-gold" arch="i586">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="ce40b8bc2c064a88c78f08b95dbadb218664d10aa0c8652316cb13edbd1511bc" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="d78460e5c38be5db3828cc902b0d0232fd9fbb45529f098fa0a3a757ac9ba048" name="biosdevname" arch="i586">
  <version epoch="0" ver="0.7.3" rel="lp152.6.3.1"/>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="4e18a88a9c9d2e81e85d77c1c7676b20b5cda39d542fd015c76bca5bbbea97aa" name="biosdevname" arch="src">
  <version epoch="0" ver="0.7.3" rel="lp152.6.3.1"/>
  <changelog author="trenn@suse.de" date="1402660800">- For some reason /usr/lib/udev/rules.d/99-systemd.rules seem not to exist
  anymore. This is used to determine which udev rules.d to use.
  Use 95-udev-late.rules instead.
  Modified: udev-rule-path.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660801">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="c250fdbef5c80b275d6de35f535dc8c2145603952979e50c6f973b29c1857a67" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="lp152.6.3.1"/>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="ea76117bd3fee415135bfa3b9b7de762777b71d6a33faed0d62891a81a48c174" name="bison" arch="i586">
  <version epoch="0" ver="3.0.4" rel="lp152.4.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="eea42f7463799670b2f758afe6ff0d9429187527c737acf09a20635480021b10" name="bison" arch="src">
  <version epoch="0" ver="3.0.4" rel="lp152.4.3.1"/>
  <changelog author="coolo@novell.com" date="1265630400">- package yacc.1 too</changelog>
  <changelog author="rguenther@suse.de" date="1265803200">- Update to version 2.4.1.
- Apply fix for GCC 4.5 compliance.
- Apply fix for unsupported output file names.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1307448000">- Update to version 2.5
- Fixes GCC 4.6 warnings
- Changelist too long to fit here, see NEWS.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="aj@suse.de" date="1326110400">- Own /usr/share/aclocal</changelog>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 2.6.2:
  + Buffer overruns, complaints from Flex, and portability issues
    in the test suite have been fixed.
  + Changelist too long to fit here, see NEWS
- Source format is now .xz
- Remove bison-stdio.in.patch: seems upstreamed
- Add 'xz' to BuildRequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1352721600">- bison 2.6.5
  * Incorrect definitions of YY_, issued by yacc.c when no parser header is
  generated, are removed.
  * Fix compiler warnings in the generated parser (yacc.c, glr.c)
  * Warnings about uninitialized yylval and/or yylloc for push parsers with a
  pure interface have been fixed for GCC 4.0 up to 4.8, and Clang 2.9 to
  3.2.</changelog>
  <changelog author="adrian@suse.com" date="1360152000">- bison update to 2.7
  * Changes in the format of error messages
  * New format for error reports: carets
  * New value for %define variable: api.pure full
  * New %define variable: api.location.type (glr.cc, lalr1.cc, lalr1.java)
  * Exception safety (lalr1.cc)
  * Graph improvements in DOT and XSLT
  * %language is no longer an experimental feature.</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="9307c9700866db11e9f679cf6820a5cb7ea0a017737170549acfe88e6fc9687f" name="bison" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="lp152.4.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="fb553ed88944281f90d4a048dbccc028fc79194c470cdb7c4b85de1f3c372747" name="bison-32bit" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="lp152.4.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="47260059730aa9b92bb87372346ccd9bfbba407515e2f31c81bbbbd5296f993d" name="bison-lang" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="lp152.4.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="c9023fb9a24a7433b2d7160dd5a70c141d05475bdb40451eced786c87e780ce6" name="blktrace" arch="src">
  <version epoch="0" ver="1.1.0+git.20170126" rel="lp152.5.3.1"/>
  <changelog author="jblunck@suse.de" date="1234267200">- Added missing pdf documentation for btt and btreplay (bnc #465134).</changelog>
  <changelog author="jblunck@suse.de" date="1241092800">- Build with docs by default.</changelog>
  <changelog author="jblunck@suse.de" date="1243598400">- Update to version 1.0.1:
  * blkrawverify: warn and return error if no traces are found
  * blkiomon manpage and usage reference invalid "msg-queue-name" option
  * fix up btrace options &amp; manpage
  * more manpage fixups
  * fix max-pkts option inconsistencies
  * Converted to using the correct remap entries
  * blkiomon: fix unaligned accesses on ia64
  * fix off-by-one issues in blkiomon.h
  * fix include statement in stats.h
  * handle race to mkdir at startup
  * Fixed plug/unplug logic in btt
  * Working on fixing % time q plugged
  * fix trivial typo in manpage
  * Add NOTIFY to activity mask
  * Blktrace failed to lock reader threads on the cpu used by the
    corresponding writer. This resulted in stale data being consumed when
    blktrace accidently read at a position that was being written to at the
    same time. This issue surfaced as "bad trace magic" warnings emitted by
    blktrace tools.
  * Generate matplotlib plots for btt generated data
  * Update Jenkins hash to lookup3() variant
  * Fixed EAGAIN handling in blktrace.c
  * O_NOATIME isn't always present
  * btt: Added no remap option
  * btt general cleanup plus valgrind clean
  * btt: Missed fopen conversion to my_fopen
  * Code review updates
  * Reworked blktrace master/thread interface
  * Cleaned up devs that have no data
  * Moved starting of tracing after tracers are going
  * btt: fixed open in setup_ifile
  * Synchronized trace gathering
  * Invoke gethostbyname once, handle errors better
  * Added accept as a system call needing resource increases
  * Rewrote blktrace to have a single thread per CPU
  * Fix btt to handle large numbers of output files
  * Increased limits to allow for large system runs
  * A couple of min-counters weren't initialised correctly (thrput_r,
    thrput_w). We have got a perfectly working init function for this
    purpose. Removing partially duplicated code.
  * The git commit 11914a53d2ec2974a565311af327b8983d8c820d added
    __BLK_TA_ABORT to blktrace_api.h. A corresponding addition to the blktrace
    tools repository has been missing, breaking the API. Blkparse complained:
    "Bad fs action 40010011"
  * Added no messages option to blkparse.c
  * gcc 4.3.2 has started to warn about:
  * Added -P to create a data file w/ Q, D and C per line
  * Fixed 'M' displays on per-io output and added in I/O separator
  * Fixed segfault in aqd.c : need to check for NULL (not requested)
  * Added in -z to provide running waiting-for-issue latencies
  * Moved btrecord/btreplay to version 1.0.0</changelog>
  <changelog author="jblunck@suse.de" date="1245153600">- Fix typo in btt (bnc #511264).</changelog>
  <changelog author="jblunck@suse.de" date="1248177600">- Fix memory leak in btrecord (bnc #523444).</changelog>
  <changelog author="marek.belisko@open-nandra.com" date="1255608000">- Fix memory leak (bnc #546035)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1315051200">- Fix build with no-add-needed (missing -pthread)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1316606400">- disable parallel build again</changelog>
  <changelog author="jeffm@suse.de" date="1319716800">- Update to v1.0.3 (bnc#720300 and others).
  - Updated documentation
  - Fixed multiple output errors
  - Added FLUSH/FUA support
  - Misc bug fixes</changelog>
  <changelog author="werner@suse.de" date="1341921600">- Make it build with latest TeXLive 2012 with new package layout</changelog>
  <changelog author="werner@suse.de" date="1343044800">- Add some missed fonts</changelog>
  <changelog author="p.drouand@gmail.com" date="1356782400">- Update to 1.0.5 version:
  * Fix compiler warnings
  * avoid string overflows
- Some improvements like using macro instead of RPM variables</changelog>
  <changelog author="dsterba@suse.cz" date="1412337600">- Update to 1.1.0:
  - merge iowatcher</changelog>
  <changelog author="jeffm@suse.com" date="1461672000">- Add _service for automatic git syncing
  + exclude .git when generating tarball
  + enable automatic changelog updating</changelog>
  <changelog author="jeffm@suse.com" date="1461672001">- Update to version 1.1.0+git.20160425:
  * Refer to sda instead of hda in man pages
  * btreplay: Fix typo in scaling up the dynamic cpu set size.
  * include sys/types.h for dev_t definition
  * Fix warnings on newer gcc
  * Add the "-a discard" filter option to the blktrace.8 man page
  * blktrace: Use number of online CPUs
  * btreplay: fix memory corruption caused by CPU_ZERO_S
  * btreplay: fix sched_{set|get}affinity
  * btreplay: make Ctrl-C work
  * btreplay: remove timestamps</changelog>
  <changelog author="mpluskal@suse.com" date="1480075200">- Update to version 1.1.0+git.20160823:
  * Use maximum over all traces for queue depth
  * Process notify events outside of given interval
  * iowatcher: Use queue events if issue not available
  * btt: Replace overlapping IO
  * Zero sectors are strange
  * Don't prepend blktrace destination dir if we didn't run blktrace
  * Separate prefix in legend with space
  * Fixup graph name in help text
  * blktrace: remove -k from manpage synopsis
  * iowatcher: link with -lrt</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Update to version 1.1.0+git.20170126:
  * blktrace: Add support for sparse CPU numbers
  * blktrace: Reorganize creation of output file name
  * blktrace: Create empty output files for non-existent cpus</changelog>
  <changelog author="jeffm@suse.com" date="1528200000">- btt: make device/devno use PATH_MAX to avoid overflow
  (CVE-2018-10689 bsc#1091942).
  - Added btt-make-device-devno-use-path_max-to-avoid-overflow.patch</changelog>
  <changelog author="Jeff Mahoney &lt;jeffm@suse.com&gt;" date="1634817600">- Fix crash due to dropped first event while using pipe input (bsc#1191788).
  * blkparse: skip check_cpu_map with pipe input
  * blkparse: fix incorrectly sized memset in check_cpu_map
  * Added:
  - blkparse-skip-check_cpu_map-with-pipe-input.patch
  - blkparse-fix-incorrectly-sized-memset-in-check_cpu_m.patch</changelog>
</package>
<package pkgid="1d56791f6acc0e3d9b62f0814b028b86c263d3281a595183c415eaf90537f004" name="blktrace" arch="x86_64">
  <version epoch="0" ver="1.1.0+git.20170126" rel="lp152.5.3.1"/>
  <changelog author="werner@suse.de" date="1341921600">- Make it build with latest TeXLive 2012 with new package layout</changelog>
  <changelog author="werner@suse.de" date="1343044800">- Add some missed fonts</changelog>
  <changelog author="p.drouand@gmail.com" date="1356782400">- Update to 1.0.5 version:
  * Fix compiler warnings
  * avoid string overflows
- Some improvements like using macro instead of RPM variables</changelog>
  <changelog author="dsterba@suse.cz" date="1412337600">- Update to 1.1.0:
  - merge iowatcher</changelog>
  <changelog author="jeffm@suse.com" date="1461672000">- Add _service for automatic git syncing
  + exclude .git when generating tarball
  + enable automatic changelog updating</changelog>
  <changelog author="jeffm@suse.com" date="1461672001">- Update to version 1.1.0+git.20160425:
  * Refer to sda instead of hda in man pages
  * btreplay: Fix typo in scaling up the dynamic cpu set size.
  * include sys/types.h for dev_t definition
  * Fix warnings on newer gcc
  * Add the "-a discard" filter option to the blktrace.8 man page
  * blktrace: Use number of online CPUs
  * btreplay: fix memory corruption caused by CPU_ZERO_S
  * btreplay: fix sched_{set|get}affinity
  * btreplay: make Ctrl-C work
  * btreplay: remove timestamps</changelog>
  <changelog author="mpluskal@suse.com" date="1480075200">- Update to version 1.1.0+git.20160823:
  * Use maximum over all traces for queue depth
  * Process notify events outside of given interval
  * iowatcher: Use queue events if issue not available
  * btt: Replace overlapping IO
  * Zero sectors are strange
  * Don't prepend blktrace destination dir if we didn't run blktrace
  * Separate prefix in legend with space
  * Fixup graph name in help text
  * blktrace: remove -k from manpage synopsis
  * iowatcher: link with -lrt</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Update to version 1.1.0+git.20170126:
  * blktrace: Add support for sparse CPU numbers
  * blktrace: Reorganize creation of output file name
  * blktrace: Create empty output files for non-existent cpus</changelog>
  <changelog author="jeffm@suse.com" date="1528200000">- btt: make device/devno use PATH_MAX to avoid overflow
  (CVE-2018-10689 bsc#1091942).
  - Added btt-make-device-devno-use-path_max-to-avoid-overflow.patch</changelog>
  <changelog author="Jeff Mahoney &lt;jeffm@suse.com&gt;" date="1634817600">- Fix crash due to dropped first event while using pipe input (bsc#1191788).
  * blkparse: skip check_cpu_map with pipe input
  * blkparse: fix incorrectly sized memset in check_cpu_map
  * Added:
  - blkparse-skip-check_cpu_map-with-pipe-input.patch
  - blkparse-fix-incorrectly-sized-memset-in-check_cpu_m.patch</changelog>
</package>
<package pkgid="65c6b814f3ec05b5546c52a20aa858d7673e14cc2115744289a3fd5b56af33ab" name="blosc" arch="src">
  <version epoch="0" ver="1.20.1" rel="lp152.4.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1432036800">- Update to version 1.6.1:
  * Fixed a subtle, but long-standing bug in the blosclz codec that
    could potentially overwrite an area beyond the output buffer.
  * Support for runtime detection of AVX2 and SSE2 SIMD
    instructions, allowing running AVX2 capable c-blosc libraries
    to run on machines with no AVX2 available (will use SSE2
    instead).
  * A new blocksize computation allows for better compression
    ratios for larger typesizes (&gt; 8 bytes), without not penalizing
    the speed too much (at least on modern CPUs).
- changes from version 1.6.0:
  * Support for AVX2 is here!  The benchmarks with a 4-core Intel
    Haswell machine tell that both compression and decompression are
    accelerated around a 10%, reaching peaks of 9.6 GB/s during
    compression and 26 GB/s during decompression (memcpy() speed for
    this machine is 7.5 GB/s for writes and 11.7 GB/s for reads).
    Many thanks to @littlezhou for this nice work.
  * Support for HPET (high precision timers) for the `bench` program.
    This is particularly important for microbenchmarks like bench is
    doing; since they take so little time to run, the granularity of a
    less-accurate timer may account for a significant portion of the
    runtime of the benchmark itself, skewing the results.  Thanks to
    Jack Pappas.
- changes from version 1.5.4:
  * Updated to LZ4 1.6.0 (r128).
  * Fix resource leak in t_blosc.  Jack Pappas.
  * Better checks during testing.  Jack Pappas.
  * Dynamically loadable HDF5 filter plugin. Kiyo Masui.
- changes from version 1.5.3:
  * Use llabs function (where available) instead of abs to avoid
    truncating the result.  Jack Pappas.
  * Use C11 aligned_alloc when it's available.  Jack Pappas.
  * Use the built-in stdint.h with MSVC when available.  Jack Pappas.
  * Only define the __SSE2__ symbol when compiling with MS Visual C++
    and targeting x64 or x86 with the correct /arch flag set. This
    avoids re-defining the symbol which makes other compilers issue
    warnings.  Jack Pappas.
  * Reinitializing Blosc during a call to set_nthreads() so as to fix
    problems with contexts.  Francesc Alted.
- changes from version 1.5.2:
  * Using blosc_compress_ctx() / blosc_decompress_ctx() inside the
    HDF5 compressor for allowing operation in multiprocess scenarios.
    See: https://github.com/PyTables/PyTables/issues/412
    The drawback of this quick fix is that the Blosc filter will be only
    able to use a single thread until another solution can be devised.
- changes from version 1.5.1:
  * Updated to LZ4 1.5.0.  Closes #74.
  * Added the 'const' qualifier to non SSE2 shuffle functions. Closes
    [#75].
  * Explicitly call blosc_init() in HDF5 blosc_filter.c, fixing a
    segfault.
  * Quite a few improvements in cmake files for HDF5 support.  Thanks
    to Dana Robinson (The HDF Group).
  * Variable 'class' caused problems compiling the HDF5 filter with
    g++.  Thanks to Laurent Chapon.
  * Small improvements on docstrings of c-blosc main functions.
- changes from version  1.5.0:
  * Added new calls for allowing Blosc to be used *simultaneously*
    (i.e. lock free) from multi-threaded environments.  The new
    functions are:
  - blosc_compress_ctx(...)
  - blosc_decompress_ctx(...)
    See the new docstrings in blosc.h for how to use them.  The previous
    API should be completely unaffected.  Thanks to Christopher Speller.
  * Optimized copies during BloscLZ decompression.  This can make
    BloscLZ to decompress up to 1.5x faster in some situations.
  * LZ4 and LZ4HC compressors updated to version 1.3.1.
  * Added an examples directory on how to link apps with Blosc.
  * stdlib.h moved from blosc.c to blosc.h as suggested by Rob Lathm.
  * Fix a warning for {snappy,lz4}-free compilation.  Thanks to Andrew
    Schaaf.
  * Several improvements for CMakeLists.txt (cmake).
  * Fixing C99 compatibility warnings.  Thanks to Christopher Speller.
- specfile:
  * update copyright year</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1438948800">- Add two patches dragged from fedora to support non-intel archi
  0001-Fix-cmake-system-check.patch
  0002-Fix-compilation-on-unknown-archs.patch</changelog>
  <changelog author="mkravec@suse.com" date="1455537600">- Replaced long syntax with macros %cmake, %cmake_install, %ctest</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to 1.7.1
  * Fixed a bug preventing bitshuffle to work correctly on getitem().
    Now, everything with bitshuffle seems to work correctly.
  * Fixed the thread initialization for blosc_decompress_ctx().  Issue
    [#158].  Thanks to Chris Webers.
  * Fixed a bug in the blocksize computation introduced in 1.7.0.  This
    could have been creating segfaults.
  * Allow bitshuffle to run on 1-byte typesizes.
  * New parametrization of the blocksize to be independent of the
    typesize.  This allows a smoother speed throughout all typesizes.
  * lz4 and lz4hc codecs upgraded to 1.7.2 (from 1.7.0).
  * When calling set_nthreads() but not actually changing the number of
    threads in the internal pool does not teardown and setup it anymore.
    PR #153.  Thanks to Santi Villalba.
- Update to 1.7.0
  * Added a new 'bitshuffle' filter so that the shuffle takes place at a
    bit level and not just at a byte one, which is what it does the
    previous 'shuffle' filter.
  * New acceleration mode for LZ4 and BloscLZ codecs that enters in
    operation with complevel &lt; 9.  This allows for an important boost in
    speed with minimal compression ratio loss.  Francesc Alted.
  * LZ4 codec updated to 1.7.0 (r130).
  * PREFER_EXTERNAL_COMPLIBS cmake option has been removed and replaced
    by the more fine grained PREFER_EXTERNAL_LZ4, PREFER_EXTERNAL_SNAPPY
    and PREFER_EXTERNAL_ZLIB.  In order to allow the use of the new API
    introduced in LZ4 1.7.0, PREFER_EXTERNAL_LZ4 has been set to OFF by
    default, whereas PREFER_EXTERNAL_SNAPPY and PREFER_EXTERNAL_ZLIB
    continues to be ON.
  * Implemented SSE2 shuffle support for buffers containing a number of
    elements which is not a multiple of (typesize * vectorsize).  Jack
    Pappas.
  * Added SSE2 shuffle/unshuffle routines for types larger than 16
    bytes.  Jack Pappas.
  * 'test_basic' suite has been split in components for a much better
    granularity on what's a possibly failing test.  Also, lots of new
    tests have been added.  Jack Pappas.
  * Fixed compilation on non-Intel archs (tested on ARM).  Zbyszek
    Szmek.
  * Modifyied cmake files in order to inform that AVX2 on Visual Studio
    is supported only in 2013 update 2 and higher.
  * Added a replacement for stdbool.h for Visual Studio &lt; 2013.
  * blosclz codec adds Win64/Intel as a platform supporting unaligned
    addressing.  That leads to a speed-up of 2.2x in decompression.
  * New blosc_get_version_string() function for retrieving the version
    of the c-blosc library.  Useful when linking with dynamic libraries
    and one want to know its version.
  * New example (win-dynamic-linking.c) that shows how to link a Blosc
    DLL dynamically in run-time (Windows only).
  * The `context.threads_started` is initialized now when decompressing.
    This could cause crashes in case you decompressed before compressing
    (e.g. directly deserializing blosc buffers).  @atchouprakov.
  * The HDF5 filter has been removed from c-blosc and moved into its own
    repo at: https://github.com/Blosc/hdf5
  * The MS Visual Studio 2008 has been tested with c-blosc for ensuring
    compatibility with extensions for Python 2.6 and up.
- Remove update-included 0001-Fix-cmake-system-check.patch and
  0002-Fix-compilation-on-unknown-archs.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467892800">- Update to 1.9.2
  * Check whether Blosc is actually initialized before blosc_init(),
    blosc_destroy() and blosc_free_resources().  This makes the library
    more resistant to different initialization cycles
    (e.g. https://github.com/stevengj/Blosc.jl/issues/19).
- Update to 1.9.1
  * The internal copies when clevel=0 are made now via memcpy().  At the
    beginning of C-Blosc development, benchmarks where saying that the
    internal, multi-threaded copies inside C-Blosc were faster than
    memcpy(), but 6 years later, memcpy() made greats strides in terms
    of efficiency.  With this, you should expect an slight speed
    advantage (10% ~ 20%) when C-Blosc is used as a replacement of
    memcpy() (which should not be the most common scenario out there).
  * Added a new DEACTIVATE_AVX2 cmake option to explicitly disable AVX2
    at build-time.  Thanks to James Bird.
  * The ``make -jN`` for parallel compilation should work now.  Thanks
    to James Bird.
- Update to 1.9.0
  * New blosc_get_nthreads() function to get the number of threads that
    will be used internally during compression/decompression (set by
    already existing blosc_set_nthreads()).
  * New blosc_get_compressor() function to get the compressor that will
    be used internally during compression (set by already existing
    blosc_set_compressor()).
  * New blosc_get_blocksize() function to get the internal blocksize to
    be used during compression (set by already existing
    blosc_set_blocksize()).
  * Now, when the BLOSC_NOLOCK environment variable is set (to any
    value), the calls to blosc_compress() and blosc_decompress() will
    call blosc_compress_ctx() and blosc_decompress_ctx() under the hood
    so as to avoid the internal locks.  See blosc.h for details.  This
    allows multi-threaded apps calling the non _ctx() functions to avoid
    the internal locks in C-Blosc.  For the not multi-threaded app
    though, it is in general slower to call the _ctx() functions so the
    use of BLOSC_NOLOCK is discouraged.
  * In the same vein, from now on, when the BLOSC_NTHREADS environment
    variable is set to an integer, every call to blosc_compress() and
    blosc_decompress() will call blosc_set_nthreads(BLOSC_NTHREADS)
    before the actuall compression/decompression process.  See blosc.h
    for details.
  * Finally, if BLOSC_CLEVEL, BLOSC_SHUFFLE, BLOSC_TYPESIZE and/or
    BLOSC_COMPRESSOR variables are set in the environment, these will be
    also honored before calling blosc_compress().
  * Calling blosc_init() before any other Blosc call, although
    recommended, is not necessary anymore.  The idea is that you can use
    just the basic blosc_compress() and blosc_decompress() and control
    other parameters (nthreads, compressor, blocksize) by using
    environment variables (see above).
- Update to 1.8.1
  * Disable the use of __builtin_cpu_supports() for GCC 5.3.1
    compatibility.
- Update to 1.8.0
  * The code is (again) compatible with VS2008 and VS2010.  This is
    important for compatibility with Python 2.6/2.7/3.3/3.4.
  * Introduced a new global lock during blosc_decompress() operation.
    As the blosc_compress() was already guarded by a global lock, this
    means that the compression/decompression is again thread safe.
    However, when using C-Blosc from multi-threaded environments, it is
    important to keep using the *_ctx() functions for performance
    reasons.  NOTE: _ctx() functions will be replaced by more powerful
    ones in C-Blosc 2.0.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1474027200">- Update to 1.11.1
  - Fixed a bug introduced in 1.11.0 and discovered by pandas test suite. This
    basically prevented to decompress buffers compressed with previous versions of
    C-Blosc. See: https://github.com/Blosc/python-blosc/issues/115
- Update to 1.11.0
  - Internal Zstd codec upgraded to 1.0.0.
  - New block size computation inherited from C-Blosc2. Benchmarks are saying that
    this benefits mainly to LZ4, LZ4HC, Zlib and Zstd codecs, both in speed and in
    compression ratios (although YMMV for your case).
  - Added the @rpath flag in Mac OSX for shared libraries.  Fixes #175.
  - Added a fix for VS2008
  - License changed from MIT to 3-clause BSD style.
- Update to 1.10.2
  - Force the use of --std=gnu99 when using gcc.  Fixes #174.
- Update to 1.10.1
  - Removed an inconsistent check for C11 (__STDC_VERSION__ &gt;= 201112L and
    _ISOC11_SOURCE) as this seem to pose problems on compilers doing different
    things in this check (e.g. clang). See
    https://github.com/Blosc/bloscpack/issues/50.
- Update to 1.10.0
  - Initial support for Zstandard (0.7.4). Zstandard (or Zstd for short) is a new
    compression library that allows better compression than Zlib, but that works
    typically faster (and some times much faster), making of it a good match for
    Blosc.
- Update to 1.9.3
  - Reverted a mistake introduced in 1.7.1.  At that time, bit-shuffling
    was enabled for typesize == 1 (i.e. strings), but the change also
    included byte-shuffling accidentally.  This only affected performance,
    but in a quite bad way (a copy was needed).  This has been fixed and
    byte-shuffling is not active when typesize == 1 anymore.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 1.11.2
  - Enabled use as a CMake subproject, exporting shared &amp; static library targets
    for super-projects to use. See PRs #178, #179 and #180.  Thanks to Kevin
    Murray.
  - Internal LZ4 codec updated to 1.7.5.
  - Internal Zstd codec updated to 1.1.2.</changelog>
  <changelog author="mpluskal@suse.com" date="1514116800">- Update to version 1.12.1:
  * Backported BloscLZ parameters that were fine-tuned for
    C-Blosc2.
- Packaging changes:
  * Run spec-clener
  * Use shared libraries with compression codecs instead of bundled
    ones
  * Use more of cmake macros
  * Build in parallel</changelog>
  <changelog author="jengelh@inai.de" date="1514462400">- Fix RPM group. Compact descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1517918400">- Update to version 1.13.5:
  * Fixed a buffer overrun that happens when compressing small
    buffers and len(destination_buffer) &lt; (len(source_buffer) +
    BLOSC_MAX_OVERHEAD). Reported by Ivan Smirnov.
  * Tests work now when external compressors are located in
    non-system locations. Fixes #210. Thanks to Leif Walsh.
  * Fixed a bug uncovered by the python-blosc test suite: when a
    buffer is to be copied, then we should reserve space for the
    header, not block pointers.
  * Serious optimization of memory copy functions (see new
    blosc/fastcopy.c). This benefits the speed of all the codecs,
    but specially the BloscLZ one. As a result of the above, the
    BloscLZ codec received a new adjustment of knobs so that you
    should expect better compression ratios with it too.</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Update to version 1.14.3:
  * Fixed a bug that caused C-Blosc to crash on platforms
    requiring strict alignment.
  * Fixed a piece of code that was not C89 compliant.</changelog>
  <changelog author="mpluskal@suse.com" date="1534852800">- Update to version 1.14.4:
  * Added a new DEACTIVATE_SSE2 option for cmake that is useful for
    disabling SSE2 when doing cross-compilation (see #236).
  * New check for detecting output buffers smaller than
    BLOSC_MAX_OVERHEAD.
  * The complib and version parameters for blosc_get_complib_info()
    can be safely set to NULL now. This allows to call this
    function even if the user is not interested in these parameters
    (so no need to reserve memory for them).
  * In some situations that a supposedly blosc chunk is passed to
    blosc_decompress(), one might end with an Arithmetic exception.
    This is probably due to the chunk not being an actual blosc
    chunk, and divisions by zero might occur. A protection has been
    added for this.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559649600">- Update to version 1.16.3:
  * Fix for building for clang with -march=haswell. See PR #262.
  * Fix all the known warnings for GCC/Clang. Still some work to do for MSVC in this front.
  * Due to some problems with several CI systems, the check for library symbols are deactivated now by default. If you want to enforce this check, use: cmake .. -DDEACTIVATE_SYMBOLS_CHECK=ON to re-activate it.
  * Correct the check for the compressed size when the buffer is memcpyed. This was a regression introduced in 1.16.0. Fixes #261.
  * Fixed a regression in 1.16.0 that prevented to compress empty buffers (see #260).
  * Now the functions that execute Blosc decompressions are safe by default for untrusted/possibly corrupted inputs.
  * The previous functions (with less safety) checks are still available with a '_unsafe' suffix. The complete list is:
  * Also, a new API function named blosc_cbuffer_validate(), for validating Blosc compressed data, has been added.
  * For details, see PR #258. Thanks to Jeremy Maitin-Shepard.
  * Fixed a bug in blosc_compress() that could lead to thread deadlock under some situations. See #251. Thanks to @wenjuno for the report and the fix.
  * Fix data race in shuffle.c host_implementation initialization. Fixes #253. Thanks to Jeremy Maitin-Shepard.
  * Add workaround for Visual Studio 2008's lack of a stdint.h file to blosclz.c.
  * Replaced //-comments with /**/-comments and other improvements for compatibility with quite old gcc compilers. See PR #243. Thanks to Andreas Martin.
  * Empty buffers can be compressed again (this was unadvertedly prevented while fixing #234). See #247. Thanks to Valentin Haenel.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574164800">- %make_jobs is depricated replaced by %cmake_build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1580990400">- Update to version 1.17.1:
  * BloscLZ codec updated to 2.0.0.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585656000">- Update to version 1.18.1:
  * Fixed the copy of the leftovers of a chunk when its size is not
    a multiple of the typesize.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1592913600">- Update to version 1.19.0:
  * The length of automatic blocksizes for fast codecs (lz4, blosclz) has been incremented quite a bit (up to 256 KB) for better compression ratios.
  * The performance in modern CPUs (with at least 256 KB in L2 cache) should be better too (for older CPUs the performance should stay roughly the same).
  * For small buffers that cannot be compressed (typically &lt; 128 bytes), blosc_compress() returns now a 0 (cannot compress) instead of a negative number (internal error). See #294.
  * blosclz codec updated to 2.1.0. Expect better compression ratios and performance in a wider variety of scenarios.
  * blosc_decompress_unsafe(), blosc_decompress_ctx_unsafe() and blosc_getitem_unsafe() have been removed because they are dangerous and after latest improvements, they should not be used in production.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1597147200">- Enable support for SNAPPY compression.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Stop assuming that %{_libexecdir} == /usr/lib (boo#1174075).</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 1.20.1 boo#1179914 CVE-2020-29367:
  * More saftey checks have been implemented so that potential flaws discovered by new fuzzers in OSS-Fuzzer are fixed now
  * BloscLZ updated to 2.3.0. Expect better compression ratios for faster codecs. For details, see our new blog post: https://blosc.org/posts/beast-release/
  * Fixed the _xgetbv() collision. Thanks to Micha? Górny (@mgorny).</changelog>
</package>
<package pkgid="e85e3a18626c4b0a4060c1b0f8237e82cfefeeb6896bc58206e8fd306d7936bc" name="blosc-devel" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="lp152.4.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1432036800">- Update to version 1.6.1:
  * Fixed a subtle, but long-standing bug in the blosclz codec that
    could potentially overwrite an area beyond the output buffer.
  * Support for runtime detection of AVX2 and SSE2 SIMD
    instructions, allowing running AVX2 capable c-blosc libraries
    to run on machines with no AVX2 available (will use SSE2
    instead).
  * A new blocksize computation allows for better compression
    ratios for larger typesizes (&gt; 8 bytes), without not penalizing
    the speed too much (at least on modern CPUs).
- changes from version 1.6.0:
  * Support for AVX2 is here!  The benchmarks with a 4-core Intel
    Haswell machine tell that both compression and decompression are
    accelerated around a 10%, reaching peaks of 9.6 GB/s during
    compression and 26 GB/s during decompression (memcpy() speed for
    this machine is 7.5 GB/s for writes and 11.7 GB/s for reads).
    Many thanks to @littlezhou for this nice work.
  * Support for HPET (high precision timers) for the `bench` program.
    This is particularly important for microbenchmarks like bench is
    doing; since they take so little time to run, the granularity of a
    less-accurate timer may account for a significant portion of the
    runtime of the benchmark itself, skewing the results.  Thanks to
    Jack Pappas.
- changes from version 1.5.4:
  * Updated to LZ4 1.6.0 (r128).
  * Fix resource leak in t_blosc.  Jack Pappas.
  * Better checks during testing.  Jack Pappas.
  * Dynamically loadable HDF5 filter plugin. Kiyo Masui.
- changes from version 1.5.3:
  * Use llabs function (where available) instead of abs to avoid
    truncating the result.  Jack Pappas.
  * Use C11 aligned_alloc when it's available.  Jack Pappas.
  * Use the built-in stdint.h with MSVC when available.  Jack Pappas.
  * Only define the __SSE2__ symbol when compiling with MS Visual C++
    and targeting x64 or x86 with the correct /arch flag set. This
    avoids re-defining the symbol which makes other compilers issue
    warnings.  Jack Pappas.
  * Reinitializing Blosc during a call to set_nthreads() so as to fix
    problems with contexts.  Francesc Alted.
- changes from version 1.5.2:
  * Using blosc_compress_ctx() / blosc_decompress_ctx() inside the
    HDF5 compressor for allowing operation in multiprocess scenarios.
    See: https://github.com/PyTables/PyTables/issues/412
    The drawback of this quick fix is that the Blosc filter will be only
    able to use a single thread until another solution can be devised.
- changes from version 1.5.1:
  * Updated to LZ4 1.5.0.  Closes #74.
  * Added the 'const' qualifier to non SSE2 shuffle functions. Closes
    [#75].
  * Explicitly call blosc_init() in HDF5 blosc_filter.c, fixing a
    segfault.
  * Quite a few improvements in cmake files for HDF5 support.  Thanks
    to Dana Robinson (The HDF Group).
  * Variable 'class' caused problems compiling the HDF5 filter with
    g++.  Thanks to Laurent Chapon.
  * Small improvements on docstrings of c-blosc main functions.
- changes from version  1.5.0:
  * Added new calls for allowing Blosc to be used *simultaneously*
    (i.e. lock free) from multi-threaded environments.  The new
    functions are:
  - blosc_compress_ctx(...)
  - blosc_decompress_ctx(...)
    See the new docstrings in blosc.h for how to use them.  The previous
    API should be completely unaffected.  Thanks to Christopher Speller.
  * Optimized copies during BloscLZ decompression.  This can make
    BloscLZ to decompress up to 1.5x faster in some situations.
  * LZ4 and LZ4HC compressors updated to version 1.3.1.
  * Added an examples directory on how to link apps with Blosc.
  * stdlib.h moved from blosc.c to blosc.h as suggested by Rob Lathm.
  * Fix a warning for {snappy,lz4}-free compilation.  Thanks to Andrew
    Schaaf.
  * Several improvements for CMakeLists.txt (cmake).
  * Fixing C99 compatibility warnings.  Thanks to Christopher Speller.
- specfile:
  * update copyright year</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1438948800">- Add two patches dragged from fedora to support non-intel archi
  0001-Fix-cmake-system-check.patch
  0002-Fix-compilation-on-unknown-archs.patch</changelog>
  <changelog author="mkravec@suse.com" date="1455537600">- Replaced long syntax with macros %cmake, %cmake_install, %ctest</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to 1.7.1
  * Fixed a bug preventing bitshuffle to work correctly on getitem().
    Now, everything with bitshuffle seems to work correctly.
  * Fixed the thread initialization for blosc_decompress_ctx().  Issue
    [#158].  Thanks to Chris Webers.
  * Fixed a bug in the blocksize computation introduced in 1.7.0.  This
    could have been creating segfaults.
  * Allow bitshuffle to run on 1-byte typesizes.
  * New parametrization of the blocksize to be independent of the
    typesize.  This allows a smoother speed throughout all typesizes.
  * lz4 and lz4hc codecs upgraded to 1.7.2 (from 1.7.0).
  * When calling set_nthreads() but not actually changing the number of
    threads in the internal pool does not teardown and setup it anymore.
    PR #153.  Thanks to Santi Villalba.
- Update to 1.7.0
  * Added a new 'bitshuffle' filter so that the shuffle takes place at a
    bit level and not just at a byte one, which is what it does the
    previous 'shuffle' filter.
  * New acceleration mode for LZ4 and BloscLZ codecs that enters in
    operation with complevel &lt; 9.  This allows for an important boost in
    speed with minimal compression ratio loss.  Francesc Alted.
  * LZ4 codec updated to 1.7.0 (r130).
  * PREFER_EXTERNAL_COMPLIBS cmake option has been removed and replaced
    by the more fine grained PREFER_EXTERNAL_LZ4, PREFER_EXTERNAL_SNAPPY
    and PREFER_EXTERNAL_ZLIB.  In order to allow the use of the new API
    introduced in LZ4 1.7.0, PREFER_EXTERNAL_LZ4 has been set to OFF by
    default, whereas PREFER_EXTERNAL_SNAPPY and PREFER_EXTERNAL_ZLIB
    continues to be ON.
  * Implemented SSE2 shuffle support for buffers containing a number of
    elements which is not a multiple of (typesize * vectorsize).  Jack
    Pappas.
  * Added SSE2 shuffle/unshuffle routines for types larger than 16
    bytes.  Jack Pappas.
  * 'test_basic' suite has been split in components for a much better
    granularity on what's a possibly failing test.  Also, lots of new
    tests have been added.  Jack Pappas.
  * Fixed compilation on non-Intel archs (tested on ARM).  Zbyszek
    Szmek.
  * Modifyied cmake files in order to inform that AVX2 on Visual Studio
    is supported only in 2013 update 2 and higher.
  * Added a replacement for stdbool.h for Visual Studio &lt; 2013.
  * blosclz codec adds Win64/Intel as a platform supporting unaligned
    addressing.  That leads to a speed-up of 2.2x in decompression.
  * New blosc_get_version_string() function for retrieving the version
    of the c-blosc library.  Useful when linking with dynamic libraries
    and one want to know its version.
  * New example (win-dynamic-linking.c) that shows how to link a Blosc
    DLL dynamically in run-time (Windows only).
  * The `context.threads_started` is initialized now when decompressing.
    This could cause crashes in case you decompressed before compressing
    (e.g. directly deserializing blosc buffers).  @atchouprakov.
  * The HDF5 filter has been removed from c-blosc and moved into its own
    repo at: https://github.com/Blosc/hdf5
  * The MS Visual Studio 2008 has been tested with c-blosc for ensuring
    compatibility with extensions for Python 2.6 and up.
- Remove update-included 0001-Fix-cmake-system-check.patch and
  0002-Fix-compilation-on-unknown-archs.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467892800">- Update to 1.9.2
  * Check whether Blosc is actually initialized before blosc_init(),
    blosc_destroy() and blosc_free_resources().  This makes the library
    more resistant to different initialization cycles
    (e.g. https://github.com/stevengj/Blosc.jl/issues/19).
- Update to 1.9.1
  * The internal copies when clevel=0 are made now via memcpy().  At the
    beginning of C-Blosc development, benchmarks where saying that the
    internal, multi-threaded copies inside C-Blosc were faster than
    memcpy(), but 6 years later, memcpy() made greats strides in terms
    of efficiency.  With this, you should expect an slight speed
    advantage (10% ~ 20%) when C-Blosc is used as a replacement of
    memcpy() (which should not be the most common scenario out there).
  * Added a new DEACTIVATE_AVX2 cmake option to explicitly disable AVX2
    at build-time.  Thanks to James Bird.
  * The ``make -jN`` for parallel compilation should work now.  Thanks
    to James Bird.
- Update to 1.9.0
  * New blosc_get_nthreads() function to get the number of threads that
    will be used internally during compression/decompression (set by
    already existing blosc_set_nthreads()).
  * New blosc_get_compressor() function to get the compressor that will
    be used internally during compression (set by already existing
    blosc_set_compressor()).
  * New blosc_get_blocksize() function to get the internal blocksize to
    be used during compression (set by already existing
    blosc_set_blocksize()).
  * Now, when the BLOSC_NOLOCK environment variable is set (to any
    value), the calls to blosc_compress() and blosc_decompress() will
    call blosc_compress_ctx() and blosc_decompress_ctx() under the hood
    so as to avoid the internal locks.  See blosc.h for details.  This
    allows multi-threaded apps calling the non _ctx() functions to avoid
    the internal locks in C-Blosc.  For the not multi-threaded app
    though, it is in general slower to call the _ctx() functions so the
    use of BLOSC_NOLOCK is discouraged.
  * In the same vein, from now on, when the BLOSC_NTHREADS environment
    variable is set to an integer, every call to blosc_compress() and
    blosc_decompress() will call blosc_set_nthreads(BLOSC_NTHREADS)
    before the actuall compression/decompression process.  See blosc.h
    for details.
  * Finally, if BLOSC_CLEVEL, BLOSC_SHUFFLE, BLOSC_TYPESIZE and/or
    BLOSC_COMPRESSOR variables are set in the environment, these will be
    also honored before calling blosc_compress().
  * Calling blosc_init() before any other Blosc call, although
    recommended, is not necessary anymore.  The idea is that you can use
    just the basic blosc_compress() and blosc_decompress() and control
    other parameters (nthreads, compressor, blocksize) by using
    environment variables (see above).
- Update to 1.8.1
  * Disable the use of __builtin_cpu_supports() for GCC 5.3.1
    compatibility.
- Update to 1.8.0
  * The code is (again) compatible with VS2008 and VS2010.  This is
    important for compatibility with Python 2.6/2.7/3.3/3.4.
  * Introduced a new global lock during blosc_decompress() operation.
    As the blosc_compress() was already guarded by a global lock, this
    means that the compression/decompression is again thread safe.
    However, when using C-Blosc from multi-threaded environments, it is
    important to keep using the *_ctx() functions for performance
    reasons.  NOTE: _ctx() functions will be replaced by more powerful
    ones in C-Blosc 2.0.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1474027200">- Update to 1.11.1
  - Fixed a bug introduced in 1.11.0 and discovered by pandas test suite. This
    basically prevented to decompress buffers compressed with previous versions of
    C-Blosc. See: https://github.com/Blosc/python-blosc/issues/115
- Update to 1.11.0
  - Internal Zstd codec upgraded to 1.0.0.
  - New block size computation inherited from C-Blosc2. Benchmarks are saying that
    this benefits mainly to LZ4, LZ4HC, Zlib and Zstd codecs, both in speed and in
    compression ratios (although YMMV for your case).
  - Added the @rpath flag in Mac OSX for shared libraries.  Fixes #175.
  - Added a fix for VS2008
  - License changed from MIT to 3-clause BSD style.
- Update to 1.10.2
  - Force the use of --std=gnu99 when using gcc.  Fixes #174.
- Update to 1.10.1
  - Removed an inconsistent check for C11 (__STDC_VERSION__ &gt;= 201112L and
    _ISOC11_SOURCE) as this seem to pose problems on compilers doing different
    things in this check (e.g. clang). See
    https://github.com/Blosc/bloscpack/issues/50.
- Update to 1.10.0
  - Initial support for Zstandard (0.7.4). Zstandard (or Zstd for short) is a new
    compression library that allows better compression than Zlib, but that works
    typically faster (and some times much faster), making of it a good match for
    Blosc.
- Update to 1.9.3
  - Reverted a mistake introduced in 1.7.1.  At that time, bit-shuffling
    was enabled for typesize == 1 (i.e. strings), but the change also
    included byte-shuffling accidentally.  This only affected performance,
    but in a quite bad way (a copy was needed).  This has been fixed and
    byte-shuffling is not active when typesize == 1 anymore.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 1.11.2
  - Enabled use as a CMake subproject, exporting shared &amp; static library targets
    for super-projects to use. See PRs #178, #179 and #180.  Thanks to Kevin
    Murray.
  - Internal LZ4 codec updated to 1.7.5.
  - Internal Zstd codec updated to 1.1.2.</changelog>
  <changelog author="mpluskal@suse.com" date="1514116800">- Update to version 1.12.1:
  * Backported BloscLZ parameters that were fine-tuned for
    C-Blosc2.
- Packaging changes:
  * Run spec-clener
  * Use shared libraries with compression codecs instead of bundled
    ones
  * Use more of cmake macros
  * Build in parallel</changelog>
  <changelog author="jengelh@inai.de" date="1514462400">- Fix RPM group. Compact descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1517918400">- Update to version 1.13.5:
  * Fixed a buffer overrun that happens when compressing small
    buffers and len(destination_buffer) &lt; (len(source_buffer) +
    BLOSC_MAX_OVERHEAD). Reported by Ivan Smirnov.
  * Tests work now when external compressors are located in
    non-system locations. Fixes #210. Thanks to Leif Walsh.
  * Fixed a bug uncovered by the python-blosc test suite: when a
    buffer is to be copied, then we should reserve space for the
    header, not block pointers.
  * Serious optimization of memory copy functions (see new
    blosc/fastcopy.c). This benefits the speed of all the codecs,
    but specially the BloscLZ one. As a result of the above, the
    BloscLZ codec received a new adjustment of knobs so that you
    should expect better compression ratios with it too.</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Update to version 1.14.3:
  * Fixed a bug that caused C-Blosc to crash on platforms
    requiring strict alignment.
  * Fixed a piece of code that was not C89 compliant.</changelog>
  <changelog author="mpluskal@suse.com" date="1534852800">- Update to version 1.14.4:
  * Added a new DEACTIVATE_SSE2 option for cmake that is useful for
    disabling SSE2 when doing cross-compilation (see #236).
  * New check for detecting output buffers smaller than
    BLOSC_MAX_OVERHEAD.
  * The complib and version parameters for blosc_get_complib_info()
    can be safely set to NULL now. This allows to call this
    function even if the user is not interested in these parameters
    (so no need to reserve memory for them).
  * In some situations that a supposedly blosc chunk is passed to
    blosc_decompress(), one might end with an Arithmetic exception.
    This is probably due to the chunk not being an actual blosc
    chunk, and divisions by zero might occur. A protection has been
    added for this.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559649600">- Update to version 1.16.3:
  * Fix for building for clang with -march=haswell. See PR #262.
  * Fix all the known warnings for GCC/Clang. Still some work to do for MSVC in this front.
  * Due to some problems with several CI systems, the check for library symbols are deactivated now by default. If you want to enforce this check, use: cmake .. -DDEACTIVATE_SYMBOLS_CHECK=ON to re-activate it.
  * Correct the check for the compressed size when the buffer is memcpyed. This was a regression introduced in 1.16.0. Fixes #261.
  * Fixed a regression in 1.16.0 that prevented to compress empty buffers (see #260).
  * Now the functions that execute Blosc decompressions are safe by default for untrusted/possibly corrupted inputs.
  * The previous functions (with less safety) checks are still available with a '_unsafe' suffix. The complete list is:
  * Also, a new API function named blosc_cbuffer_validate(), for validating Blosc compressed data, has been added.
  * For details, see PR #258. Thanks to Jeremy Maitin-Shepard.
  * Fixed a bug in blosc_compress() that could lead to thread deadlock under some situations. See #251. Thanks to @wenjuno for the report and the fix.
  * Fix data race in shuffle.c host_implementation initialization. Fixes #253. Thanks to Jeremy Maitin-Shepard.
  * Add workaround for Visual Studio 2008's lack of a stdint.h file to blosclz.c.
  * Replaced //-comments with /**/-comments and other improvements for compatibility with quite old gcc compilers. See PR #243. Thanks to Andreas Martin.
  * Empty buffers can be compressed again (this was unadvertedly prevented while fixing #234). See #247. Thanks to Valentin Haenel.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574164800">- %make_jobs is depricated replaced by %cmake_build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1580990400">- Update to version 1.17.1:
  * BloscLZ codec updated to 2.0.0.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585656000">- Update to version 1.18.1:
  * Fixed the copy of the leftovers of a chunk when its size is not
    a multiple of the typesize.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1592913600">- Update to version 1.19.0:
  * The length of automatic blocksizes for fast codecs (lz4, blosclz) has been incremented quite a bit (up to 256 KB) for better compression ratios.
  * The performance in modern CPUs (with at least 256 KB in L2 cache) should be better too (for older CPUs the performance should stay roughly the same).
  * For small buffers that cannot be compressed (typically &lt; 128 bytes), blosc_compress() returns now a 0 (cannot compress) instead of a negative number (internal error). See #294.
  * blosclz codec updated to 2.1.0. Expect better compression ratios and performance in a wider variety of scenarios.
  * blosc_decompress_unsafe(), blosc_decompress_ctx_unsafe() and blosc_getitem_unsafe() have been removed because they are dangerous and after latest improvements, they should not be used in production.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1597147200">- Enable support for SNAPPY compression.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Stop assuming that %{_libexecdir} == /usr/lib (boo#1174075).</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 1.20.1 boo#1179914 CVE-2020-29367:
  * More saftey checks have been implemented so that potential flaws discovered by new fuzzers in OSS-Fuzzer are fixed now
  * BloscLZ updated to 2.3.0. Expect better compression ratios for faster codecs. For details, see our new blog post: https://blosc.org/posts/beast-release/
  * Fixed the _xgetbv() collision. Thanks to Micha? Górny (@mgorny).</changelog>
</package>
<package pkgid="24d8560213a09af7380abebcc8d95cceae67d51e183a31726c6ee1f4a01c8e0f" name="blueman" arch="src">
  <version epoch="0" ver="2.1.4" rel="lp152.2.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1532692800">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1542628800">- Enable appindicator support. Needed for the newer xfce4-status-notifier.
  No longer breaks system tray</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1549281600">- update to version 2.0.8
  * Fix name resolution of unknown device classes
- changes in  2.0.7
  * This release fixes DUN support in blueman through NetworkManager
  and bluemans own implementation with pppd. It has been broken due
  to lack of hardware as DUN is usually not available on newer devices.
  * Added default polkit rules file that allows users in group wheel
  to perform administrative actions.
  * Support iproute2 and make it the default
  * Fix icon name in the device menu
  * Several commits backported from master for various RFCOMM
  and Serial related bugs.
  * Fix icon and caption in manager for LE devices
- moved new polkit rules in docs to keep default security untouched
  (boo#1124339)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560168000">- Update to version 2.1
  * Support for BlueZ 4 and Python 2.7 and 3.2 got dropped
  * dbus-python and libnotify aren't dependencies anymore
  * libnm is now used for interaction with NetworkManager (&gt;= 1.0)
  * Compatibility with gnome-icon-theme, mate-icon-theme, adwaita-icon-theme, elementary-xfce, and Papirus
  * Information dialog on devices' services
  * Compose and send notes to devices
  * Default PIN code database
  * Support for the ip command
  * udhdpd support
  * Lots of improvements for blueman-sendto
  * Lots of bug fixes and smaller or invisible improvements
  * See CHANGELOG.md for a complete list of changes
- Several spec file cleanups and adaptations</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1562673600">- Update to version 2.1.1
  * Using recent connections did not work
  * Swichting adapters did not work
  * Errors when removing a device
  * Error tracebacks from info dialog</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1580904000">- Update to version 2.1.2
  * Signal bar updates with multiple adapters
  * Pairing with pincode</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1594555200">- Update to version 2.1.3
  * Force cython to use python language version 3
  * Fix tooltip not updating when bluetooth is disabled
  * Fix dbus timeout in DhcClient
  * Call the right method when pulseaudio crashes
  * Handle os.remove failing</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604404800">- Update to version 2.1.4
  * Security Release for CVE-2020-15238 (boo#1178196)
  * Force cython to use python language version 3
  * Do not use exitcode 1 when we expect to fail
  * Mark more strings translatable
  * Unstranslated strings
  * Fix searching (with Ctrl+F in manager device list) did not work
  * Default PIN lookup
  * Fix device removal handling
  * Only use LaunchContext when we have proper event time</changelog>
</package>
<package pkgid="c827919be9f8a32bac86bb9982eb86a5dc84e980fca847810925c55f40ec41e0" name="blueman" arch="x86_64">
  <version epoch="0" ver="2.1.4" rel="lp152.2.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1532692800">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1542628800">- Enable appindicator support. Needed for the newer xfce4-status-notifier.
  No longer breaks system tray</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1549281600">- update to version 2.0.8
  * Fix name resolution of unknown device classes
- changes in  2.0.7
  * This release fixes DUN support in blueman through NetworkManager
  and bluemans own implementation with pppd. It has been broken due
  to lack of hardware as DUN is usually not available on newer devices.
  * Added default polkit rules file that allows users in group wheel
  to perform administrative actions.
  * Support iproute2 and make it the default
  * Fix icon name in the device menu
  * Several commits backported from master for various RFCOMM
  and Serial related bugs.
  * Fix icon and caption in manager for LE devices
- moved new polkit rules in docs to keep default security untouched
  (boo#1124339)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560168000">- Update to version 2.1
  * Support for BlueZ 4 and Python 2.7 and 3.2 got dropped
  * dbus-python and libnotify aren't dependencies anymore
  * libnm is now used for interaction with NetworkManager (&gt;= 1.0)
  * Compatibility with gnome-icon-theme, mate-icon-theme, adwaita-icon-theme, elementary-xfce, and Papirus
  * Information dialog on devices' services
  * Compose and send notes to devices
  * Default PIN code database
  * Support for the ip command
  * udhdpd support
  * Lots of improvements for blueman-sendto
  * Lots of bug fixes and smaller or invisible improvements
  * See CHANGELOG.md for a complete list of changes
- Several spec file cleanups and adaptations</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1562673600">- Update to version 2.1.1
  * Using recent connections did not work
  * Swichting adapters did not work
  * Errors when removing a device
  * Error tracebacks from info dialog</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1580904000">- Update to version 2.1.2
  * Signal bar updates with multiple adapters
  * Pairing with pincode</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1594555200">- Update to version 2.1.3
  * Force cython to use python language version 3
  * Fix tooltip not updating when bluetooth is disabled
  * Fix dbus timeout in DhcClient
  * Call the right method when pulseaudio crashes
  * Handle os.remove failing</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604404800">- Update to version 2.1.4
  * Security Release for CVE-2020-15238 (boo#1178196)
  * Force cython to use python language version 3
  * Do not use exitcode 1 when we expect to fail
  * Mark more strings translatable
  * Unstranslated strings
  * Fix searching (with Ctrl+F in manager device list) did not work
  * Default PIN lookup
  * Fix device removal handling
  * Only use LaunchContext when we have proper event time</changelog>
</package>
<package pkgid="37c72b1c1d11b5381bf069355ae6854fbd08b94d45b9fca1c07be5137f812a97" name="blueman-lang" arch="noarch">
  <version epoch="0" ver="2.1.4" rel="lp152.2.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1532692800">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1542628800">- Enable appindicator support. Needed for the newer xfce4-status-notifier.
  No longer breaks system tray</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1549281600">- update to version 2.0.8
  * Fix name resolution of unknown device classes
- changes in  2.0.7
  * This release fixes DUN support in blueman through NetworkManager
  and bluemans own implementation with pppd. It has been broken due
  to lack of hardware as DUN is usually not available on newer devices.
  * Added default polkit rules file that allows users in group wheel
  to perform administrative actions.
  * Support iproute2 and make it the default
  * Fix icon name in the device menu
  * Several commits backported from master for various RFCOMM
  and Serial related bugs.
  * Fix icon and caption in manager for LE devices
- moved new polkit rules in docs to keep default security untouched
  (boo#1124339)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560168000">- Update to version 2.1
  * Support for BlueZ 4 and Python 2.7 and 3.2 got dropped
  * dbus-python and libnotify aren't dependencies anymore
  * libnm is now used for interaction with NetworkManager (&gt;= 1.0)
  * Compatibility with gnome-icon-theme, mate-icon-theme, adwaita-icon-theme, elementary-xfce, and Papirus
  * Information dialog on devices' services
  * Compose and send notes to devices
  * Default PIN code database
  * Support for the ip command
  * udhdpd support
  * Lots of improvements for blueman-sendto
  * Lots of bug fixes and smaller or invisible improvements
  * See CHANGELOG.md for a complete list of changes
- Several spec file cleanups and adaptations</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1562673600">- Update to version 2.1.1
  * Using recent connections did not work
  * Swichting adapters did not work
  * Errors when removing a device
  * Error tracebacks from info dialog</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1580904000">- Update to version 2.1.2
  * Signal bar updates with multiple adapters
  * Pairing with pincode</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1594555200">- Update to version 2.1.3
  * Force cython to use python language version 3
  * Fix tooltip not updating when bluetooth is disabled
  * Fix dbus timeout in DhcClient
  * Call the right method when pulseaudio crashes
  * Handle os.remove failing</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604404800">- Update to version 2.1.4
  * Security Release for CVE-2020-15238 (boo#1178196)
  * Force cython to use python language version 3
  * Do not use exitcode 1 when we expect to fail
  * Mark more strings translatable
  * Unstranslated strings
  * Fix searching (with Ctrl+F in manager device list) did not work
  * Default PIN lookup
  * Fix device removal handling
  * Only use LaunchContext when we have proper event time</changelog>
</package>
<package pkgid="ce3c76a6fadb2651c4e336fb110d05f3a6a9ae3a2c062ae0ad33a835d624e0ef" name="bluez" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="bc5061decee23a859b7165eea5213f6a4928ebef67860d17eab0f45c9a8837f3" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="673b14d091e3d650dd8aec032fc0b4b5ef4841fa454177279893f655a9ceace6" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="4f583a55b09f6fad3313c200bc11225dfffbaf34853fc9818dbdec5a1437fe39" name="bluez" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="2421acbcfb18f0baf4a426c9f62f50b80061f55ece6a00d63836e0883403957f" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="320d3575ef78cc9cc2f8dbdbdb1be516a5f160cfec0e1af062ed1cd0ae7cdc18" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="9fa2885897d29063e086351f173ee3c8348e481ec456d130749c089227080411" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="e43f8169cd9296dbdaf33d252c2805973a39c901f92e30f518fd8d910a1798ca" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="028ab30e3c5edaba9974d95019c5400d58233c4252064e9700ad5769d72679e5" name="bluez-cups" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="36b494b49be102065110d4e91d81d10cc5bf26e457393e069ea29bb4958aab9b" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="66b065fd2a1e4d22195b4a9b87aebd2bc2c4f8083fd12a12bfa528b27d35999b" name="bluez-cups" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="ea2019182e0425e5931bcbcfaa7b9b11843c5f2fcefde80aa5d6583783c5d556" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="4dda7c08db394e5ccf537c4ecc5376afc03ae166ad97bfe521d3f8c3fa431483" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="fd0035f96b0e05c8c58fcaf518d82464f6d9215ead9688e5e079321f7780c059" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="1be71cbc4c62566dc69af206b04923b37ef71d241263899fc0be2466b8ea66e5" name="bluez-devel" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="d92dfab7b244e32963cb361e8be89e50df2cba6041ba43e6cf3ee4ff0b44d60e" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="9dca4224bf823fa05989f89c638e6bd90ebe66ae004bce25c886445d8f24fec4" name="bluez-devel" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="86ccae29fa2888bb44911841cedfb3c3ab7ec09164ddabe62d83a0d4bcbf7dca" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="af4eaf33ed4b29bcfbd6e0795168a84b4079ec22d0dc4b23a6f6070c300b16e4" name="bluez-test" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="eddaf2609976c92403a0460a538622aff81fff215f2835b1a3bca1682f700daa" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="47424362baf5101198b77ea3146cf6988fdcf15f38dad9468848aa2690b8dba3" name="bluez-test" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="9a6fd956d8f020e76ab5bc1afb457c24a194b1725f670d135c094da7958081e3" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="58096c7a33a38ffa7667f20ad7f518adb0db85ed4114494ff6d3b5c757092b7c" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.64" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="bd479c72b5cd7b2e0b50e69181535ad84fbbfea35a5263f79bba6b4fd1901e3d" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.64" rel="lp152.2.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="8081ce9cf8aa77e3d4a4b913a821ad5ae7053704bd2faf1e191586f0d4a4b4cc" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.64" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="095424058618ef3a08176e524409bd7e46078260657cf0f87892ffb8fd7e3140" name="bouncycastle-mail" arch="noarch">
  <version epoch="0" ver="1.64" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="ad32ed8ed3c8017a45b7be5613b6f40e2bfdac6c9e381bbd3af67a822e97189c" name="bouncycastle-pg" arch="noarch">
  <version epoch="0" ver="1.64" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="e9ec05a30038f135f58f2cbc8bb37ee2600390b4561c0beb2d76fd2be16bcf53" name="bouncycastle-pkix" arch="noarch">
  <version epoch="0" ver="1.64" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="e65504032b74da94a87fe460accbbcb32a66d37abd24101b583f4cdcfe9c6cec" name="bouncycastle-tls" arch="noarch">
  <version epoch="0" ver="1.64" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="d3c62376114043e16eeccfdd75cfc6abac67cd52e8434bb23d31514b1909d14c" name="bpftrace" arch="src">
  <version epoch="0" ver="0.11.4" rel="lp152.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540900800">- Initial bpftrace 0.0.0 import. Upstream doesn't really have versioning, so
  now we just use _service and pull from master. BCC required a bit of
  vendoring work, though hopefully we can switch to using bcc-tool-devel.
  boo#1117223</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to using bcc-devel from Base:System. This required a few backports
  from upstream and some other various changes. boo#1117223
  https://github.com/iovisor/bpftrace/pull/227
  * 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update bpftrace import to 0.0.0 (again).
- Remove patch for bcc-devel now that there is an upstream fix for it
  (https://github.com/iovisor/bpftrace/pull/327). boo#1117223
  - 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Update bpftrace to v0.9.
- Deprecated: sym() and stack() are deprecated.
    Use ksym() and kstack() instead.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="Antonio Ojea &lt;aojeagarcia@suse.com&gt;" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
</package>
<package pkgid="0b1de632c1c4400692ada741513154185950a7bb471b8d23a5eb09408a1971f1" name="bpftrace" arch="x86_64">
  <version epoch="0" ver="0.11.4" rel="lp152.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540900800">- Initial bpftrace 0.0.0 import. Upstream doesn't really have versioning, so
  now we just use _service and pull from master. BCC required a bit of
  vendoring work, though hopefully we can switch to using bcc-tool-devel.
  boo#1117223</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to using bcc-devel from Base:System. This required a few backports
  from upstream and some other various changes. boo#1117223
  https://github.com/iovisor/bpftrace/pull/227
  * 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update bpftrace import to 0.0.0 (again).
- Remove patch for bcc-devel now that there is an upstream fix for it
  (https://github.com/iovisor/bpftrace/pull/327). boo#1117223
  - 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Update bpftrace to v0.9.
- Deprecated: sym() and stack() are deprecated.
    Use ksym() and kstack() instead.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="Antonio Ojea &lt;aojeagarcia@suse.com&gt;" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
</package>
<package pkgid="c7053748930681a7253e41507000ce78bf55ddd8122f8e402c8561d41764d2b2" name="bpftrace" arch="src">
  <version epoch="0" ver="0.11.4" rel="lp152.2.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540900800">- Initial bpftrace 0.0.0 import. Upstream doesn't really have versioning, so
  now we just use _service and pull from master. BCC required a bit of
  vendoring work, though hopefully we can switch to using bcc-tool-devel.
  boo#1117223</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to using bcc-devel from Base:System. This required a few backports
  from upstream and some other various changes. boo#1117223
  https://github.com/iovisor/bpftrace/pull/227
  * 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update bpftrace import to 0.0.0 (again).
- Remove patch for bcc-devel now that there is an upstream fix for it
  (https://github.com/iovisor/bpftrace/pull/327). boo#1117223
  - 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Update bpftrace to v0.9.
- Deprecated: sym() and stack() are deprecated.
    Use ksym() and kstack() instead.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="Antonio Ojea &lt;aojeagarcia@suse.com&gt;" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
</package>
<package pkgid="d8f39e24cb155209c8b97b8cc423c4bcc9878bcbc01561520aac63031a38b0eb" name="bpftrace" arch="x86_64">
  <version epoch="0" ver="0.11.4" rel="lp152.2.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540900800">- Initial bpftrace 0.0.0 import. Upstream doesn't really have versioning, so
  now we just use _service and pull from master. BCC required a bit of
  vendoring work, though hopefully we can switch to using bcc-tool-devel.
  boo#1117223</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to using bcc-devel from Base:System. This required a few backports
  from upstream and some other various changes. boo#1117223
  https://github.com/iovisor/bpftrace/pull/227
  * 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update bpftrace import to 0.0.0 (again).
- Remove patch for bcc-devel now that there is an upstream fix for it
  (https://github.com/iovisor/bpftrace/pull/327). boo#1117223
  - 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Update bpftrace to v0.9.
- Deprecated: sym() and stack() are deprecated.
    Use ksym() and kstack() instead.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="Antonio Ojea &lt;aojeagarcia@suse.com&gt;" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
</package>
<package pkgid="eef7d4f547915948e9226cee0cb859d7904720fe38053784e3229836558c5281" name="bpftrace" arch="src">
  <version epoch="0" ver="0.11.4" rel="lp152.2.7.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540900800">- Initial bpftrace 0.0.0 import. Upstream doesn't really have versioning, so
  now we just use _service and pull from master. BCC required a bit of
  vendoring work, though hopefully we can switch to using bcc-tool-devel.
  boo#1117223</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to using bcc-devel from Base:System. This required a few backports
  from upstream and some other various changes. boo#1117223
  https://github.com/iovisor/bpftrace/pull/227
  * 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update bpftrace import to 0.0.0 (again).
- Remove patch for bcc-devel now that there is an upstream fix for it
  (https://github.com/iovisor/bpftrace/pull/327). boo#1117223
  - 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Update bpftrace to v0.9.
- Deprecated: sym() and stack() are deprecated.
    Use ksym() and kstack() instead.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="Antonio Ojea &lt;aojeagarcia@suse.com&gt;" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
</package>
<package pkgid="946aeb5f570e52aad66a618b183a70bca108e72a6da2b6dd80a830fa68697638" name="bpftrace" arch="x86_64">
  <version epoch="0" ver="0.11.4" rel="lp152.2.7.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540900800">- Initial bpftrace 0.0.0 import. Upstream doesn't really have versioning, so
  now we just use _service and pull from master. BCC required a bit of
  vendoring work, though hopefully we can switch to using bcc-tool-devel.
  boo#1117223</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to using bcc-devel from Base:System. This required a few backports
  from upstream and some other various changes. boo#1117223
  https://github.com/iovisor/bpftrace/pull/227
  * 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update bpftrace import to 0.0.0 (again).
- Remove patch for bcc-devel now that there is an upstream fix for it
  (https://github.com/iovisor/bpftrace/pull/327). boo#1117223
  - 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Update bpftrace to v0.9.
- Deprecated: sym() and stack() are deprecated.
    Use ksym() and kstack() instead.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="Antonio Ojea &lt;aojeagarcia@suse.com&gt;" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
</package>
<package pkgid="9343b266814969b0be2744c164fbe2ce5fc7acbc1315f700b7a501db04441a4c" name="bpftrace-tools" arch="noarch">
  <version epoch="0" ver="0.11.4" rel="lp152.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540900800">- Initial bpftrace 0.0.0 import. Upstream doesn't really have versioning, so
  now we just use _service and pull from master. BCC required a bit of
  vendoring work, though hopefully we can switch to using bcc-tool-devel.
  boo#1117223</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to using bcc-devel from Base:System. This required a few backports
  from upstream and some other various changes. boo#1117223
  https://github.com/iovisor/bpftrace/pull/227
  * 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update bpftrace import to 0.0.0 (again).
- Remove patch for bcc-devel now that there is an upstream fix for it
  (https://github.com/iovisor/bpftrace/pull/327). boo#1117223
  - 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Update bpftrace to v0.9.
- Deprecated: sym() and stack() are deprecated.
    Use ksym() and kstack() instead.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="Antonio Ojea &lt;aojeagarcia@suse.com&gt;" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
</package>
<package pkgid="71821552030f43d01ddd45f714e44193dc1d5c1ae9ae5944038e35b30c4254f9" name="bpftrace-tools" arch="noarch">
  <version epoch="0" ver="0.11.4" rel="lp152.2.5.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540900800">- Initial bpftrace 0.0.0 import. Upstream doesn't really have versioning, so
  now we just use _service and pull from master. BCC required a bit of
  vendoring work, though hopefully we can switch to using bcc-tool-devel.
  boo#1117223</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to using bcc-devel from Base:System. This required a few backports
  from upstream and some other various changes. boo#1117223
  https://github.com/iovisor/bpftrace/pull/227
  * 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update bpftrace import to 0.0.0 (again).
- Remove patch for bcc-devel now that there is an upstream fix for it
  (https://github.com/iovisor/bpftrace/pull/327). boo#1117223
  - 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Update bpftrace to v0.9.
- Deprecated: sym() and stack() are deprecated.
    Use ksym() and kstack() instead.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="Antonio Ojea &lt;aojeagarcia@suse.com&gt;" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
</package>
<package pkgid="0c00a7f70f856f3f44f55e2c56786b82f18f44d219215d1084da6e9f43ddd9e3" name="bpftrace-tools" arch="noarch">
  <version epoch="0" ver="0.11.4" rel="lp152.2.7.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540900800">- Initial bpftrace 0.0.0 import. Upstream doesn't really have versioning, so
  now we just use _service and pull from master. BCC required a bit of
  vendoring work, though hopefully we can switch to using bcc-tool-devel.
  boo#1117223</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to using bcc-devel from Base:System. This required a few backports
  from upstream and some other various changes. boo#1117223
  https://github.com/iovisor/bpftrace/pull/227
  * 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update bpftrace import to 0.0.0 (again).
- Remove patch for bcc-devel now that there is an upstream fix for it
  (https://github.com/iovisor/bpftrace/pull/327). boo#1117223
  - 0001-cmake-fix-builds-within-OBS.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Update bpftrace to v0.9.
- Deprecated: sym() and stack() are deprecated.
    Use ksym() and kstack() instead.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="Antonio Ojea &lt;aojeagarcia@suse.com&gt;" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
</package>
<package pkgid="7a41eb010e481e7c5bb3ebe84f19d76997000fec65f9fa11e199e9ded93a4ca5" name="brlapi-devel" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="aaccada4f8c673870567b8ccd4874ac1e75e1700a2914568fbe1a02b8f70a2f9" name="brlapi-java" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="a3da4a1bde60a6ec391a99d0b6edbef885deae9e5b23953801f3c84aedd407f3" name="brltty" arch="src">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="626785a678287d1bba00ce3fa0650dcddff585dfc4e321442fbb139d633b1f00" name="brltty" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="07a7fe97b4a311b9502153827038d6cffbc9e758da8ed18b84965b71a76c1283" name="brltty-driver-at-spi2" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="72481172179b95dcc797bf7511923edccc46e5830b12ebdeddf00634c2b7fd6e" name="brltty-driver-brlapi" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="82eaa0be9f0593b0ac8180c88a16a970f77164994dd7aaca54da2acf636fadea" name="brltty-driver-espeak" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="56c9b9212a6026da46d70f97dab53f337dd0951b4e1e4f13cb582f472f4042fa" name="brltty-driver-libbraille" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="25504d6590b7747388c44daaeefd5a3de7395c6da1372312147a7932225d39dc" name="brltty-driver-speech-dispatcher" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="fcb8be3c885a42151a504aef2ef4d5caa9e9a9aa8d6925b77704c7b38e80cc91" name="brltty-driver-xwindow" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="9d57ba90d5ce145460456466b3ffafaf115722b0a17af0fd1b30943d681d8036" name="brltty-lang" arch="noarch">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="043b2e9b134b169c873319434be1758f8507395cccd18b4309af5cbaf1624ea3" name="brltty-utils" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="86c8f69e8aa1f4d2d1d2d291e56237abdc9287b6c1b77c9e7a7d4824b822d67c" name="brotli" arch="i586">
  <version epoch="0" ver="1.0.9" rel="lp152.2.3.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
</package>
<package pkgid="a8a105aab152de1906e9ef53981f5c19989f659d2c12fbaec6a1f048ebaa051e" name="brotli" arch="src">
  <version epoch="0" ver="1.0.9" rel="lp152.2.3.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
</package>
<package pkgid="c6c3241fac7d91b1ec3cb4b36ff121974c35d93bf6199d98b204660fbfd0b17d" name="brotli" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="lp152.2.3.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
</package>
<package pkgid="25768c8329f8d6d6fe5c7e07f6a0ba983e5f34d6ec90f90a851fb67c09085a56" name="brp-check-suse" arch="i586">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp152.2.12.1"/>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
  <changelog author="ro@suse.de" date="1619784000">- make sure all brp-scripts are actually executable
  (still bsc#1184555)</changelog>
  <changelog author="ro@suse.de" date="1620993600">- add patches to support reproducible builds (bsc#1186049)
  - brp-25-symlink-sort-input.patch
  - normalize input by sorting the list of found symlinks
  - brp-25-symlink-print-all-errors.patch
  - print all errors before exiting
  - brp-75-ar-initial-version.patch
  - sort the content of ar archives using objcopy
  - brp-75-ar-allow-override.patch
  - allow overriding the ar sorting by using NO_BRP_AR</changelog>
</package>
<package pkgid="c6e0502985d99d58f67a2e5b41a7937289cf5ae3ff88a07df2674ad1b028377d" name="brp-check-suse" arch="src">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp152.2.12.1"/>
  <changelog author="ro@suse.de" date="1404302400">- do not ignore errors just because package has no init script
- allow .local scripts for aaa_base so we can ghost them there
- remove outdated echo line</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406203200">- remove brp-20-check-la, it is broken and la files are mostly
  deleted anyway
- reduction of number of calls used by using more bashism, passing
  more regexp at once, use more double quotes
  brp-15-strip-debug
  brp-45-tcl
  brp-50-check-python
  brp-60-hook</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406203201">- All GTK apps are allowed to assume the presence of the
  Adwaita-icon-theme package; As a result of this, we now accept icons
  in icons/Adwaita on the whitelist (just as hicolor).
  patch by DimStar</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406289600">- massive rewrite of brp-25-symlink to reduce number of calls our
  tests shown speedup from 8,5 mins to 1 min for kernel-default
  (year ago)</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406376000">- brp-25-symlink: fix eating /./ in path</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406462400">- brp-25-symlink: add mising '/etc/alternatives' back to whitelist</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
  <changelog author="ro@suse.de" date="1619784000">- make sure all brp-scripts are actually executable
  (still bsc#1184555)</changelog>
  <changelog author="ro@suse.de" date="1620993600">- add patches to support reproducible builds (bsc#1186049)
  - brp-25-symlink-sort-input.patch
  - normalize input by sorting the list of found symlinks
  - brp-25-symlink-print-all-errors.patch
  - print all errors before exiting
  - brp-75-ar-initial-version.patch
  - sort the content of ar archives using objcopy
  - brp-75-ar-allow-override.patch
  - allow overriding the ar sorting by using NO_BRP_AR</changelog>
</package>
<package pkgid="31b0cada0dc4a4bde1ad5a267ba9f8c161fe12d9b8974e42d0f276facc850cef" name="brp-check-suse" arch="x86_64">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp152.2.12.1"/>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
  <changelog author="ro@suse.de" date="1619784000">- make sure all brp-scripts are actually executable
  (still bsc#1184555)</changelog>
  <changelog author="ro@suse.de" date="1620993600">- add patches to support reproducible builds (bsc#1186049)
  - brp-25-symlink-sort-input.patch
  - normalize input by sorting the list of found symlinks
  - brp-25-symlink-print-all-errors.patch
  - print all errors before exiting
  - brp-75-ar-initial-version.patch
  - sort the content of ar archives using objcopy
  - brp-75-ar-allow-override.patch
  - allow overriding the ar sorting by using NO_BRP_AR</changelog>
</package>
<package pkgid="ef0686561491253399c2e5e5eea9069d39e4cd253c1158fd806252879c4f3256" name="brp-check-suse" arch="i586">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp152.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424088000">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
</package>
<package pkgid="6d6baecb71d0a43bf2e64334b3b4b0743fe3dcd5c92fa92a607acbddf7e1101a" name="brp-check-suse" arch="src">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp152.2.3.1"/>
  <changelog author="ro@suse.de" date="1331640000">- integrate brp-check-xdg-menus.patch (and add to git)
- ignore empty elements in rpath</changelog>
  <changelog author="coolo@suse.com" date="1341144000">- do not allow symlinks to point to itself (not existant as result)</changelog>
  <changelog author="coolo@suse.com" date="1352721600">- document the need for full perl</changelog>
  <changelog author="coolo@suse.com" date="1393243200">- switch to _service fetching from github
- fix brp-symlinks to avoid errors on links to alternatives and
  remove check-broken-symlinks.diff</changelog>
  <changelog author="ro@suse.de" date="1404302400">- do not ignore errors just because package has no init script
- allow .local scripts for aaa_base so we can ghost them there
- remove outdated echo line</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406116800">- remove brp-20-check-la, it is broken and la files are mostly
  deleted anyway
- reduction of number of calls used by using more bashism, passing
  more regexp at once, use more double quotes
  brp-15-strip-debug
  brp-45-tcl
  brp-50-check-python
  brp-60-hook</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406116801">- All GTK apps are allowed to assume the presence of the
  Adwaita-icon-theme package; As a result of this, we now accept icons
  in icons/Adwaita on the whitelist (just as hicolor).
  patch by DimStar</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406289600">- massive rewrite of brp-25-symlink to reduce number of calls our
  tests shown speedup from 8,5 mins to 1 min for kernel-default
  (year ago)</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406376000">- brp-25-symlink: fix eating /./ in path</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406462400">- brp-25-symlink: add mising '/etc/alternatives' back to whitelist</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424088000">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
</package>
<package pkgid="4178609101ff889c4eb005c78925ad1a1ee80db60e20dbbd2f0a4d97159f877f" name="brp-check-suse" arch="x86_64">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp152.2.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424088000">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
</package>
<package pkgid="56a0133063018edcf0522cd5621e7ef274a2f06626d7bb6e375e32a01bbd1b21" name="brp-check-suse" arch="i586">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp152.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
</package>
<package pkgid="5a2d66965ecf63d92d292bb44bae3046663499975940394d1385390f984fc6e0" name="brp-check-suse" arch="src">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp152.2.6.1"/>
  <changelog author="coolo@suse.com" date="1352721600">- document the need for full perl</changelog>
  <changelog author="coolo@suse.com" date="1393243200">- switch to _service fetching from github
- fix brp-symlinks to avoid errors on links to alternatives and
  remove check-broken-symlinks.diff</changelog>
  <changelog author="ro@suse.de" date="1404302400">- do not ignore errors just because package has no init script
- allow .local scripts for aaa_base so we can ghost them there
- remove outdated echo line</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406203200">- remove brp-20-check-la, it is broken and la files are mostly
  deleted anyway
- reduction of number of calls used by using more bashism, passing
  more regexp at once, use more double quotes
  brp-15-strip-debug
  brp-45-tcl
  brp-50-check-python
  brp-60-hook</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406203201">- All GTK apps are allowed to assume the presence of the
  Adwaita-icon-theme package; As a result of this, we now accept icons
  in icons/Adwaita on the whitelist (just as hicolor).
  patch by DimStar</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406289600">- massive rewrite of brp-25-symlink to reduce number of calls our
  tests shown speedup from 8,5 mins to 1 min for kernel-default
  (year ago)</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406376000">- brp-25-symlink: fix eating /./ in path</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406462400">- brp-25-symlink: add mising '/etc/alternatives' back to whitelist</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
</package>
<package pkgid="fef7b4c5b2bf706c228a8d5e669a7d3ec9485e06db366f3cb112541c0e61a17f" name="brp-check-suse" arch="x86_64">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp152.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
</package>
<package pkgid="9be144b4d7cdbd1c42356f4d4dc430101415ca9ef293353cb49d10b4109b7118" name="brp-check-suse" arch="i586">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp152.2.9.1"/>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
  <changelog author="ro@suse.de" date="1619784000">- make sure all brp-scripts are actually executable
  (still bsc#1184555)</changelog>
</package>
<package pkgid="3c8af7b920cba6b4675c9521bd06c6c7b3ad751ca3bc6a064d169f72f6dbbe4f" name="brp-check-suse" arch="src">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp152.2.9.1"/>
  <changelog author="coolo@suse.com" date="1393243200">- switch to _service fetching from github
- fix brp-symlinks to avoid errors on links to alternatives and
  remove check-broken-symlinks.diff</changelog>
  <changelog author="ro@suse.de" date="1404302400">- do not ignore errors just because package has no init script
- allow .local scripts for aaa_base so we can ghost them there
- remove outdated echo line</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406203200">- remove brp-20-check-la, it is broken and la files are mostly
  deleted anyway
- reduction of number of calls used by using more bashism, passing
  more regexp at once, use more double quotes
  brp-15-strip-debug
  brp-45-tcl
  brp-50-check-python
  brp-60-hook</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406203201">- All GTK apps are allowed to assume the presence of the
  Adwaita-icon-theme package; As a result of this, we now accept icons
  in icons/Adwaita on the whitelist (just as hicolor).
  patch by DimStar</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406289600">- massive rewrite of brp-25-symlink to reduce number of calls our
  tests shown speedup from 8,5 mins to 1 min for kernel-default
  (year ago)</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406376000">- brp-25-symlink: fix eating /./ in path</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406462400">- brp-25-symlink: add mising '/etc/alternatives' back to whitelist</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
  <changelog author="ro@suse.de" date="1619784000">- make sure all brp-scripts are actually executable
  (still bsc#1184555)</changelog>
</package>
<package pkgid="2823908c69997e9c653a554674f084dbd0b0a0680b7308cf9408c692acd43069" name="brp-check-suse" arch="x86_64">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="lp152.2.9.1"/>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
  <changelog author="ro@suse.de" date="1619784000">- make sure all brp-scripts are actually executable
  (still bsc#1184555)</changelog>
</package>
<package pkgid="d23dcba077599e146bc2474029872032b681b60ea25705f82f1ea7d558acc16b" name="btcflash" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="01ea57b85e228f75706a7dbdd7d38b35ea187823fbce9e74f51990288a9c097e" name="btcflash" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="fcef7d917eaa112ea70b73d44dbe2c5798096b05f37d16f7bde9042f840309e9" name="btrfsmaintenance" arch="noarch">
  <version epoch="0" ver="0.4.2" rel="lp152.3.3.1"/>
  <changelog author="dsterba@suse.cz" date="1457006400">- version 0.2
  - updated documentation
  - support debian-like configuration paths
  - no hardcoded paths to external utilities
  - fixed logger name typos for 'journal' target
  - defrag fixes (sysconfig, find arguments)</changelog>
  <changelog author="dsterba@suse.cz" date="1479124800">- version 0.3
  - add syslog to logging targets
  - add none target (/dev/null)
  - autodetect btrfs filesystems for balance, scrub and trim
  - detect mixed blockgroups and use correct balance filters
  - fix uninstall rules
  - fix capturing entire output to the log
  - fix when cron files are symlinks
  - add generic installation script
  - doc updates: retention policy tuning</changelog>
  <changelog author="dsterba@suse.cz" date="1491480000">- version 0.3.1
  - dist-install: fix installation paths, install functions
  - functions: fix syntax to be compatible with dash
  - spec: install functions file</changelog>
  <changelog author="lnussel@suse.de" date="1499256000">- Require btrfsprogs (bsc#1047226)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1510056000">- Add btrfsmaintenance-0.3.1-fix-rpm-db-path.patch:
  * Change RPM database path to /usr/lib/sysimage/rpm for
    Tumbleweed.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1510315200">- Fix cron symlinks removal upon package upgrade (boo#904518):
  * The problem was in the preun section (in the old RPM).
  * This means the symlinks are removed by this update, but won't
    be by the next ones.
  * Please run 'systemctl start btrfsmaintenance-refresh' one more
    time to fix your symlinks.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.com" date="1512475200">- Add patch to use systemd timer instead of cron (pull-request-36.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Don't call btrfsmaintenance-refresh-cron.sh in %post, this is
  done already by the systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1512561601">- pull-request-36.patch: update patch</changelog>
  <changelog author="kukuk@suse.de" date="1513512000">- Switch default of btrfsmaintenance-refresh.service to systemd-timer,
  too (btrfsmaintenance-switch-to-timer.patch) [bsc#1073204]</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1513944000">- Fix systemd timers enabled even if period is set to none:
  * Micro change in pull-request-36.patch (bsc#1075884)
- Clean spec file:
  * Removed support for suse_version &lt;= 1210.
  * Removed call to btrfsmaintenance-refresh-cron.sh upon deletion
    (not needed anymore since we use systemd timers which are
    handled by macros).
  * Ran spec-cleaner.</changelog>
  <changelog author="dsterba@suse.cz" date="1515931200">- update to version 0.4
  - add support for systemd timers and use them by default; the alternative
    cron scripts are still present (#29, #36)
  - add automatic monitoring (via systemd.path) of the config file,
    no manual updates by btrfsmaintenance-refresh.service needed (#38)
  - fix RPM database path detection
  - spec file cleanups
  - documentation updates
- removed patches:
  - btrfsmaintenance-0.3.1-fix-rpm-db-path.patch (upstream)
  - btrfsmaintenance-switch-to-timer.patch (upstream)
  - pull-request-36.patch (upstream)</changelog>
  <changelog author="lpechacek@suse.com" date="1517832000">- Move the defrag plugin over to Python 3. (bsc#1070322)
- Added patch: python3-support-bsc1070322.diff</changelog>
  <changelog author="kukuk@suse.de" date="1520856000">- Add missing btrfsmaintenance-refresh.path [bsc#1084871]
- Use %license [bsc#1082318]</changelog>
  <changelog author="dsterba@suse.cz" date="1521028800">- update to version 0.4.1
  - defrag plugin: python2 and 3 compatibility
  - defrag plugin: target extent size lowered to 32MiB (#43)
  - shell compatibility fixes
  - systemd unit type fixes
- Removed patch: python3-support-bsc1070322.diff (upstream)</changelog>
  <changelog author="lpechacek@suse.com" date="1523620800">- In openSUSE the defrag plugin must explicitly refer to Python 3.
  (bsc#1070322)
- Added patch: python3-support-bsc1070322.diff</changelog>
  <changelog author="dsterba@suse.cz" date="1537790400">- update to version 0.4.2
  - CVE-2018-14722: expand auto mountpoints in a safe way
  - btrfs-defrag: fix missing function to detect btrfs filesystems (#52)
  - btrfs-trim: more verbose fstrim output (#60)
  - dist-install: print information about timer unit installation (#58)</changelog>
  <changelog author="jeffm@suse.com" date="1552392000">- Document and adjust balance thresholds and periods (FATE#325529 jsc#SLE-3188).
  * README: document impact of balance + quota groups
  * sysconfig: reduce default balance usage thresholds
  * sysconfig: document using systemd.time(7) for frequency of operations
  * btrfsmaintenance-refresh-cron.sh: validate periods for cron-based systems
- Remove python dependency (FATE#326736 jsc#SLE-4130).
  * btrfs-defrag-plugin: remove dependency on zypp-plugin-python
- Added patches:
  * 0001-README-document-impact-of-balance-quota-groups.patch
  * 0002-sysconfig-reduce-default-balance-usage-thresholds-fa.patch
  * 0003-sysconfig-document-using-systemd.time-7-for-frequenc.patch
  * 0004-btrfsmaintenance-refresh-cron.sh-validate-periods-fo.patch
  * 0005-btrfs-defrag-plugin-remove-dependency-on-zypp-plugin.patch
- Added source:
  * btrfs-defrag-plugin.sh
- Removed patch:
  * python3-support-bsc1070322.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1605873600">- btrfsmaintenance.service-delete-install-section.patch: Remove [Install]
  section (bsc#1178874)</changelog>
</package>
<package pkgid="e8c9d7e2ad99b39e92ab7567954920be2adb7f7af86354d87b35f681f7425ab9" name="btrfsmaintenance" arch="src">
  <version epoch="0" ver="0.4.2" rel="lp152.3.3.1"/>
  <changelog author="dsterba@suse.cz" date="1457006400">- version 0.2
  - updated documentation
  - support debian-like configuration paths
  - no hardcoded paths to external utilities
  - fixed logger name typos for 'journal' target
  - defrag fixes (sysconfig, find arguments)</changelog>
  <changelog author="dsterba@suse.cz" date="1479124800">- version 0.3
  - add syslog to logging targets
  - add none target (/dev/null)
  - autodetect btrfs filesystems for balance, scrub and trim
  - detect mixed blockgroups and use correct balance filters
  - fix uninstall rules
  - fix capturing entire output to the log
  - fix when cron files are symlinks
  - add generic installation script
  - doc updates: retention policy tuning</changelog>
  <changelog author="dsterba@suse.cz" date="1491480000">- version 0.3.1
  - dist-install: fix installation paths, install functions
  - functions: fix syntax to be compatible with dash
  - spec: install functions file</changelog>
  <changelog author="lnussel@suse.de" date="1499256000">- Require btrfsprogs (bsc#1047226)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1510056000">- Add btrfsmaintenance-0.3.1-fix-rpm-db-path.patch:
  * Change RPM database path to /usr/lib/sysimage/rpm for
    Tumbleweed.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1510315200">- Fix cron symlinks removal upon package upgrade (boo#904518):
  * The problem was in the preun section (in the old RPM).
  * This means the symlinks are removed by this update, but won't
    be by the next ones.
  * Please run 'systemctl start btrfsmaintenance-refresh' one more
    time to fix your symlinks.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.com" date="1512475200">- Add patch to use systemd timer instead of cron (pull-request-36.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Don't call btrfsmaintenance-refresh-cron.sh in %post, this is
  done already by the systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1512561601">- pull-request-36.patch: update patch</changelog>
  <changelog author="kukuk@suse.de" date="1513512000">- Switch default of btrfsmaintenance-refresh.service to systemd-timer,
  too (btrfsmaintenance-switch-to-timer.patch) [bsc#1073204]</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1513944000">- Fix systemd timers enabled even if period is set to none:
  * Micro change in pull-request-36.patch (bsc#1075884)
- Clean spec file:
  * Removed support for suse_version &lt;= 1210.
  * Removed call to btrfsmaintenance-refresh-cron.sh upon deletion
    (not needed anymore since we use systemd timers which are
    handled by macros).
  * Ran spec-cleaner.</changelog>
  <changelog author="dsterba@suse.cz" date="1515931200">- update to version 0.4
  - add support for systemd timers and use them by default; the alternative
    cron scripts are still present (#29, #36)
  - add automatic monitoring (via systemd.path) of the config file,
    no manual updates by btrfsmaintenance-refresh.service needed (#38)
  - fix RPM database path detection
  - spec file cleanups
  - documentation updates
- removed patches:
  - btrfsmaintenance-0.3.1-fix-rpm-db-path.patch (upstream)
  - btrfsmaintenance-switch-to-timer.patch (upstream)
  - pull-request-36.patch (upstream)</changelog>
  <changelog author="lpechacek@suse.com" date="1517832000">- Move the defrag plugin over to Python 3. (bsc#1070322)
- Added patch: python3-support-bsc1070322.diff</changelog>
  <changelog author="kukuk@suse.de" date="1520856000">- Add missing btrfsmaintenance-refresh.path [bsc#1084871]
- Use %license [bsc#1082318]</changelog>
  <changelog author="dsterba@suse.cz" date="1521028800">- update to version 0.4.1
  - defrag plugin: python2 and 3 compatibility
  - defrag plugin: target extent size lowered to 32MiB (#43)
  - shell compatibility fixes
  - systemd unit type fixes
- Removed patch: python3-support-bsc1070322.diff (upstream)</changelog>
  <changelog author="lpechacek@suse.com" date="1523620800">- In openSUSE the defrag plugin must explicitly refer to Python 3.
  (bsc#1070322)
- Added patch: python3-support-bsc1070322.diff</changelog>
  <changelog author="dsterba@suse.cz" date="1537790400">- update to version 0.4.2
  - CVE-2018-14722: expand auto mountpoints in a safe way
  - btrfs-defrag: fix missing function to detect btrfs filesystems (#52)
  - btrfs-trim: more verbose fstrim output (#60)
  - dist-install: print information about timer unit installation (#58)</changelog>
  <changelog author="jeffm@suse.com" date="1552392000">- Document and adjust balance thresholds and periods (FATE#325529 jsc#SLE-3188).
  * README: document impact of balance + quota groups
  * sysconfig: reduce default balance usage thresholds
  * sysconfig: document using systemd.time(7) for frequency of operations
  * btrfsmaintenance-refresh-cron.sh: validate periods for cron-based systems
- Remove python dependency (FATE#326736 jsc#SLE-4130).
  * btrfs-defrag-plugin: remove dependency on zypp-plugin-python
- Added patches:
  * 0001-README-document-impact-of-balance-quota-groups.patch
  * 0002-sysconfig-reduce-default-balance-usage-thresholds-fa.patch
  * 0003-sysconfig-document-using-systemd.time-7-for-frequenc.patch
  * 0004-btrfsmaintenance-refresh-cron.sh-validate-periods-fo.patch
  * 0005-btrfs-defrag-plugin-remove-dependency-on-zypp-plugin.patch
- Added source:
  * btrfs-defrag-plugin.sh
- Removed patch:
  * python3-support-bsc1070322.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1605873600">- btrfsmaintenance.service-delete-install-section.patch: Remove [Install]
  section (bsc#1178874)</changelog>
</package>
<package pkgid="ee32e9e2b760a72226744b774f4f002e2e4c41bb42c8f72bfeb9ffa29210f2c6" name="btrfsprogs" arch="i586">
  <version epoch="0" ver="4.19.1" rel="lp152.6.3.1"/>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="dsterba@suse.cz" date="1518782400">- use documentation shipped by upstream tar, reduce dependencies</changelog>
  <changelog author="dsterba@suse.cz" date="1522929600">- update to version 4.16
  * libbtrfsutil - new LGPL library to wrap userspace functionality
  * several 'btrfs' commands converted to use it:
  * properties
  * filesystem sync
  * subvolume set-default/get-default/delete/show/sync
  * python bindings, tests
  * build
  * use configured pkg-config path
  * CI: add python, musl/clang, built dependencies caching
  * convert: build fix for e2fsprogs 1.44+
  * don't install library links with wrong permissions
  * fixes
  * prevent incorrect use of subvol_strip_mountpoint
  * dump-super: don't verify csum for unknown type
  * convert: fix inline extent creation condition
  * check:
  * lowmem: fix false alert for 'data extent backref lost for snapshot'
  * lowmem: fix false alert for orphan inode
  * lowmem: fix false alert for shared prealloc extents
  * mkfs:
  * add UUID and otime to root of FS_TREE - with the uuid, snapshots will
    be now linked to the toplevel subvol by the parent UUID
  * don't follow symlinks when calculating size
  * pre-create the UUID tree
  * fix --rootdir with selinux enabled
  * dump-tree: add option to print only children nodes of a given block
  * image: handle missing device for RAID1
  * other
  * new tests
  * test script cleanups (quoting, helpers)
  * tool to edit superblocks
  * updated docs
- Add patch: 0001-btrfs-progs-build-fix-static-build.patch
- Add new library packages: libbtrfsutil</changelog>
  <changelog author="dsterba@suse.cz" date="1524484800">- update to version 4.16.1
  * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super,
    btrfs-calc-size
  * sb-mod: new debugging tool to edit superblock items
  * mkfs: detect if thin-provisioned device does not have enough space
  * check: don't try to verify checksums on metadata dump images
  * build: fail documentation build if xmlto is not found
  * build: fix build of btrfs.static
- Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream)
- Update initrd script</changelog>
  <changelog author="jeffm@suse.com" date="1525089600">- Fix building on SLE11:
  * btrfs-progs: convert: fix support for e2fsprogs &lt; 1.42
  * btrfs-progs: build: detect whether -std=gnu90 is supported
  * btrfs-progs: build: autoconf 2.63 compatibility
  * Fixed mismerged addition of libbtrfsutil1 package description
- Added patches:
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1529582400">- update to version 4.17
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
- Removed patches (upstreamed):
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1533470400">- update to version 4.17.1
  * check:
  * add ability to fix wrong ram_bytes for compressed inline files
  * beautify progress output
  * btrfstune: allow to continue uuid change after unclean interruption
  * several fuzz fixes:
  * detect overalpping chunks
  * chunk loading error handling
  * don't crash with unexpected root refs to extents
  * relax option parsing again to allow mixing options and non-options
    arguments
  * fix qgroup rescan status reporting
  * build:
  * drop obsolete dir-test
  * new configure option to disable building of tools
  * add compatibility options --disable-static and --disable-shared
  * other:
  * cleanups and preparatory work
  * new test images
- spec cleanup</changelog>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1610712000">- Add patches to fix the logical-resolve lookup process and to accept the 'ignore
  offsets' kernel feature (bsc#1174206)
  - Add 0001-btrfs-progs-add-LOGICAL_INO_V2-to-ioctl.h.patch
  - Add 0001-btrfs-progs-build-add-libmount-dependency.patch
  - Add 0001-btrfs-progs-inspect-add-support-for-LOGICAL_INO_V2-i.patch
  - Add 0001-btrfs-progs-inspect-increase-logical-resolve-default.patch
  - Add 0002-btrfs-progs-utils-introduce-find_mount_fsroot.patch
  - Add 0003-btrfs-progs-inspect-use-find_mount_fsroot-in-logical.patch</changelog>
</package>
<package pkgid="462916af76c5bf617cae96c70dd393a260a1c35c6a862793bc10179c903f45cc" name="btrfsprogs" arch="src">
  <version epoch="0" ver="4.19.1" rel="lp152.6.3.1"/>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="dsterba@suse.cz" date="1518782400">- use documentation shipped by upstream tar, reduce dependencies</changelog>
  <changelog author="dsterba@suse.cz" date="1522929600">- update to version 4.16
  * libbtrfsutil - new LGPL library to wrap userspace functionality
  * several 'btrfs' commands converted to use it:
  * properties
  * filesystem sync
  * subvolume set-default/get-default/delete/show/sync
  * python bindings, tests
  * build
  * use configured pkg-config path
  * CI: add python, musl/clang, built dependencies caching
  * convert: build fix for e2fsprogs 1.44+
  * don't install library links with wrong permissions
  * fixes
  * prevent incorrect use of subvol_strip_mountpoint
  * dump-super: don't verify csum for unknown type
  * convert: fix inline extent creation condition
  * check:
  * lowmem: fix false alert for 'data extent backref lost for snapshot'
  * lowmem: fix false alert for orphan inode
  * lowmem: fix false alert for shared prealloc extents
  * mkfs:
  * add UUID and otime to root of FS_TREE - with the uuid, snapshots will
    be now linked to the toplevel subvol by the parent UUID
  * don't follow symlinks when calculating size
  * pre-create the UUID tree
  * fix --rootdir with selinux enabled
  * dump-tree: add option to print only children nodes of a given block
  * image: handle missing device for RAID1
  * other
  * new tests
  * test script cleanups (quoting, helpers)
  * tool to edit superblocks
  * updated docs
- Add patch: 0001-btrfs-progs-build-fix-static-build.patch
- Add new library packages: libbtrfsutil</changelog>
  <changelog author="dsterba@suse.cz" date="1524484800">- update to version 4.16.1
  * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super,
    btrfs-calc-size
  * sb-mod: new debugging tool to edit superblock items
  * mkfs: detect if thin-provisioned device does not have enough space
  * check: don't try to verify checksums on metadata dump images
  * build: fail documentation build if xmlto is not found
  * build: fix build of btrfs.static
- Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream)
- Update initrd script</changelog>
  <changelog author="jeffm@suse.com" date="1525089600">- Fix building on SLE11:
  * btrfs-progs: convert: fix support for e2fsprogs &lt; 1.42
  * btrfs-progs: build: detect whether -std=gnu90 is supported
  * btrfs-progs: build: autoconf 2.63 compatibility
  * Fixed mismerged addition of libbtrfsutil1 package description
- Added patches:
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1529582400">- update to version 4.17
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
- Removed patches (upstreamed):
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1533470400">- update to version 4.17.1
  * check:
  * add ability to fix wrong ram_bytes for compressed inline files
  * beautify progress output
  * btrfstune: allow to continue uuid change after unclean interruption
  * several fuzz fixes:
  * detect overalpping chunks
  * chunk loading error handling
  * don't crash with unexpected root refs to extents
  * relax option parsing again to allow mixing options and non-options
    arguments
  * fix qgroup rescan status reporting
  * build:
  * drop obsolete dir-test
  * new configure option to disable building of tools
  * add compatibility options --disable-static and --disable-shared
  * other:
  * cleanups and preparatory work
  * new test images
- spec cleanup</changelog>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1610712000">- Add patches to fix the logical-resolve lookup process and to accept the 'ignore
  offsets' kernel feature (bsc#1174206)
  - Add 0001-btrfs-progs-add-LOGICAL_INO_V2-to-ioctl.h.patch
  - Add 0001-btrfs-progs-build-add-libmount-dependency.patch
  - Add 0001-btrfs-progs-inspect-add-support-for-LOGICAL_INO_V2-i.patch
  - Add 0001-btrfs-progs-inspect-increase-logical-resolve-default.patch
  - Add 0002-btrfs-progs-utils-introduce-find_mount_fsroot.patch
  - Add 0003-btrfs-progs-inspect-use-find_mount_fsroot-in-logical.patch</changelog>
</package>
<package pkgid="7bb40255f61c09b838f76d61490b13997ad87a3e489bcb0b07befd72423ea655" name="btrfsprogs" arch="x86_64">
  <version epoch="0" ver="4.19.1" rel="lp152.6.3.1"/>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="dsterba@suse.cz" date="1518782400">- use documentation shipped by upstream tar, reduce dependencies</changelog>
  <changelog author="dsterba@suse.cz" date="1522929600">- update to version 4.16
  * libbtrfsutil - new LGPL library to wrap userspace functionality
  * several 'btrfs' commands converted to use it:
  * properties
  * filesystem sync
  * subvolume set-default/get-default/delete/show/sync
  * python bindings, tests
  * build
  * use configured pkg-config path
  * CI: add python, musl/clang, built dependencies caching
  * convert: build fix for e2fsprogs 1.44+
  * don't install library links with wrong permissions
  * fixes
  * prevent incorrect use of subvol_strip_mountpoint
  * dump-super: don't verify csum for unknown type
  * convert: fix inline extent creation condition
  * check:
  * lowmem: fix false alert for 'data extent backref lost for snapshot'
  * lowmem: fix false alert for orphan inode
  * lowmem: fix false alert for shared prealloc extents
  * mkfs:
  * add UUID and otime to root of FS_TREE - with the uuid, snapshots will
    be now linked to the toplevel subvol by the parent UUID
  * don't follow symlinks when calculating size
  * pre-create the UUID tree
  * fix --rootdir with selinux enabled
  * dump-tree: add option to print only children nodes of a given block
  * image: handle missing device for RAID1
  * other
  * new tests
  * test script cleanups (quoting, helpers)
  * tool to edit superblocks
  * updated docs
- Add patch: 0001-btrfs-progs-build-fix-static-build.patch
- Add new library packages: libbtrfsutil</changelog>
  <changelog author="dsterba@suse.cz" date="1524484800">- update to version 4.16.1
  * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super,
    btrfs-calc-size
  * sb-mod: new debugging tool to edit superblock items
  * mkfs: detect if thin-provisioned device does not have enough space
  * check: don't try to verify checksums on metadata dump images
  * build: fail documentation build if xmlto is not found
  * build: fix build of btrfs.static
- Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream)
- Update initrd script</changelog>
  <changelog author="jeffm@suse.com" date="1525089600">- Fix building on SLE11:
  * btrfs-progs: convert: fix support for e2fsprogs &lt; 1.42
  * btrfs-progs: build: detect whether -std=gnu90 is supported
  * btrfs-progs: build: autoconf 2.63 compatibility
  * Fixed mismerged addition of libbtrfsutil1 package description
- Added patches:
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1529582400">- update to version 4.17
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
- Removed patches (upstreamed):
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1533470400">- update to version 4.17.1
  * check:
  * add ability to fix wrong ram_bytes for compressed inline files
  * beautify progress output
  * btrfstune: allow to continue uuid change after unclean interruption
  * several fuzz fixes:
  * detect overalpping chunks
  * chunk loading error handling
  * don't crash with unexpected root refs to extents
  * relax option parsing again to allow mixing options and non-options
    arguments
  * fix qgroup rescan status reporting
  * build:
  * drop obsolete dir-test
  * new configure option to disable building of tools
  * add compatibility options --disable-static and --disable-shared
  * other:
  * cleanups and preparatory work
  * new test images
- spec cleanup</changelog>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1610712000">- Add patches to fix the logical-resolve lookup process and to accept the 'ignore
  offsets' kernel feature (bsc#1174206)
  - Add 0001-btrfs-progs-add-LOGICAL_INO_V2-to-ioctl.h.patch
  - Add 0001-btrfs-progs-build-add-libmount-dependency.patch
  - Add 0001-btrfs-progs-inspect-add-support-for-LOGICAL_INO_V2-i.patch
  - Add 0001-btrfs-progs-inspect-increase-logical-resolve-default.patch
  - Add 0002-btrfs-progs-utils-introduce-find_mount_fsroot.patch
  - Add 0003-btrfs-progs-inspect-use-find_mount_fsroot-in-logical.patch</changelog>
</package>
<package pkgid="8900cf1fa21d72a2467ad02cc73ca4a13905822085e6ccfe1399754e040f0ec0" name="btrfsprogs-udev-rules" arch="noarch">
  <version epoch="0" ver="4.19.1" rel="lp152.6.3.1"/>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="dsterba@suse.cz" date="1518782400">- use documentation shipped by upstream tar, reduce dependencies</changelog>
  <changelog author="dsterba@suse.cz" date="1522929600">- update to version 4.16
  * libbtrfsutil - new LGPL library to wrap userspace functionality
  * several 'btrfs' commands converted to use it:
  * properties
  * filesystem sync
  * subvolume set-default/get-default/delete/show/sync
  * python bindings, tests
  * build
  * use configured pkg-config path
  * CI: add python, musl/clang, built dependencies caching
  * convert: build fix for e2fsprogs 1.44+
  * don't install library links with wrong permissions
  * fixes
  * prevent incorrect use of subvol_strip_mountpoint
  * dump-super: don't verify csum for unknown type
  * convert: fix inline extent creation condition
  * check:
  * lowmem: fix false alert for 'data extent backref lost for snapshot'
  * lowmem: fix false alert for orphan inode
  * lowmem: fix false alert for shared prealloc extents
  * mkfs:
  * add UUID and otime to root of FS_TREE - with the uuid, snapshots will
    be now linked to the toplevel subvol by the parent UUID
  * don't follow symlinks when calculating size
  * pre-create the UUID tree
  * fix --rootdir with selinux enabled
  * dump-tree: add option to print only children nodes of a given block
  * image: handle missing device for RAID1
  * other
  * new tests
  * test script cleanups (quoting, helpers)
  * tool to edit superblocks
  * updated docs
- Add patch: 0001-btrfs-progs-build-fix-static-build.patch
- Add new library packages: libbtrfsutil</changelog>
  <changelog author="dsterba@suse.cz" date="1524484800">- update to version 4.16.1
  * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super,
    btrfs-calc-size
  * sb-mod: new debugging tool to edit superblock items
  * mkfs: detect if thin-provisioned device does not have enough space
  * check: don't try to verify checksums on metadata dump images
  * build: fail documentation build if xmlto is not found
  * build: fix build of btrfs.static
- Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream)
- Update initrd script</changelog>
  <changelog author="jeffm@suse.com" date="1525089600">- Fix building on SLE11:
  * btrfs-progs: convert: fix support for e2fsprogs &lt; 1.42
  * btrfs-progs: build: detect whether -std=gnu90 is supported
  * btrfs-progs: build: autoconf 2.63 compatibility
  * Fixed mismerged addition of libbtrfsutil1 package description
- Added patches:
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1529582400">- update to version 4.17
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
- Removed patches (upstreamed):
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1533470400">- update to version 4.17.1
  * check:
  * add ability to fix wrong ram_bytes for compressed inline files
  * beautify progress output
  * btrfstune: allow to continue uuid change after unclean interruption
  * several fuzz fixes:
  * detect overalpping chunks
  * chunk loading error handling
  * don't crash with unexpected root refs to extents
  * relax option parsing again to allow mixing options and non-options
    arguments
  * fix qgroup rescan status reporting
  * build:
  * drop obsolete dir-test
  * new configure option to disable building of tools
  * add compatibility options --disable-static and --disable-shared
  * other:
  * cleanups and preparatory work
  * new test images
- spec cleanup</changelog>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1610712000">- Add patches to fix the logical-resolve lookup process and to accept the 'ignore
  offsets' kernel feature (bsc#1174206)
  - Add 0001-btrfs-progs-add-LOGICAL_INO_V2-to-ioctl.h.patch
  - Add 0001-btrfs-progs-build-add-libmount-dependency.patch
  - Add 0001-btrfs-progs-inspect-add-support-for-LOGICAL_INO_V2-i.patch
  - Add 0001-btrfs-progs-inspect-increase-logical-resolve-default.patch
  - Add 0002-btrfs-progs-utils-introduce-find_mount_fsroot.patch
  - Add 0003-btrfs-progs-inspect-use-find_mount_fsroot-in-logical.patch</changelog>
</package>
<package pkgid="4a78f139660f7708332b716cad2a36cc8e6e46316129d9e3dabbef2d3da3b446" name="budgie-calendar-applet" arch="src">
  <version epoch="0" ver="5.2" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1498392000">- initial packaging of version 3.0</changelog>
  <changelog author="avvissu@yandex.by" date="1537963200">- Update to 4.1:
  * Set switches when creating object
- Change in 4.0:
  * Added appdata for solus sc
  * Ported to new BudgiePopover
  * Added custom date format
  * Added about dialog
  * Some fixes and cleanups
  * Sync translations
- Spec file cleanup</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Update to 5.1:
  * Fixed wrong calendar placement in popover
  * Fixed custom format errors (synced with settings now)
  * Fixed date twice
  * Reworked some code &amp; meson files
  * Moved settings to raven
  * Allow to translate schema, plugin &amp; appdata too
  * sync translations
  * Fixed settings sync</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Correct license name</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974402">- Create separate lang package</changelog>
</package>
<package pkgid="8abfee93f08aa0c39e22d9a7615276ce03e3ddc57a396b4248d69c066e46b67d" name="budgie-calendar-applet" arch="x86_64">
  <version epoch="0" ver="5.2" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1498392000">- initial packaging of version 3.0</changelog>
  <changelog author="avvissu@yandex.by" date="1537963200">- Update to 4.1:
  * Set switches when creating object
- Change in 4.0:
  * Added appdata for solus sc
  * Ported to new BudgiePopover
  * Added custom date format
  * Added about dialog
  * Some fixes and cleanups
  * Sync translations
- Spec file cleanup</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Update to 5.1:
  * Fixed wrong calendar placement in popover
  * Fixed custom format errors (synced with settings now)
  * Fixed date twice
  * Reworked some code &amp; meson files
  * Moved settings to raven
  * Allow to translate schema, plugin &amp; appdata too
  * sync translations
  * Fixed settings sync</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Correct license name</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974402">- Create separate lang package</changelog>
</package>
<package pkgid="77fe57f23855509fb8cabd6e5d81f8a3c306c1daf5265a466f35a6315f1b33c2" name="budgie-calendar-applet-lang" arch="noarch">
  <version epoch="0" ver="5.2" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1498392000">- initial packaging of version 3.0</changelog>
  <changelog author="avvissu@yandex.by" date="1537963200">- Update to 4.1:
  * Set switches when creating object
- Change in 4.0:
  * Added appdata for solus sc
  * Ported to new BudgiePopover
  * Added custom date format
  * Added about dialog
  * Some fixes and cleanups
  * Sync translations
- Spec file cleanup</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Update to 5.1:
  * Fixed wrong calendar placement in popover
  * Fixed custom format errors (synced with settings now)
  * Fixed date twice
  * Reworked some code &amp; meson files
  * Moved settings to raven
  * Allow to translate schema, plugin &amp; appdata too
  * sync translations
  * Fixed settings sync</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Correct license name</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974402">- Create separate lang package</changelog>
</package>
<package pkgid="b09409a3049fb646bd862335a47fa1c0fdca57a0bfc8c6816d3a776e8da8061f" name="budgie-desktop" arch="src">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.5.1"/>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
</package>
<package pkgid="1224f1a8620c1d19d829c2e326fc26333fef396fb819fea036647f533052fff3" name="budgie-desktop" arch="x86_64">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.5.1"/>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
</package>
<package pkgid="a56c1de253a298a4152da34018a144aa94cd0f51a9a487c76f5a18fe096d22c6" name="budgie-desktop" arch="src">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.8.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608552000">- Leap 15.3 fixes</changelog>
</package>
<package pkgid="ec9e1cc11cad2eee7b0c53862f69aa47600fbe44b0cdc9534ef4c82fefbfa57f" name="budgie-desktop" arch="x86_64">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.8.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608552000">- Leap 15.3 fixes</changelog>
</package>
<package pkgid="2f297ba15ab4c741353f12053b1b3b14d1eca868d9479cad1c57284725918402" name="budgie-desktop" arch="src">
  <version epoch="0" ver="10.5.1" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1485518400">- Add https://en.opensuse.org/SourceUrls
- Fix standard-dir-owned-by-package rpmlint warnings
- Implement shared library policy</changelog>
  <changelog author="dev+novell@devmotion.de" date="1492776000">- Update to v10.3.1
- See https://github.com/budgie-desktop/budgie-desktop/releases/tag/v10.3.1</changelog>
  <changelog author="mailaender@opensuse.org" date="1496577600">- Add gtk-3.22.14+raven-crash-fix.patch to fix #918</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Redo descriptions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1500724800">- Fix build with meson 0.41 using meson-0.41.patch</changelog>
  <changelog author="matcherapy@gmail.com" date="1500897600">- fix empty rpath 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1502798400">- Update to version 10.4 "Irish Summer"
- Drop upstream gtk-3.22.14+raven-crash-fix.patch
- Drop upstream meson-0.41.patch
- Drop upstream 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1503230400">- Drop sed fix bdugie-desktop typo (resolved upstream)</changelog>
  <changelog author="mailaender@opensuse.org" date="1505736000">- Update pkgconfig libmutter-0 to libmutter-1</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1512043200">- Add fix-meson-build.patch: fixes gvc subproject sandbox issue
  with Meson 0.43.0</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
</package>
<package pkgid="b7abb1b2db5b54ffc83a76bd3de2be52ce21e2b115570cf3ba9d6ebe2474c0e5" name="budgie-desktop" arch="x86_64">
  <version epoch="0" ver="10.5.1" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1485518400">- Add https://en.opensuse.org/SourceUrls
- Fix standard-dir-owned-by-package rpmlint warnings
- Implement shared library policy</changelog>
  <changelog author="dev+novell@devmotion.de" date="1492776000">- Update to v10.3.1
- See https://github.com/budgie-desktop/budgie-desktop/releases/tag/v10.3.1</changelog>
  <changelog author="mailaender@opensuse.org" date="1496577600">- Add gtk-3.22.14+raven-crash-fix.patch to fix #918</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Redo descriptions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1500724800">- Fix build with meson 0.41 using meson-0.41.patch</changelog>
  <changelog author="matcherapy@gmail.com" date="1500897600">- fix empty rpath 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1502798400">- Update to version 10.4 "Irish Summer"
- Drop upstream gtk-3.22.14+raven-crash-fix.patch
- Drop upstream meson-0.41.patch
- Drop upstream 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1503230400">- Drop sed fix bdugie-desktop typo (resolved upstream)</changelog>
  <changelog author="mailaender@opensuse.org" date="1505736000">- Update pkgconfig libmutter-0 to libmutter-1</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1512043200">- Add fix-meson-build.patch: fixes gvc subproject sandbox issue
  with Meson 0.43.0</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
</package>
<package pkgid="12cebcefd595be94f53638a1fe892aafb985920f25528da37804d2f781ea8164" name="budgie-desktop-branding" arch="src">
  <version epoch="0" ver="20200915.1" rel="lp152.2.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Initial packaging version 20200915.1</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600257600">- Fix accidental incorrect macro</changelog>
</package>
<package pkgid="79442c1118aa9e3915c1fc08dd2d47de59a20b3b52947d5c42b757dfa86767be" name="budgie-desktop-branding" arch="src">
  <version epoch="0" ver="20201004.2" rel="lp152.5.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Initial packaging version 20200915.1</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600257600">- Fix accidental incorrect macro</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Prepare for SLE 15 SP3 , presume Leap 15.3 being the same
- Removed unnecessary parts from sed expressions</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1601121600">- Extra prep for SLE 15 SP3</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1601812800">- Update to version 20201004.2:
  * Add upstream branding settings
  * Change archive structure
- Add upstream branding package</changelog>
</package>
<package pkgid="c0ea3de7cf410303f7e05f716b05f570461444b23ef0f1b9ca3fe73715f1b7d2" name="budgie-desktop-branding" arch="src">
  <version epoch="0" ver="20201017.1" rel="lp152.8.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Initial packaging version 20200915.1</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600257600">- Fix accidental incorrect macro</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Prepare for SLE 15 SP3 , presume Leap 15.3 being the same
- Removed unnecessary parts from sed expressions</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1601121600">- Extra prep for SLE 15 SP3</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1601812800">- Update to version 20201004.2:
  * Add upstream branding settings
  * Change archive structure
- Add upstream branding package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1602158400">- Update to version 20201008.1:
  * Add upstream gtk theme settings</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1603108800">- Update to version 20201017.1:
  * Change the priority from 10 to 21</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608897600">- Remove upstream from Backports
- Leap 15.3 fixes</changelog>
</package>
<package pkgid="7d779aa9d074b6fca244eb96e3d140d96da679abcc762a0378d87a92bba856b6" name="budgie-desktop-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="20200915.1" rel="lp152.2.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Initial packaging version 20200915.1</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600257600">- Fix accidental incorrect macro</changelog>
</package>
<package pkgid="cea235acec31437e3780f0e8d49d883513004782de4ce238e327e6b892a75b02" name="budgie-desktop-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="20201004.2" rel="lp152.5.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Initial packaging version 20200915.1</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600257600">- Fix accidental incorrect macro</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Prepare for SLE 15 SP3 , presume Leap 15.3 being the same
- Removed unnecessary parts from sed expressions</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1601121600">- Extra prep for SLE 15 SP3</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1601812800">- Update to version 20201004.2:
  * Add upstream branding settings
  * Change archive structure
- Add upstream branding package</changelog>
</package>
<package pkgid="a0053b9a356bad497803e5d28846b702f33046ccd7389e25327b7613d2bfa632" name="budgie-desktop-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="20201017.1" rel="lp152.8.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Initial packaging version 20200915.1</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600257600">- Fix accidental incorrect macro</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Prepare for SLE 15 SP3 , presume Leap 15.3 being the same
- Removed unnecessary parts from sed expressions</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1601121600">- Extra prep for SLE 15 SP3</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1601812800">- Update to version 20201004.2:
  * Add upstream branding settings
  * Change archive structure
- Add upstream branding package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1602158400">- Update to version 20201008.1:
  * Add upstream gtk theme settings</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1603108800">- Update to version 20201017.1:
  * Change the priority from 10 to 21</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608897600">- Remove upstream from Backports
- Leap 15.3 fixes</changelog>
</package>
<package pkgid="c5751f3fadf0cf6246fcef437780170c4413638b010ff1fa680a242a08cfed24" name="budgie-desktop-branding-upstream" arch="noarch">
  <version epoch="0" ver="20201004.2" rel="lp152.5.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Initial packaging version 20200915.1</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600257600">- Fix accidental incorrect macro</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Prepare for SLE 15 SP3 , presume Leap 15.3 being the same
- Removed unnecessary parts from sed expressions</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1601121600">- Extra prep for SLE 15 SP3</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1601812800">- Update to version 20201004.2:
  * Add upstream branding settings
  * Change archive structure
- Add upstream branding package</changelog>
</package>
<package pkgid="47b55eaed7c530e33afb661d3744a86aeeac7293879d7c10f97f742b415c7f3d" name="budgie-desktop-branding-upstream" arch="noarch">
  <version epoch="0" ver="20201017.1" rel="lp152.8.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Initial packaging version 20200915.1</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600257600">- Fix accidental incorrect macro</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Prepare for SLE 15 SP3 , presume Leap 15.3 being the same
- Removed unnecessary parts from sed expressions</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1601121600">- Extra prep for SLE 15 SP3</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1601812800">- Update to version 20201004.2:
  * Add upstream branding settings
  * Change archive structure
- Add upstream branding package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1602158400">- Update to version 20201008.1:
  * Add upstream gtk theme settings</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1603108800">- Update to version 20201017.1:
  * Change the priority from 10 to 21</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608897600">- Remove upstream from Backports
- Leap 15.3 fixes</changelog>
</package>
<package pkgid="14edd665b1a40dce21088b00fa18a1426177133840b490597630d3d351f8e182" name="budgie-desktop-devel" arch="x86_64">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.5.1"/>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
</package>
<package pkgid="60e01c1042534550568f0c3a91dea432c0851d0cc5b32827daf22dca0bc1fbcd" name="budgie-desktop-devel" arch="x86_64">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.8.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608552000">- Leap 15.3 fixes</changelog>
</package>
<package pkgid="6f4a710230e499d65fe8c8c1ee349dae598f52873f786d1c5d306086c1f6cd4d" name="budgie-desktop-devel" arch="x86_64">
  <version epoch="0" ver="10.5.1" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1485518400">- Add https://en.opensuse.org/SourceUrls
- Fix standard-dir-owned-by-package rpmlint warnings
- Implement shared library policy</changelog>
  <changelog author="dev+novell@devmotion.de" date="1492776000">- Update to v10.3.1
- See https://github.com/budgie-desktop/budgie-desktop/releases/tag/v10.3.1</changelog>
  <changelog author="mailaender@opensuse.org" date="1496577600">- Add gtk-3.22.14+raven-crash-fix.patch to fix #918</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Redo descriptions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1500724800">- Fix build with meson 0.41 using meson-0.41.patch</changelog>
  <changelog author="matcherapy@gmail.com" date="1500897600">- fix empty rpath 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1502798400">- Update to version 10.4 "Irish Summer"
- Drop upstream gtk-3.22.14+raven-crash-fix.patch
- Drop upstream meson-0.41.patch
- Drop upstream 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1503230400">- Drop sed fix bdugie-desktop typo (resolved upstream)</changelog>
  <changelog author="mailaender@opensuse.org" date="1505736000">- Update pkgconfig libmutter-0 to libmutter-1</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1512043200">- Add fix-meson-build.patch: fixes gvc subproject sandbox issue
  with Meson 0.43.0</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
</package>
<package pkgid="443060a5864d569eb84d82b4f6605262f1dbaa5339b9e12f585c00eb1ce5095d" name="budgie-desktop-doc" arch="x86_64">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.5.1"/>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
</package>
<package pkgid="32e1254914dd6f636757dcf45f85ab950f4da9d51d6550e7c061d88b6fb0f9bd" name="budgie-desktop-doc" arch="x86_64">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.8.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608552000">- Leap 15.3 fixes</changelog>
</package>
<package pkgid="0c6e76535cb4815dd61b109f3737a5c45af9ff1e7b17bf55c1d6fe200bf68e00" name="budgie-desktop-doc" arch="x86_64">
  <version epoch="0" ver="10.5.1" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1485518400">- Add https://en.opensuse.org/SourceUrls
- Fix standard-dir-owned-by-package rpmlint warnings
- Implement shared library policy</changelog>
  <changelog author="dev+novell@devmotion.de" date="1492776000">- Update to v10.3.1
- See https://github.com/budgie-desktop/budgie-desktop/releases/tag/v10.3.1</changelog>
  <changelog author="mailaender@opensuse.org" date="1496577600">- Add gtk-3.22.14+raven-crash-fix.patch to fix #918</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Redo descriptions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1500724800">- Fix build with meson 0.41 using meson-0.41.patch</changelog>
  <changelog author="matcherapy@gmail.com" date="1500897600">- fix empty rpath 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1502798400">- Update to version 10.4 "Irish Summer"
- Drop upstream gtk-3.22.14+raven-crash-fix.patch
- Drop upstream meson-0.41.patch
- Drop upstream 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1503230400">- Drop sed fix bdugie-desktop typo (resolved upstream)</changelog>
  <changelog author="mailaender@opensuse.org" date="1505736000">- Update pkgconfig libmutter-0 to libmutter-1</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1512043200">- Add fix-meson-build.patch: fixes gvc subproject sandbox issue
  with Meson 0.43.0</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
</package>
<package pkgid="0562214814827cb04cb0cba43134946f69828fd0aacf22cc3c6098671499a8d7" name="budgie-desktop-lang" arch="noarch">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.5.1"/>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
</package>
<package pkgid="2103b4a5963fbf14341b6f6081807da1db2a32559ee153156ce5130fd4941e89" name="budgie-desktop-lang" arch="noarch">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.8.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608552000">- Leap 15.3 fixes</changelog>
</package>
<package pkgid="c7480718ce0913c9791b350921430fa4b22346c7b4c139cbb095e49ebbb92893" name="budgie-desktop-lang" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1485518400">- Add https://en.opensuse.org/SourceUrls
- Fix standard-dir-owned-by-package rpmlint warnings
- Implement shared library policy</changelog>
  <changelog author="dev+novell@devmotion.de" date="1492776000">- Update to v10.3.1
- See https://github.com/budgie-desktop/budgie-desktop/releases/tag/v10.3.1</changelog>
  <changelog author="mailaender@opensuse.org" date="1496577600">- Add gtk-3.22.14+raven-crash-fix.patch to fix #918</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Redo descriptions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1500724800">- Fix build with meson 0.41 using meson-0.41.patch</changelog>
  <changelog author="matcherapy@gmail.com" date="1500897600">- fix empty rpath 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1502798400">- Update to version 10.4 "Irish Summer"
- Drop upstream gtk-3.22.14+raven-crash-fix.patch
- Drop upstream meson-0.41.patch
- Drop upstream 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1503230400">- Drop sed fix bdugie-desktop typo (resolved upstream)</changelog>
  <changelog author="mailaender@opensuse.org" date="1505736000">- Update pkgconfig libmutter-0 to libmutter-1</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1512043200">- Add fix-meson-build.patch: fixes gvc subproject sandbox issue
  with Meson 0.43.0</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
</package>
<package pkgid="760b7ea0661eff85f1c9460e542bcfba9aefd88a46009da55a4864750d638940" name="budgie-haste-applet" arch="src">
  <version epoch="0" ver="20200228" rel="lp152.2.1"/>
  <changelog author="avvissu@yandex.by" date="1537963200">- Initial package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Update to git 20200228
  * Fix GTK+3.24 compilation errors</changelog>
</package>
<package pkgid="0f53a71334a48b6989c6deb7530376113050fa27ac08d95a4f1915327fc9840c" name="budgie-haste-applet" arch="x86_64">
  <version epoch="0" ver="20200228" rel="lp152.2.1"/>
  <changelog author="avvissu@yandex.by" date="1537963200">- Initial package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Update to git 20200228
  * Fix GTK+3.24 compilation errors</changelog>
</package>
<package pkgid="aeaaac8dcc2da66c75e5ec849d743d6b2683ae1e36f1dffa54c52e3144fb379b" name="budgie-haste-applet-lang" arch="noarch">
  <version epoch="0" ver="20200228" rel="lp152.2.1"/>
  <changelog author="avvissu@yandex.by" date="1537963200">- Initial package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Update to git 20200228
  * Fix GTK+3.24 compilation errors</changelog>
</package>
<package pkgid="9ff7d68079f76a41fe2ed513d1945aa809818a7d4c34ce072ba7812730338dee" name="budgie-screensaver" arch="src">
  <version epoch="0" ver="20190923" rel="lp152.2.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598616000">- Initial packaging version 20190923
- Add patches from gnome-screensaver in openSUSE 12.3 :)
  * gnome-screensaver-suse-pam.patch
  * gnome-screensaver-helper.patch (bgo#640647)
  * gnome-screensaver-xvkbd-on-lock.patch
  * gnome-screensaver-multihead-unlock.patch (bnc#444157,bgo#455118)
- Add remove-old-automake-macros.patch: fix Automake problems</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
</package>
<package pkgid="5ce6aa6a1dbf90217dc63fd091d0cc8f6b07eb5707d0e8a13ef22c13d8eb1f70" name="budgie-screensaver" arch="x86_64">
  <version epoch="0" ver="20190923" rel="lp152.2.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598616000">- Initial packaging version 20190923
- Add patches from gnome-screensaver in openSUSE 12.3 :)
  * gnome-screensaver-suse-pam.patch
  * gnome-screensaver-helper.patch (bgo#640647)
  * gnome-screensaver-xvkbd-on-lock.patch
  * gnome-screensaver-multihead-unlock.patch (bnc#444157,bgo#455118)
- Add remove-old-automake-macros.patch: fix Automake problems</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
</package>
<package pkgid="a55ef30560d1c84a92f17423d7db64a00254b61651cfde12f1feddc0ba538dc3" name="budgie-screensaver-lang" arch="noarch">
  <version epoch="0" ver="20190923" rel="lp152.2.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598616000">- Initial packaging version 20190923
- Add patches from gnome-screensaver in openSUSE 12.3 :)
  * gnome-screensaver-suse-pam.patch
  * gnome-screensaver-helper.patch (bgo#640647)
  * gnome-screensaver-xvkbd-on-lock.patch
  * gnome-screensaver-multihead-unlock.patch (bnc#444157,bgo#455118)
- Add remove-old-automake-macros.patch: fix Automake problems</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
</package>
<package pkgid="91853d9dd7a6d770394d3f8c42aeb7a608eb105cbcc245ec4b1a925791dc6c7e" name="budgie-screenshot-applet" arch="src">
  <version epoch="0" ver="20200503" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1498392000">- initial packaging of version 0.4.2</changelog>
  <changelog author="matcherapy@gmail.com" date="1501675200">- just fix typo in summary (calendar-&gt; screenshot)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Update to git 20200503
  * Fixes compilation errors with Vala 0.44
- Create separate lang package
- Correct license name</changelog>
</package>
<package pkgid="e24d7ed888c4851fbd43a5e91a91ce5fc8f5c27e4706b8e22a3010114e5990c0" name="budgie-screenshot-applet" arch="x86_64">
  <version epoch="0" ver="20200503" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1498392000">- initial packaging of version 0.4.2</changelog>
  <changelog author="matcherapy@gmail.com" date="1501675200">- just fix typo in summary (calendar-&gt; screenshot)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Update to git 20200503
  * Fixes compilation errors with Vala 0.44
- Create separate lang package
- Correct license name</changelog>
</package>
<package pkgid="180c008a0e625a7c4891a5b375b34685beccdfab29b32ddb890328b71f1ea25a" name="budgie-screenshot-applet-lang" arch="noarch">
  <version epoch="0" ver="20200503" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1498392000">- initial packaging of version 0.4.2</changelog>
  <changelog author="matcherapy@gmail.com" date="1501675200">- just fix typo in summary (calendar-&gt; screenshot)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Update to git 20200503
  * Fixes compilation errors with Vala 0.44
- Create separate lang package
- Correct license name</changelog>
</package>
<package pkgid="775555a7f9c98cb16d66e778a491d7bb0e7af4dd03d2841b92fae162625be0ed" name="build" arch="noarch">
  <version epoch="0" ver="20210120" rel="lp152.2.3.1"/>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="404c559fb9bf5ca06b9bcc3d978c3288383f28b9219654b54f7d692a3722462c" name="build" arch="src">
  <version epoch="0" ver="20210120" rel="lp152.2.3.1"/>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="0bf8b21cc6685605833fd9b7f6513f40c2d22d31c59a7b563c29332d5513e280" name="build-initvm-i586" arch="noarch">
  <version epoch="0" ver="20210120" rel="lp152.2.3.1"/>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="0bd042dd23b694da6bcd9617c5fd0f67465485cf914b859e0f2590488ef03157" name="build-initvm-x86_64" arch="noarch">
  <version epoch="0" ver="20210120" rel="lp152.2.3.1"/>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="598eca7e25ba9541e9558cc37bfc42cfd40ee36c03e7be63104255d10402ae16" name="build-mkbaselibs" arch="noarch">
  <version epoch="0" ver="20210120" rel="lp152.2.3.1"/>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="6f4af35564313bc9530cbd4801ed1849f1a2423450f928e9017506cc3f2e1042" name="build-mkdrpms" arch="noarch">
  <version epoch="0" ver="20210120" rel="lp152.2.3.1"/>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="71b5755ea1ef7f977937da6c3515547217cbe268460b65e31753056a5f1a2530" name="buildah" arch="src">
  <version epoch="0" ver="1.19.2" rel="lp152.2.3.1"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568376000">- Update to v1.11.1
  * Add --devices flag to bud and from
  * Add support for /run/.containerenv
  * Allow mounts.conf entries for equal source and destination paths
  * Fix label and annotation for 1-line Dockerfiles
  * Preserve file and directory mount permissions
  * Replace --debug=false with --log-level=error
  * Set TMPDIR to /var/tmp by default
  * Truncate output of too long image names
  * Ignore EmptyLayer if Squash is set</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1569240000">- Update to v1.11.2
  * Add some cleanup code
  * Move devices code to unit specific directory.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1570449600">- Update to v1.11.3
  * Add cgroups2
  * Add support for retrieving context from stdin "-"
  * Added tutorial on how to include Buildah as library
  * Fix --build-args handling
  * Print build 'STEP' line to stdout, not stderr
  * Use Containerfile by default</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1572350400">- Update to v1.11.4
  * buildah: add a "manifest" command
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573560000">- Update to v1.11.5
  * buildah: add "manifest" command
  * pkg/supplemented: add a package for grouping images together
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * version: also note the version of containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1575547200">- Update to v1.11.6
  * Handle missing equal sign in --from and --chown flags
    for COPY/ADD
  * bud COPY does not download URL
  * Fix .dockerignore exclude regression
  * commit(docker): always set ContainerID and ContainerConfig
  * Touch up commit man page image parameter
  * Add builder identity annotations.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Update to v1.12.0
  * Allow ADD to use http src
  * imgtype: reset storage opts if driver overridden
  * Start using containers/common
  * overlay.bats typo: fuse-overlays should be fuse-overlayfs
  * chroot: Unmount with MNT_DETACH instead of UnmountMountpoints()
  * bind: don't complain about missing mountpoints
  * imgtype: check earlier for expected manifest type
  * Add history names support</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579089600">- Update to v1.13.1
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581595200">- Update to v1.14.0
  * getDateAndDigestAndSize(): use manifest.Digest
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * parse: don't complain about not being able to rename something
    to itself
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Add --sign-by to bud/commit/push, --remove-signatures for
    pull/push
  * Add support for containers.conf
  * manifest push: add --format option</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1583323200">- Update to v1.14.2
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * Improve remote manifest retrieval
  * Correct a couple of incorrect format specifiers
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $
  * getDateAndDigestAndSize(): handle creation time not being set
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * pull/from/commit/push: retry on most failures
  * Repair buildah so it can use containers.conf on the server side
  * Fixing formatting &amp; build instructions
  * Fix XDG_RUNTIME_DIR for authfile
  * Show validation command-line</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585310400">- Update to v1.14.4
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Preserve volume uid and gid through subsequent commands
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585569600">- Update to v1.14.5
  * Revert FIPS mode change</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1586174400">- Update to v1.14.6
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1593000000">- Update to v1.15.0
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * fix lighttpd example
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Add preliminary profiling support to the CLI
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Return exit code from failed containers
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Remove warning for systemd inside of container</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1596456000">- Update to v1.15.1
  * Mask over the /sys/fs/selinux in mask branch
  * chroot: do not use setgroups if it is blocked
  * chroot, run: not fail on bind mounts from /sys
  * Allow "readonly" as alias to "ro" in mount options
  * Add VFS additional image store to container
  * vendor golang.org/x/text@v0.3.3
  * Make imagebuildah.BuildOptions.Architecture/OS optional</changelog>
  <changelog author="Flavio Castelli &lt;fcastelli@suse.com&gt;" date="1601467200">- Update to v1.16.2
  * fix build on 32bit arches
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1604404800">- Update to v1.17.0 (bsc#1165184)
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong containers/podman#7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with make nixpkgs
  * Set directory ownership when copied with ID mapping
  * build(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0
  * build(deps): bump github.com/containers/common from 0.23.0 to 0.24.0
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with make nixpkgs
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of manifest add sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update manifest add man page
  * Extend flags of manifest add
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * CI: expand cross-compile checks
- SLE: Remove unneeded patch: CVE-2019-10214.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1606737600">- added cni to requires as its needed for buildah to run</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.17.1:
  * tag v1.17.1
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * copier: try to force loading of nsswitch modules before chroot()
  * ADD: handle --chown on URLs
  * imagebuildah: cache should take image format into account
  * Update CI configuration for the release-1.17 branch</changelog>
  <changelog author="dmueller@suse.com" date="1611316800">- Update to version 1.19.2:
  * Update vendor of containers/storage and containers/common
  * Buildah inspect should be able to inspect manifests
  * Make buildah push support pushing manifests lists and digests
  * Fix handling of TMPDIR environment variable
  * Add support for --manifest flags
  * Upper directory should match mode of destination directory
  * Only grab the OS, Arch if the user actually specified them
  * Use --arch and --os and --variant options to select architecture and os
  * Cirrus: Track libseccomp and golang version
  * copier.PutOptions: add an "IgnoreDevices" flag
  * fix: `rmi --prune` when parent image is in store.
  * build(deps): bump github.com/containers/storage from 1.24.3 to 1.24.4
  * build(deps): bump github.com/containers/common from 0.31.1 to 0.31.2
  * Allow users to specify stdin into containers
  * Drop log message on failure to mount on /sys file systems to info
  * Spelling
  * SELinux no longer requires a tag.
  * build(deps): bump github.com/opencontainers/selinux from 1.6.0 to 1.8.0
  * build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1
  * Update nix pin with `make nixpkgs`
  * Switch references of /var/run -&gt; /run
  * Allow FROM to be overriden with from option
  * copier: don't assume we can chroot() on Unixy systems
  * copier: add PutOptions.NoOverwriteDirNonDir, Get/PutOptions.Rename
  * copier: handle replacing directories with not-directories
  * copier: Put: skip entries with zero-length names
  * build(deps): bump github.com/containers/storage from 1.24.2 to 1.24.3
  * Add U volume flag to chown source volumes
  * Turn off PRIOR_UBUNTU Test until vm is updated
  * pkg, cli: rootless uses correct isolation
  * build(deps): bump github.com/onsi/gomega from 1.10.3 to 1.10.4
  * update installation doc to reflect current status
  * Move away from using docker.io
  * enable short-name aliasing
  * build(deps): bump github.com/containers/storage from 1.24.1 to 1.24.2
  * build(deps): bump github.com/containers/common from 0.30.0 to 0.31.0
  * Throw errors when using bogus --network flags
  * pkg/supplemented test: replace our null blobinfocache
  * build(deps): bump github.com/containers/common from 0.29.0 to 0.30.0
  * inserts forgotten quotation mark
  * Not prefer use local image create/add manifest
  * Add container information to .containerenv
  * Add --ignorefile flag to use alternate .dockerignore flags
  * Add a source debug build
  * Fix crash on invalid filter commands
  * build(deps): bump github.com/containers/common from 0.27.0 to 0.29.0
  * Switch to using containers/common pkg's
  * fix: non-portable shebang #2812
  * Remove copy/paste errors that leaked `Podman` into man pages.
  * Add suggests cpp to spec file
  * Apply suggestions from code review
  * update docs for debian testing and unstable
  * imagebuildah: disable pseudo-terminals for RUN
  * Compute diffID for mapped-layer at creating image source
  * intermediateImageExists: ignore images whose history we can't read
  * Bump to v1.19.0-dev
  * build(deps): bump github.com/containers/common from 0.26.3 to 0.27.0
  * Fix testing error caused by simultanious merge
  * Vendor in containers/storage v1.24.0
  * short-names aliasing
  * Add --policy flag to buildah pull
  * Stop overwrapping and stuttering
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * Run: don't forcibly disable UTS namespaces in rootless mode
  * test: ensure non-directory in a Dockerfile path is handled correctly
  * Add a few tests for `pull` command
  * Fix buildah config --cmd to handle array
  * build(deps): bump github.com/containers/storage from 1.23.8 to 1.23.9
  * Fix NPE when Dockerfile path contains non-directory entries
  * Update buildah bud man page from podman build man page
  * Move declaration of decryption-keys to common cli
  * Run: correctly call copier.Mkdir
  * util: digging UID/GID out of os.FileInfo should work on Unix
  * imagebuildah.getImageTypeAndHistoryAndDiffIDs: cache results
  * Verify userns-uid-map and userns-gid-map input
  * Use CPP, CC and flags in dep check scripts
  * Avoid overriding LDFLAGS in Makefile
  * ADD: handle --chown on URLs
  * Update nix pin with `make nixpkgs`
  * (*Builder).Run: MkdirAll: handle EEXIST error
  * copier: try to force loading of nsswitch modules before chroot()
  * fix MkdirAll usage
  * build(deps): bump github.com/containers/common from 0.26.2 to 0.26.3
  * build(deps): bump github.com/containers/storage from 1.23.7 to 1.23.8
  * Use osusergo build tag for static build
  * imagebuildah: cache should take image format into account
  * Bump to v1.18.0-dev</changelog>
</package>
<package pkgid="f78b5c6813496a29e726fa1fc8d014ead4c51faa10e9550d5025453baa6b9d32" name="buildah" arch="x86_64">
  <version epoch="0" ver="1.19.2" rel="lp152.2.3.1"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568376000">- Update to v1.11.1
  * Add --devices flag to bud and from
  * Add support for /run/.containerenv
  * Allow mounts.conf entries for equal source and destination paths
  * Fix label and annotation for 1-line Dockerfiles
  * Preserve file and directory mount permissions
  * Replace --debug=false with --log-level=error
  * Set TMPDIR to /var/tmp by default
  * Truncate output of too long image names
  * Ignore EmptyLayer if Squash is set</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1569240000">- Update to v1.11.2
  * Add some cleanup code
  * Move devices code to unit specific directory.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1570449600">- Update to v1.11.3
  * Add cgroups2
  * Add support for retrieving context from stdin "-"
  * Added tutorial on how to include Buildah as library
  * Fix --build-args handling
  * Print build 'STEP' line to stdout, not stderr
  * Use Containerfile by default</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1572350400">- Update to v1.11.4
  * buildah: add a "manifest" command
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573560000">- Update to v1.11.5
  * buildah: add "manifest" command
  * pkg/supplemented: add a package for grouping images together
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * version: also note the version of containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1575547200">- Update to v1.11.6
  * Handle missing equal sign in --from and --chown flags
    for COPY/ADD
  * bud COPY does not download URL
  * Fix .dockerignore exclude regression
  * commit(docker): always set ContainerID and ContainerConfig
  * Touch up commit man page image parameter
  * Add builder identity annotations.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Update to v1.12.0
  * Allow ADD to use http src
  * imgtype: reset storage opts if driver overridden
  * Start using containers/common
  * overlay.bats typo: fuse-overlays should be fuse-overlayfs
  * chroot: Unmount with MNT_DETACH instead of UnmountMountpoints()
  * bind: don't complain about missing mountpoints
  * imgtype: check earlier for expected manifest type
  * Add history names support</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579089600">- Update to v1.13.1
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1581595200">- Update to v1.14.0
  * getDateAndDigestAndSize(): use manifest.Digest
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * parse: don't complain about not being able to rename something
    to itself
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Add --sign-by to bud/commit/push, --remove-signatures for
    pull/push
  * Add support for containers.conf
  * manifest push: add --format option</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1583323200">- Update to v1.14.2
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * Improve remote manifest retrieval
  * Correct a couple of incorrect format specifiers
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $
  * getDateAndDigestAndSize(): handle creation time not being set
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * pull/from/commit/push: retry on most failures
  * Repair buildah so it can use containers.conf on the server side
  * Fixing formatting &amp; build instructions
  * Fix XDG_RUNTIME_DIR for authfile
  * Show validation command-line</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585310400">- Update to v1.14.4
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Preserve volume uid and gid through subsequent commands
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585569600">- Update to v1.14.5
  * Revert FIPS mode change</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1586174400">- Update to v1.14.6
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1593000000">- Update to v1.15.0
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * fix lighttpd example
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Add preliminary profiling support to the CLI
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Return exit code from failed containers
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Remove warning for systemd inside of container</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1596456000">- Update to v1.15.1
  * Mask over the /sys/fs/selinux in mask branch
  * chroot: do not use setgroups if it is blocked
  * chroot, run: not fail on bind mounts from /sys
  * Allow "readonly" as alias to "ro" in mount options
  * Add VFS additional image store to container
  * vendor golang.org/x/text@v0.3.3
  * Make imagebuildah.BuildOptions.Architecture/OS optional</changelog>
  <changelog author="Flavio Castelli &lt;fcastelli@suse.com&gt;" date="1601467200">- Update to v1.16.2
  * fix build on 32bit arches
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1604404800">- Update to v1.17.0 (bsc#1165184)
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong containers/podman#7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with make nixpkgs
  * Set directory ownership when copied with ID mapping
  * build(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0
  * build(deps): bump github.com/containers/common from 0.23.0 to 0.24.0
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with make nixpkgs
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of manifest add sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update manifest add man page
  * Extend flags of manifest add
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * CI: expand cross-compile checks
- SLE: Remove unneeded patch: CVE-2019-10214.patch</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1606737600">- added cni to requires as its needed for buildah to run</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.17.1:
  * tag v1.17.1
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * copier: try to force loading of nsswitch modules before chroot()
  * ADD: handle --chown on URLs
  * imagebuildah: cache should take image format into account
  * Update CI configuration for the release-1.17 branch</changelog>
  <changelog author="dmueller@suse.com" date="1611316800">- Update to version 1.19.2:
  * Update vendor of containers/storage and containers/common
  * Buildah inspect should be able to inspect manifests
  * Make buildah push support pushing manifests lists and digests
  * Fix handling of TMPDIR environment variable
  * Add support for --manifest flags
  * Upper directory should match mode of destination directory
  * Only grab the OS, Arch if the user actually specified them
  * Use --arch and --os and --variant options to select architecture and os
  * Cirrus: Track libseccomp and golang version
  * copier.PutOptions: add an "IgnoreDevices" flag
  * fix: `rmi --prune` when parent image is in store.
  * build(deps): bump github.com/containers/storage from 1.24.3 to 1.24.4
  * build(deps): bump github.com/containers/common from 0.31.1 to 0.31.2
  * Allow users to specify stdin into containers
  * Drop log message on failure to mount on /sys file systems to info
  * Spelling
  * SELinux no longer requires a tag.
  * build(deps): bump github.com/opencontainers/selinux from 1.6.0 to 1.8.0
  * build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1
  * Update nix pin with `make nixpkgs`
  * Switch references of /var/run -&gt; /run
  * Allow FROM to be overriden with from option
  * copier: don't assume we can chroot() on Unixy systems
  * copier: add PutOptions.NoOverwriteDirNonDir, Get/PutOptions.Rename
  * copier: handle replacing directories with not-directories
  * copier: Put: skip entries with zero-length names
  * build(deps): bump github.com/containers/storage from 1.24.2 to 1.24.3
  * Add U volume flag to chown source volumes
  * Turn off PRIOR_UBUNTU Test until vm is updated
  * pkg, cli: rootless uses correct isolation
  * build(deps): bump github.com/onsi/gomega from 1.10.3 to 1.10.4
  * update installation doc to reflect current status
  * Move away from using docker.io
  * enable short-name aliasing
  * build(deps): bump github.com/containers/storage from 1.24.1 to 1.24.2
  * build(deps): bump github.com/containers/common from 0.30.0 to 0.31.0
  * Throw errors when using bogus --network flags
  * pkg/supplemented test: replace our null blobinfocache
  * build(deps): bump github.com/containers/common from 0.29.0 to 0.30.0
  * inserts forgotten quotation mark
  * Not prefer use local image create/add manifest
  * Add container information to .containerenv
  * Add --ignorefile flag to use alternate .dockerignore flags
  * Add a source debug build
  * Fix crash on invalid filter commands
  * build(deps): bump github.com/containers/common from 0.27.0 to 0.29.0
  * Switch to using containers/common pkg's
  * fix: non-portable shebang #2812
  * Remove copy/paste errors that leaked `Podman` into man pages.
  * Add suggests cpp to spec file
  * Apply suggestions from code review
  * update docs for debian testing and unstable
  * imagebuildah: disable pseudo-terminals for RUN
  * Compute diffID for mapped-layer at creating image source
  * intermediateImageExists: ignore images whose history we can't read
  * Bump to v1.19.0-dev
  * build(deps): bump github.com/containers/common from 0.26.3 to 0.27.0
  * Fix testing error caused by simultanious merge
  * Vendor in containers/storage v1.24.0
  * short-names aliasing
  * Add --policy flag to buildah pull
  * Stop overwrapping and stuttering
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * Run: don't forcibly disable UTS namespaces in rootless mode
  * test: ensure non-directory in a Dockerfile path is handled correctly
  * Add a few tests for `pull` command
  * Fix buildah config --cmd to handle array
  * build(deps): bump github.com/containers/storage from 1.23.8 to 1.23.9
  * Fix NPE when Dockerfile path contains non-directory entries
  * Update buildah bud man page from podman build man page
  * Move declaration of decryption-keys to common cli
  * Run: correctly call copier.Mkdir
  * util: digging UID/GID out of os.FileInfo should work on Unix
  * imagebuildah.getImageTypeAndHistoryAndDiffIDs: cache results
  * Verify userns-uid-map and userns-gid-map input
  * Use CPP, CC and flags in dep check scripts
  * Avoid overriding LDFLAGS in Makefile
  * ADD: handle --chown on URLs
  * Update nix pin with `make nixpkgs`
  * (*Builder).Run: MkdirAll: handle EEXIST error
  * copier: try to force loading of nsswitch modules before chroot()
  * fix MkdirAll usage
  * build(deps): bump github.com/containers/common from 0.26.2 to 0.26.3
  * build(deps): bump github.com/containers/storage from 1.23.7 to 1.23.8
  * Use osusergo build tag for static build
  * imagebuildah: cache should take image format into account
  * Bump to v1.18.0-dev</changelog>
</package>
<package pkgid="72f1f0013fe847a51ee7261ddac1c7a5bd8925cb8c650230161a9427758cb539" name="busybox" arch="i586">
  <version epoch="0" ver="1.26.2" rel="lp152.5.3.1"/>
  <changelog author="olaf@aepfle.de" date="1412856000">- Remove mkinitrd scripts</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 1.23.2
  * for a full list of changes see http://www.busybox.net/news.html
- Cleaned up spec file with spec-cleaner
- Refreshed patches</changelog>
  <changelog author="p.drouand@gmail.com" date="1451822400">- Update to version 1.24.1
  * for a full list of changes see http://www.busybox.net/news.html
- Refresh busybox.install.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1457006400">- Disable build timestamp</changelog>
  <changelog author="astieger@suse.com" date="1478001600">- update to 1.25.1:
  * fixes for hush, gunzip, ip route, ntpd
- includes changes from 1.25.0:
  * many added and expanded implementations of command options
- includes changes from 1.24.2:
  * fixes for build system (static build with glibc fixed),
    truncate, gunzip and unzip.</changelog>
  <changelog author="astieger@suse.com" date="1498996800">- update to 1.26.2:
  * many updates and fixes to individual tools</changelog>
  <changelog author="kukuk@suse.de" date="1510315200">- Build against libtirpc in preparation of deprecating sunrpc from
  glibc</changelog>
  <changelog author="jjolly@suse.com" date="1534939200">- Enabled functionality within busybox for warewulf compatibility
  * CONFIG_FEATURE_REMOTE_LOG
  * CONFIG_DEPMOD
  * CONFIG_TAC</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1621598400">- stime has been removed from glibc https://bugs.gentoo.org/708350
  * fix-stime-usage.patch</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1634040000">- CVE-2021-28831 (bsc#1184522) Add:
  * gunzip-fix-from-gzip-1.3.12-for-gzip-file-with-all-zero-length-codes.patch
  * gzip-code-shrink-1.patch
  * gzip-code-shrink-3.patch
  * gunzip-fix-incorrect-decoding-of-fixed-inflate-blocks.patch
  decompress_gunzip-Fix-DoS-if-gzip-is-corrupt.patch
- CVE-2018-20679 (bsc#1121426) Add:
  * udhcpc-check-that-4-byte-options-are-indeed-4-byte-closes-11506.patch
  * udhcpc-when-decoding-DHCP_SUBNET-ensure-it-is-4-bytes-long.patch
- CVE-2018-1000517 (bsc#1099260) Add:
  * wget-add-support-for-S-server-response.patch
  * wget-more-thorough-sanitization-of-other-side-s-data.patch
  * wget-check-chunk-length-for-overflowing-off_t.patch
- CVE-2011-5325 (bsc#951562) Add:
  * tar-postpone-creation-of-symlinks-with-suspicious-targets.-Closes-8411.patch
  * unzip-properly-use-CDF-to-find-compressed-files.-Closes-9536.patch
  * unzip-remove-now-pointless-lseek-which-returns-current-position.patch
  * unzip-do-not-use-CDF.extra_len-read-local-file-header.-Closes-9536.patch
  * unzip-optional-support-for-bzip2-and-lzma.patch
  * unzip-match-Defl-display-with-info-zip-cosmetic-code-shuffling.patch
  * unzip-support-symlinks.-Closes-10031.patch
  * libarchive-do-not-extract-unsafe-symlinks-unless-EXTRACT_UNSAFE_SYMLINKS-1.patch
  * unzip-robustify-overwrite-checks.patch
  * unzip-implement-j-closes-9126.patch
  * tar-unzip-postpone-creation-of-symlinks-with-suspicious-targets.patch
- CVE-2018-1000500 (bsc#1099263) Add:
  * wget-emit-a-message-that-certificate-verification-is-not-implemented.patch
  * wget-implement-TLS-verification-with-ENABLE_FEATURE_WGET_OPENSSL.patch</changelog>
</package>
<package pkgid="6a4f5ce17440d39079020848b05cfc0561bf5f8d5840c2bd255cb0417d80c2c7" name="busybox" arch="src">
  <version epoch="0" ver="1.26.2" rel="lp152.5.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro, set HOSTCC</changelog>
  <changelog author="ro@suse.de" date="1334059200">- update to 1.19.4
  - fix getty, mdev, modinfo and wget
- update to 1.19.3
  - fix chpasswd, crond, inetd, syslogd, tail, tftp
- update to 1.19.2
  - fix ash/hush, cttyhack, find, grep, less, patch, sed, top,
    uncompress
- update to 1.19.0:
  - countless fixes in all utility programs, please see
    http://www.busybox.net/ for details
- remove obsolete patches previously marked as upstreamed</changelog>
  <changelog author="ro@suse.de" date="1334059201">- busybox-1.19.4-typedef_umode_t.patch:
  fix compile as umode_t is only defined with KERNEL and is
  used in header linux/linux/ext2_fs.h</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1338984000">- busybox-1.19.4-ext2fs_h.diff:
  more complete fix for latest ext2_fs.h breakage from busybox git,
  drop busybox-1.19.4-typedef_umode_t.patch</changelog>
  <changelog author="aj@suse.de" date="1342612800">- Add missing sys/resource include (glibc 2.16)</changelog>
  <changelog author="lnussel@suse.de" date="1343822400">- fix path in busybox.install (bnc#680153)</changelog>
  <changelog author="p.drouand@gmail.com" date="1355054400">- Update to 1.20.2 (Bug fix release):
  * fix for variable expansion in redirection
  * fix for "pre-up" and "pre-down" handling
  * fixes for compressed man pages handling
  * important fix! due to misplaced s_mkfs_time field, ext4 driver
    couldn't mount our images
  * fix for getting uptime on non-Linux platforms
  * fix base-256 decoding
- Remove busybox-1.19.4-ext2fs_h.diff: fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.21.1
  + fixes for ntfs detection (big-endian fix)
  + xz decompression of concatenated streams
  + mdev acquired a [ENV=regex;] extension instead of undocumented
    subsystem match hack it used to have prior to 1.21.x.
- Changes from 1.21.0
  + udhcpc: gracefully handle packets with CHECKSUM_PARTIAL
  + ifupdown: improve compatibility with Debian
  + get_linux_version_code: don't fail on Linux version strings
    like "3.0-foo"
  + build system: fix build failure when only gunzip is selected
  + CONFIG_PID_FILE_PATH: new configuration option for pidfile paths
  + declare strings with ALIGN1, as appropriate
  + nanddump: use the right operator of logic AND
  + nanddump: skip bad blocks when instructed to do so
  + nanddump: invert the meaning of the -o parameter to match upstream
  + mount: fix -o user=foo mishandling, fix unc= generation, add prefixpath=
  + build system: fix build of kconfig on Darwin
  + tar: support -J, --xz explicit compression option
  + simplify copyright/license notice that appears in the binary
  + mdev: tell kernel that we didn't find the firmware
  + lineedit: fix Alt-D when cursor==0
  + lineedit: histfile can get emptied when CONFIG_FEATURE_EDITING_SAVE_ON_EXIT=y
  + build system: stop .eh_frame generation
  + build system: fix build failure when compressed help is selected, but bz2 compression is not
  + scripts/kconfig/mconf: work on systems w/o SIGWINCH
  + platform.h: disable ALIGNn macros for s390[x]
  + adduser: install to /usr, not /, like all other similar tools
  + ash: fix "read -s" + ^C. Closes 5504
  + ash: fix a bug in &gt;${varexp} handling. Closes 5282
  + ash: implement export -n
  + ash: revert wrong "fix" for an apparent memory leak. Closes 5822
  + awk: fix FS assignment behavior. Closes 5108
  + awk: make -F STR interpret escape sequences. Closes 5126
  + brctl: fix build failure by s/strtotimeval/bb_strtotimeval/ (android has strtotimeval)
  + busybox: tweak help text and copyright year
  + decompress_uncompress: comment out debug printout on corrupted data
  + decompress_uncompress: move 'code' variable into loop - sole user
  + dhcpd: write lease file on exit
  + dpkg: fix creation of .list files (were empty since b768aeb). Closes 5324
  + du: document incompatibility with standard tool
  + examples/mdev_fat.conf: small addition
  + find: if DESKTOP=y, support -wholename (synonym for -path)
  + find: make -mindepth N -xdev correctly stop on mountpoints
  + ftpd: fix MDTM's month value. Closes 5336
  + ftpd: free allocated string on error path
  + getty: fix for NOCTTY killing us with SIGHUP
  + grep: fix grep -Fw not respecting the -w option. Closes 5792
  + ifconfig: do not accept "ifconfig eth0 up 1.2.3.4/17" (ip with mask). Closes 5786
  + libbb: correctness/size tweaks in signal-related helpers
  + lineedit: in !EDITING config, return -1 on fgets error
  + login: increase login name size limit from 32 to 64
  + lpr: don't send 0-byte print jobs (compat)
  + man: fix handling of gzipped manpages
  + mdev: add support for $DEVNAME and /dev/mdev.log debug aid
  + mdev: fix mode of dir1 in =dir1/dir2/file rule
  + mdev: remove undocumented subsystem/devname matching hack
  + mdev: when found, print major,minor into mdev.log
  + modprobe_small: make rmmod to NOT remove dependencies. Closes 5162
  + mount: do not pass "comment=ANYTHING" option to kernel. Closes 5240
  + mount: fix the wrongly stored fs creation time
  + mount: set up RO loop device if mount -o ro. Closes 4784
  + mount: support strictatime option. Closes 5240
  + ntpd: on time step, kill all outstanding replies from other peers
  + sed: fix handling of s/// which has empty matches
  + sed: fix zero chars match/replace
  + sha3: make size/speed optimization decision configurable
  + syslogd: do not segfault on parse error when using default config. Closes 5762
  + telnet: convert CR -&gt; CR LF, not CR -&gt; CR NUL when sending data to server
  + telnet: convert Enter -&gt; CR LF in line mode too
  + tftpd: fix -u USER to work with chroot. Closes 5348
  + top/ps: argv0:"gdm-session-worker [pam/gdm-password]" == comm:"gdm-session-wor"
  + top: do not touch stdin if -b
  + top: fix "last CPU" parsing
  + top: implement scrolling up/down (_very_ useful)
  + udhcp[cd]: fix binding to network aliases. Closes 5432, 5438
  + udhcpc: make -O &lt;numeric_opt&gt; work. Closes 5402
  + udhcpc[6]: show select timeout in log
  + unzip: make options parsing more robust on getopt w/o gnu extensions
  + vi: do not set autoindent by default
  + vi: nuke FEATURE_VI_OPTIMIZE_CURSOR
  + vi: save/restore screen upon invocation
  + volume_id/ext: detect ext4 too
  + wget: correctly handle failure to -c (continue)
  + wget: make -c _not_ truncate the file
  + wget: reorder fread and poll: poll only if fread returns EAGAIN. Closes 5426
  + wget: try reading after poll timeout - stdio may have buffered data. Closes 5426
  + acpid: add missing lid switch definition
  + tar: fix 256-bit encoded number decoding
  + udhcpc[6]: allow discover_retries == 0 (infinite)
  + ash: fix a memory leak
  + sysctl: implement -q
  + powertop: fix error message
  + sha3sum: new applet
  + fbset: respect rgba configuration lines in fb.modes
  + fbsplash: support non-RGB565 pixels in 16-bit mode
  + flashcp: remove unused variable opts
  + mount: add unc option to CIFS mount (needed for Linux 3.4+)
  + nanddump: make dumping read-only partitions work
  + ps: use separate get_uptime() and make it work on non-linux too
  + declare strings with ALIGN1, as appropriate
  + udhcpc6: depend on ipv6
  + include sys/resource.h where needed
  + disable format security warnings
  + build system: use pkg-config to look up selinux libs
  + ifenslave: fix missing close paren
  + sed: allow 'w' cmd to use two address form
  + tar: implement --no-recursion
  + unzip: ignore chmod errors
  + brctl: fix description and usage
  + su: do not change to home dir unless -l
  + ntpd: fix incorrect m_status field in outgoing packets. Closes 5120
  + dmesg: handle multi-char log levels
  + klogd: handle multi-char log levels
  + syslogd: add option to log to Linux kernel printk buffer
  + syslogd: convert dummy functions to statics and get rid of IF_FEATURE_* checks
  + config: do not refer to HTTPS for wget
  + sendmail: use host rather than NIS domain name for HELO
  + mktemp: fix mktemp -u temp.XXXXXX returning garbage when TMPDIR is set
  + blkid: show filesystem when both label and UUID are missing, but type is known
  + volume_id: add exFAT detection
  + ln: support -T and -v
  + sed: support long opts and -iSFX
  + mkdir,rmdir: accept and ignore -v, --verbose
  + mv: accept but ignore -v
  + blkid: add type display for btrfs
  + blkid: add support for nilfs2
  + blkid: add type display for hfsplus
  + volume_id: display hfs[+] 128-bit UUID properly
  + volume_id: uuid_format small code shrink
  + volume_id: add squashfs detection
  + testsuite: some more awk tests related to conditions
  + modinfo: match more standard module fields and fix version field
  + inetd: fix build failure in Android
  + android: fix 'stat', ifdef S_TYPEIS* in coreutiles/stat.c
  + platform.h: Android tweaks: ioprio defines, BB_ADDITIONAL_PATH
  + android: some sensible defconfig changes
  + libbb: add missing_syscalls.c: for now, only Android syscalls
  + fbsplash: fix regression from e4fa7b7
  + adduser: make it accept "adduser USER GROUP" form
  + wget: add dummy --no-cache
  + testsuite: make mkfs.minix test not fail spuriously on big endian
  + refactor correct_password.c to avoid one if</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1409832000">- update to 1.22.1:
  Many updates and fixes for most included tools, see
  see http://www.busybox.net/news.html
- adjust busybox-resource.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1412856000">- Remove mkinitrd scripts</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 1.23.2
  * for a full list of changes see http://www.busybox.net/news.html
- Cleaned up spec file with spec-cleaner
- Refreshed patches</changelog>
  <changelog author="p.drouand@gmail.com" date="1451822400">- Update to version 1.24.1
  * for a full list of changes see http://www.busybox.net/news.html
- Refresh busybox.install.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1457006400">- Disable build timestamp</changelog>
  <changelog author="astieger@suse.com" date="1478001600">- update to 1.25.1:
  * fixes for hush, gunzip, ip route, ntpd
- includes changes from 1.25.0:
  * many added and expanded implementations of command options
- includes changes from 1.24.2:
  * fixes for build system (static build with glibc fixed),
    truncate, gunzip and unzip.</changelog>
  <changelog author="astieger@suse.com" date="1498996800">- update to 1.26.2:
  * many updates and fixes to individual tools</changelog>
  <changelog author="kukuk@suse.de" date="1510315200">- Build against libtirpc in preparation of deprecating sunrpc from
  glibc</changelog>
  <changelog author="jjolly@suse.com" date="1534939200">- Enabled functionality within busybox for warewulf compatibility
  * CONFIG_FEATURE_REMOTE_LOG
  * CONFIG_DEPMOD
  * CONFIG_TAC</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1621598400">- stime has been removed from glibc https://bugs.gentoo.org/708350
  * fix-stime-usage.patch</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1634040000">- CVE-2021-28831 (bsc#1184522) Add:
  * gunzip-fix-from-gzip-1.3.12-for-gzip-file-with-all-zero-length-codes.patch
  * gzip-code-shrink-1.patch
  * gzip-code-shrink-3.patch
  * gunzip-fix-incorrect-decoding-of-fixed-inflate-blocks.patch
  decompress_gunzip-Fix-DoS-if-gzip-is-corrupt.patch
- CVE-2018-20679 (bsc#1121426) Add:
  * udhcpc-check-that-4-byte-options-are-indeed-4-byte-closes-11506.patch
  * udhcpc-when-decoding-DHCP_SUBNET-ensure-it-is-4-bytes-long.patch
- CVE-2018-1000517 (bsc#1099260) Add:
  * wget-add-support-for-S-server-response.patch
  * wget-more-thorough-sanitization-of-other-side-s-data.patch
  * wget-check-chunk-length-for-overflowing-off_t.patch
- CVE-2011-5325 (bsc#951562) Add:
  * tar-postpone-creation-of-symlinks-with-suspicious-targets.-Closes-8411.patch
  * unzip-properly-use-CDF-to-find-compressed-files.-Closes-9536.patch
  * unzip-remove-now-pointless-lseek-which-returns-current-position.patch
  * unzip-do-not-use-CDF.extra_len-read-local-file-header.-Closes-9536.patch
  * unzip-optional-support-for-bzip2-and-lzma.patch
  * unzip-match-Defl-display-with-info-zip-cosmetic-code-shuffling.patch
  * unzip-support-symlinks.-Closes-10031.patch
  * libarchive-do-not-extract-unsafe-symlinks-unless-EXTRACT_UNSAFE_SYMLINKS-1.patch
  * unzip-robustify-overwrite-checks.patch
  * unzip-implement-j-closes-9126.patch
  * tar-unzip-postpone-creation-of-symlinks-with-suspicious-targets.patch
- CVE-2018-1000500 (bsc#1099263) Add:
  * wget-emit-a-message-that-certificate-verification-is-not-implemented.patch
  * wget-implement-TLS-verification-with-ENABLE_FEATURE_WGET_OPENSSL.patch</changelog>
</package>
<package pkgid="d30307495ed89beac40517213b7d8d70ec2195ec93a2a3dbf48fd0f7d5825a6a" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.26.2" rel="lp152.5.3.1"/>
  <changelog author="olaf@aepfle.de" date="1412856000">- Remove mkinitrd scripts</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 1.23.2
  * for a full list of changes see http://www.busybox.net/news.html
- Cleaned up spec file with spec-cleaner
- Refreshed patches</changelog>
  <changelog author="p.drouand@gmail.com" date="1451822400">- Update to version 1.24.1
  * for a full list of changes see http://www.busybox.net/news.html
- Refresh busybox.install.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1457006400">- Disable build timestamp</changelog>
  <changelog author="astieger@suse.com" date="1478001600">- update to 1.25.1:
  * fixes for hush, gunzip, ip route, ntpd
- includes changes from 1.25.0:
  * many added and expanded implementations of command options
- includes changes from 1.24.2:
  * fixes for build system (static build with glibc fixed),
    truncate, gunzip and unzip.</changelog>
  <changelog author="astieger@suse.com" date="1498996800">- update to 1.26.2:
  * many updates and fixes to individual tools</changelog>
  <changelog author="kukuk@suse.de" date="1510315200">- Build against libtirpc in preparation of deprecating sunrpc from
  glibc</changelog>
  <changelog author="jjolly@suse.com" date="1534939200">- Enabled functionality within busybox for warewulf compatibility
  * CONFIG_FEATURE_REMOTE_LOG
  * CONFIG_DEPMOD
  * CONFIG_TAC</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1621598400">- stime has been removed from glibc https://bugs.gentoo.org/708350
  * fix-stime-usage.patch</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1634040000">- CVE-2021-28831 (bsc#1184522) Add:
  * gunzip-fix-from-gzip-1.3.12-for-gzip-file-with-all-zero-length-codes.patch
  * gzip-code-shrink-1.patch
  * gzip-code-shrink-3.patch
  * gunzip-fix-incorrect-decoding-of-fixed-inflate-blocks.patch
  decompress_gunzip-Fix-DoS-if-gzip-is-corrupt.patch
- CVE-2018-20679 (bsc#1121426) Add:
  * udhcpc-check-that-4-byte-options-are-indeed-4-byte-closes-11506.patch
  * udhcpc-when-decoding-DHCP_SUBNET-ensure-it-is-4-bytes-long.patch
- CVE-2018-1000517 (bsc#1099260) Add:
  * wget-add-support-for-S-server-response.patch
  * wget-more-thorough-sanitization-of-other-side-s-data.patch
  * wget-check-chunk-length-for-overflowing-off_t.patch
- CVE-2011-5325 (bsc#951562) Add:
  * tar-postpone-creation-of-symlinks-with-suspicious-targets.-Closes-8411.patch
  * unzip-properly-use-CDF-to-find-compressed-files.-Closes-9536.patch
  * unzip-remove-now-pointless-lseek-which-returns-current-position.patch
  * unzip-do-not-use-CDF.extra_len-read-local-file-header.-Closes-9536.patch
  * unzip-optional-support-for-bzip2-and-lzma.patch
  * unzip-match-Defl-display-with-info-zip-cosmetic-code-shuffling.patch
  * unzip-support-symlinks.-Closes-10031.patch
  * libarchive-do-not-extract-unsafe-symlinks-unless-EXTRACT_UNSAFE_SYMLINKS-1.patch
  * unzip-robustify-overwrite-checks.patch
  * unzip-implement-j-closes-9126.patch
  * tar-unzip-postpone-creation-of-symlinks-with-suspicious-targets.patch
- CVE-2018-1000500 (bsc#1099263) Add:
  * wget-emit-a-message-that-certificate-verification-is-not-implemented.patch
  * wget-implement-TLS-verification-with-ENABLE_FEATURE_WGET_OPENSSL.patch</changelog>
</package>
<package pkgid="105ef06c24bbabfd37a4bb2a49c0a10177885f61079e2b22b294983ab49390f1" name="busybox-static" arch="src">
  <version epoch="0" ver="1.26.2" rel="lp152.5.3.1"/>
  <changelog author="chris@computersalat.de" date="1299931200">- update to 1.18.13
  see http://www.busybox.net/ for full changelog
- add upstream patches
  o buildsys.patch
  o cksum.patch
  o klogd.patch
  o menuconfig.patch
  o modutils24.patch
  o wget.patch
- rework libunarchive-array patch
  o -&gt; libarchive patch
- remove .gitignore files
- added missing BusyBox.1 as S:1
- added export CFLAGS="{optflags} -fno-strict-aliasing"</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Remove unexplained ExcludeArch directive</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro, set HOSTCC</changelog>
  <changelog author="ro@suse.de" date="1334059200">- update to 1.19.4
  - fix getty, mdev, modinfo and wget
- update to 1.19.3
  - fix chpasswd, crond, inetd, syslogd, tail, tftp
- update to 1.19.2
  - fix ash/hush, cttyhack, find, grep, less, patch, sed, top,
    uncompress
- update to 1.19.0:
  - countless fixes in all utility programs, please see
    http://www.busybox.net/ for details
- remove obsolete patches previously marked as upstreamed</changelog>
  <changelog author="ro@suse.de" date="1334059201">- busybox-1.19.4-typedef_umode_t.patch:
  fix compile as umode_t is only defined with KERNEL and is
  used in header linux/linux/ext2_fs.h</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1338984000">- busybox-1.19.4-ext2fs_h.diff:
  more complete fix for latest ext2_fs.h breakage from busybox git,
  drop busybox-1.19.4-typedef_umode_t.patch</changelog>
  <changelog author="aj@suse.de" date="1342612800">- Add missing sys/resource include (glibc 2.16)</changelog>
  <changelog author="p.drouand@gmail.com" date="1355054400">- Update to 1.20.2 (Bug fix release):
  * fix for variable expansion in redirection
  * fix for "pre-up" and "pre-down" handling
  * fixes for compressed man pages handling
  * important fix! due to misplaced s_mkfs_time field, ext4 driver
    couldn't mount our images
  * fix for getting uptime on non-Linux platforms
  * fix base-256 decoding
- Remove busybox-1.19.4-ext2fs_h.diff: fixed on upstream release</changelog>
  <changelog author="ddiss@suse.com" date="1370520000">- Build against glibc-devel-static to work around uClibc segfault;
  (bnc#758843).
  * Remove uClibc specific busybox.uClibc-build-fix.patch.
  * Add busybox-static.SuSE.config, which specifies CONFIG_STATIC=y.</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.21.1
  + fixes for ntfs detection (big-endian fix)
  + xz decompression of concatenated streams
  + mdev acquired a [ENV=regex;] extension instead of undocumented
    subsystem match hack it used to have prior to 1.21.x.
- Changes from 1.21.0
  + udhcpc: gracefully handle packets with CHECKSUM_PARTIAL
  + ifupdown: improve compatibility with Debian
  + get_linux_version_code: don't fail on Linux version strings
    like "3.0-foo"
  + build system: fix build failure when only gunzip is selected
  + CONFIG_PID_FILE_PATH: new configuration option for pidfile paths
  + declare strings with ALIGN1, as appropriate
  + nanddump: use the right operator of logic AND
  + nanddump: skip bad blocks when instructed to do so
  + nanddump: invert the meaning of the -o parameter to match upstream
  + mount: fix -o user=foo mishandling, fix unc= generation, add prefixpath=
  + build system: fix build of kconfig on Darwin
  + tar: support -J, --xz explicit compression option
  + simplify copyright/license notice that appears in the binary
  + mdev: tell kernel that we didn't find the firmware
  + lineedit: fix Alt-D when cursor==0
  + lineedit: histfile can get emptied when CONFIG_FEATURE_EDITING_SAVE_ON_EXIT=y
  + build system: stop .eh_frame generation
  + build system: fix build failure when compressed help is selected, but bz2 compression is not
  + scripts/kconfig/mconf: work on systems w/o SIGWINCH
  + platform.h: disable ALIGNn macros for s390[x]
  + adduser: install to /usr, not /, like all other similar tools
  + ash: fix "read -s" + ^C. Closes 5504
  + ash: fix a bug in &gt;${varexp} handling. Closes 5282
  + ash: implement export -n
  + ash: revert wrong "fix" for an apparent memory leak. Closes 5822
  + awk: fix FS assignment behavior. Closes 5108
  + awk: make -F STR interpret escape sequences. Closes 5126
  + brctl: fix build failure by s/strtotimeval/bb_strtotimeval/ (android has strtotimeval)
  + busybox: tweak help text and copyright year
  + decompress_uncompress: comment out debug printout on corrupted data
  + decompress_uncompress: move 'code' variable into loop - sole user
  + dhcpd: write lease file on exit
  + dpkg: fix creation of .list files (were empty since b768aeb). Closes 5324
  + du: document incompatibility with standard tool
  + examples/mdev_fat.conf: small addition
  + find: if DESKTOP=y, support -wholename (synonym for -path)
  + find: make -mindepth N -xdev correctly stop on mountpoints
  + ftpd: fix MDTM's month value. Closes 5336
  + ftpd: free allocated string on error path
  + getty: fix for NOCTTY killing us with SIGHUP
  + grep: fix grep -Fw not respecting the -w option. Closes 5792
  + ifconfig: do not accept "ifconfig eth0 up 1.2.3.4/17" (ip with mask). Closes 5786
  + libbb: correctness/size tweaks in signal-related helpers
  + lineedit: in !EDITING config, return -1 on fgets error
  + login: increase login name size limit from 32 to 64
  + lpr: don't send 0-byte print jobs (compat)
  + man: fix handling of gzipped manpages
  + mdev: add support for $DEVNAME and /dev/mdev.log debug aid
  + mdev: fix mode of dir1 in =dir1/dir2/file rule
  + mdev: remove undocumented subsystem/devname matching hack
  + mdev: when found, print major,minor into mdev.log
  + modprobe_small: make rmmod to NOT remove dependencies. Closes 5162
  + mount: do not pass "comment=ANYTHING" option to kernel. Closes 5240
  + mount: fix the wrongly stored fs creation time
  + mount: set up RO loop device if mount -o ro. Closes 4784
  + mount: support strictatime option. Closes 5240
  + ntpd: on time step, kill all outstanding replies from other peers
  + sed: fix handling of s/// which has empty matches
  + sed: fix zero chars match/replace
  + sha3: make size/speed optimization decision configurable
  + syslogd: do not segfault on parse error when using default config. Closes 5762
  + telnet: convert CR -&gt; CR LF, not CR -&gt; CR NUL when sending data to server
  + telnet: convert Enter -&gt; CR LF in line mode too
  + tftpd: fix -u USER to work with chroot. Closes 5348
  + top/ps: argv0:"gdm-session-worker [pam/gdm-password]" == comm:"gdm-session-wor"
  + top: do not touch stdin if -b
  + top: fix "last CPU" parsing
  + top: implement scrolling up/down (_very_ useful)
  + udhcp[cd]: fix binding to network aliases. Closes 5432, 5438
  + udhcpc: make -O &lt;numeric_opt&gt; work. Closes 5402
  + udhcpc[6]: show select timeout in log
  + unzip: make options parsing more robust on getopt w/o gnu extensions
  + vi: do not set autoindent by default
  + vi: nuke FEATURE_VI_OPTIMIZE_CURSOR
  + vi: save/restore screen upon invocation
  + volume_id/ext: detect ext4 too
  + wget: correctly handle failure to -c (continue)
  + wget: make -c _not_ truncate the file
  + wget: reorder fread and poll: poll only if fread returns EAGAIN. Closes 5426
  + wget: try reading after poll timeout - stdio may have buffered data. Closes 5426
  + acpid: add missing lid switch definition
  + tar: fix 256-bit encoded number decoding
  + udhcpc[6]: allow discover_retries == 0 (infinite)
  + ash: fix a memory leak
  + sysctl: implement -q
  + powertop: fix error message
  + sha3sum: new applet
  + fbset: respect rgba configuration lines in fb.modes
  + fbsplash: support non-RGB565 pixels in 16-bit mode
  + flashcp: remove unused variable opts
  + mount: add unc option to CIFS mount (needed for Linux 3.4+)
  + nanddump: make dumping read-only partitions work
  + ps: use separate get_uptime() and make it work on non-linux too
  + declare strings with ALIGN1, as appropriate
  + udhcpc6: depend on ipv6
  + include sys/resource.h where needed
  + disable format security warnings
  + build system: use pkg-config to look up selinux libs
  + ifenslave: fix missing close paren
  + sed: allow 'w' cmd to use two address form
  + tar: implement --no-recursion
  + unzip: ignore chmod errors
  + brctl: fix description and usage
  + su: do not change to home dir unless -l
  + ntpd: fix incorrect m_status field in outgoing packets. Closes 5120
  + dmesg: handle multi-char log levels
  + klogd: handle multi-char log levels
  + syslogd: add option to log to Linux kernel printk buffer
  + syslogd: convert dummy functions to statics and get rid of IF_FEATURE_* checks
  + config: do not refer to HTTPS for wget
  + sendmail: use host rather than NIS domain name for HELO
  + mktemp: fix mktemp -u temp.XXXXXX returning garbage when TMPDIR is set
  + blkid: show filesystem when both label and UUID are missing, but type is known
  + volume_id: add exFAT detection
  + ln: support -T and -v
  + sed: support long opts and -iSFX
  + mkdir,rmdir: accept and ignore -v, --verbose
  + mv: accept but ignore -v
  + blkid: add type display for btrfs
  + blkid: add support for nilfs2
  + blkid: add type display for hfsplus
  + volume_id: display hfs[+] 128-bit UUID properly
  + volume_id: uuid_format small code shrink
  + volume_id: add squashfs detection
  + testsuite: some more awk tests related to conditions
  + modinfo: match more standard module fields and fix version field
  + inetd: fix build failure in Android
  + android: fix 'stat', ifdef S_TYPEIS* in coreutiles/stat.c
  + platform.h: Android tweaks: ioprio defines, BB_ADDITIONAL_PATH
  + android: some sensible defconfig changes
  + libbb: add missing_syscalls.c: for now, only Android syscalls
  + fbsplash: fix regression from e4fa7b7
  + adduser: make it accept "adduser USER GROUP" form
  + wget: add dummy --no-cache
  + testsuite: make mkfs.minix test not fail spuriously on big endian
  + refactor correct_password.c to avoid one if</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1409832000">- update to 1.22.1:
  Many updates and fixes for most included tools, see
  see http://www.busybox.net/news.html
- adjust busybox-resource.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 1.23.2
  * for a full list of changes see http://www.busybox.net/news.html
- Cleaned up spec file with spec-cleaner
- Refreshed patches</changelog>
  <changelog author="p.drouand@gmail.com" date="1451822400">- Update to version 1.24.1
  * for a full list of changes see http://www.busybox.net/news.html
- Refresh busybox.install.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1457006400">- Disable build timestamp</changelog>
  <changelog author="astieger@suse.com" date="1478001600">- update to 1.25.1:
  * fixes for hush, gunzip, ip route, ntpd
- includes changes from 1.25.0:
  * many added and expanded implementations of command options
- includes changes from 1.24.2:
  * fixes for build system (static build with glibc fixed),
    truncate, gunzip and unzip.</changelog>
  <changelog author="astieger@suse.com" date="1498996800">- update to 1.26.2:
  * many updates and fixes to individual tools</changelog>
  <changelog author="kukuk@suse.de" date="1510315200">- Disable RPC/NFS, we don't have a static libtirpc</changelog>
  <changelog author="jjolly@suse.com" date="1534939200">- Enabled functionality within busybox for warewulf compatibility
  * CONFIG_FEATURE_REMOTE_LOG
  * CONFIG_DEPMOD
  * CONFIG_TAC</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1621598400">- stime has been removed from glibc https://bugs.gentoo.org/708350
  * fix-stime-usage.patch</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1634040000">- CVE-2021-28831 (bsc#1184522) Add:
  * gunzip-fix-from-gzip-1.3.12-for-gzip-file-with-all-zero-length-codes.patch
  * gzip-code-shrink-1.patch
  * gzip-code-shrink-3.patch
  * gunzip-fix-incorrect-decoding-of-fixed-inflate-blocks.patch
  decompress_gunzip-Fix-DoS-if-gzip-is-corrupt.patch
- CVE-2018-20679 (bsc#1121426) Add:
  * udhcpc-check-that-4-byte-options-are-indeed-4-byte-closes-11506.patch
  * udhcpc-when-decoding-DHCP_SUBNET-ensure-it-is-4-bytes-long.patch
- CVE-2018-1000517 (bsc#1099260) Add:
  * wget-add-support-for-S-server-response.patch
  * wget-more-thorough-sanitization-of-other-side-s-data.patch
  * wget-check-chunk-length-for-overflowing-off_t.patch
- CVE-2011-5325 (bsc#951562) Add:
  * tar-postpone-creation-of-symlinks-with-suspicious-targets.-Closes-8411.patch
  * unzip-properly-use-CDF-to-find-compressed-files.-Closes-9536.patch
  * unzip-remove-now-pointless-lseek-which-returns-current-position.patch
  * unzip-do-not-use-CDF.extra_len-read-local-file-header.-Closes-9536.patch
  * unzip-optional-support-for-bzip2-and-lzma.patch
  * unzip-match-Defl-display-with-info-zip-cosmetic-code-shuffling.patch
  * unzip-support-symlinks.-Closes-10031.patch
  * libarchive-do-not-extract-unsafe-symlinks-unless-EXTRACT_UNSAFE_SYMLINKS-1.patch
  * unzip-robustify-overwrite-checks.patch
  * unzip-implement-j-closes-9126.patch
  * tar-unzip-postpone-creation-of-symlinks-with-suspicious-targets.patch
- CVE-2018-1000500 (bsc#1099263) Add:
  * wget-emit-a-message-that-certificate-verification-is-not-implemented.patch
  * wget-implement-TLS-verification-with-ENABLE_FEATURE_WGET_OPENSSL.patch</changelog>
</package>
<package pkgid="b6902401046716d31745464d1fabf2c81c4eb0921e5be6d0cfa2627e181de505" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.26.2" rel="lp152.5.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1409832000">- update to 1.22.1:
  Many updates and fixes for most included tools, see
  see http://www.busybox.net/news.html
- adjust busybox-resource.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 1.23.2
  * for a full list of changes see http://www.busybox.net/news.html
- Cleaned up spec file with spec-cleaner
- Refreshed patches</changelog>
  <changelog author="p.drouand@gmail.com" date="1451822400">- Update to version 1.24.1
  * for a full list of changes see http://www.busybox.net/news.html
- Refresh busybox.install.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1457006400">- Disable build timestamp</changelog>
  <changelog author="astieger@suse.com" date="1478001600">- update to 1.25.1:
  * fixes for hush, gunzip, ip route, ntpd
- includes changes from 1.25.0:
  * many added and expanded implementations of command options
- includes changes from 1.24.2:
  * fixes for build system (static build with glibc fixed),
    truncate, gunzip and unzip.</changelog>
  <changelog author="astieger@suse.com" date="1498996800">- update to 1.26.2:
  * many updates and fixes to individual tools</changelog>
  <changelog author="kukuk@suse.de" date="1510315200">- Disable RPC/NFS, we don't have a static libtirpc</changelog>
  <changelog author="jjolly@suse.com" date="1534939200">- Enabled functionality within busybox for warewulf compatibility
  * CONFIG_FEATURE_REMOTE_LOG
  * CONFIG_DEPMOD
  * CONFIG_TAC</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1621598400">- stime has been removed from glibc https://bugs.gentoo.org/708350
  * fix-stime-usage.patch</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1634040000">- CVE-2021-28831 (bsc#1184522) Add:
  * gunzip-fix-from-gzip-1.3.12-for-gzip-file-with-all-zero-length-codes.patch
  * gzip-code-shrink-1.patch
  * gzip-code-shrink-3.patch
  * gunzip-fix-incorrect-decoding-of-fixed-inflate-blocks.patch
  decompress_gunzip-Fix-DoS-if-gzip-is-corrupt.patch
- CVE-2018-20679 (bsc#1121426) Add:
  * udhcpc-check-that-4-byte-options-are-indeed-4-byte-closes-11506.patch
  * udhcpc-when-decoding-DHCP_SUBNET-ensure-it-is-4-bytes-long.patch
- CVE-2018-1000517 (bsc#1099260) Add:
  * wget-add-support-for-S-server-response.patch
  * wget-more-thorough-sanitization-of-other-side-s-data.patch
  * wget-check-chunk-length-for-overflowing-off_t.patch
- CVE-2011-5325 (bsc#951562) Add:
  * tar-postpone-creation-of-symlinks-with-suspicious-targets.-Closes-8411.patch
  * unzip-properly-use-CDF-to-find-compressed-files.-Closes-9536.patch
  * unzip-remove-now-pointless-lseek-which-returns-current-position.patch
  * unzip-do-not-use-CDF.extra_len-read-local-file-header.-Closes-9536.patch
  * unzip-optional-support-for-bzip2-and-lzma.patch
  * unzip-match-Defl-display-with-info-zip-cosmetic-code-shuffling.patch
  * unzip-support-symlinks.-Closes-10031.patch
  * libarchive-do-not-extract-unsafe-symlinks-unless-EXTRACT_UNSAFE_SYMLINKS-1.patch
  * unzip-robustify-overwrite-checks.patch
  * unzip-implement-j-closes-9126.patch
  * tar-unzip-postpone-creation-of-symlinks-with-suspicious-targets.patch
- CVE-2018-1000500 (bsc#1099263) Add:
  * wget-emit-a-message-that-certificate-verification-is-not-implemented.patch
  * wget-implement-TLS-verification-with-ENABLE_FEATURE_WGET_OPENSSL.patch</changelog>
</package>
<package pkgid="eeae7a4eb77b1912578a1361d129cbf63db01fe3cb0817677032dc064dbe6f71" name="c-ares" arch="src">
  <version epoch="0" ver="1.17.0" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1400155200">- Version bump to 1.10.0:
  * Various small updates all around
  * Cleanup of automake to build with latest tools
  * For more see CHANGES
- Remove upstreamed patches:
  * cares-autotools.diff
- Remove patch that needs quite work and was never acceted upstream:
  * 0001-cares-1.9.1-add-symbol-versioning-support.patch
- Added patches:
  * 0001-Use-RPM-compiler-options.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="d0f0945d7e287d4ad3a30708245e85c83f5f2ae841a91901b790c42e4a41f0b2" name="c-ares" arch="src">
  <version epoch="0" ver="1.17.0" rel="lp152.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="bfa63b3a68e05a0b086cd81f91c41d4a0989fb0a0b7c4e60d25cc64e260e1155" name="c-ares" arch="src">
  <version epoch="0" ver="1.17.1+20200724" rel="lp152.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
</package>
<package pkgid="3c466b6c48e378cc9da518e72384e1659231ad43ac5c6c47ef3ce675194d0648" name="c-ares" arch="src">
  <version epoch="0" ver="1.17.1+20200724" rel="lp152.2.9.1"/>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
</package>
<package pkgid="8e97ba0521093ac8c65e9524e5605ed6cf1fcf79f4019ac1785c38daac197235" name="c-ares-devel" arch="i586">
  <version epoch="0" ver="1.17.0" rel="lp152.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="f044faff5328a84c6e83682dd6152d660f3a6ee75f4202a0aef0185b04b108ff" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp152.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="2f1fb9a94ab7b10e8ff622b52dd05439e816d8a0a2e70cdb252b5ddb1f4b2ad0" name="c-ares-devel" arch="i586">
  <version epoch="0" ver="1.17.0" rel="lp152.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="40c5036da437bc6c2adf4bdcf731e969792f562689221fbd2b62149310a4d72b" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp152.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="1d04947a9890499d614b3d00de62e72a05b8af7fb2f5e82fd4d6b371d827d72d" name="c-ares-devel" arch="i586">
  <version epoch="0" ver="1.17.1+20200724" rel="lp152.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
</package>
<package pkgid="638ef18aa00c388c2c36c4a38b338cb3b801e4bdc1af1a215e510b1c6bd4de98" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.17.1+20200724" rel="lp152.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
</package>
<package pkgid="8e60061b31d39177b3c67ba0cd1df5788e869bf3d251d43bc67969ed1e7d4816" name="c-ares-devel" arch="i586">
  <version epoch="0" ver="1.17.1+20200724" rel="lp152.2.9.1"/>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
</package>
<package pkgid="f794a41b09d364bbfcf7de4506fe0af71d676f9ef77140cdd32e6a984ea55a8b" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.17.1+20200724" rel="lp152.2.9.1"/>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
</package>
<package pkgid="81a15c20fde51a944bc4be75d196d6adf4272dce589080dcff0c63d5d50d1503" name="c-ares-tests" arch="src">
  <version epoch="0" ver="1.17.0" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1400155200">- Version bump to 1.10.0:
  * Various small updates all around
  * Cleanup of automake to build with latest tools
  * For more see CHANGES
- Remove upstreamed patches:
  * cares-autotools.diff
- Remove patch that needs quite work and was never acceted upstream:
  * 0001-cares-1.9.1-add-symbol-versioning-support.patch
- Added patches:
  * 0001-Use-RPM-compiler-options.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="00c7e3db27bfe9247ed9e7a387f9ed809257d073055bb688e0febb130461341e" name="c-ares-tests" arch="src">
  <version epoch="0" ver="1.17.0" rel="lp152.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="bd09eb84abdac97f8d83659f283ef7bc1a3ab5773ffc815e1f0a0ac3bd7480df" name="c-ares-tests" arch="src">
  <version epoch="0" ver="1.17.1+20200724" rel="lp152.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
</package>
<package pkgid="2da0710191008d2ded93b922126e8f7030ce80a3d66f0dc52521578c65e3dddc" name="c-ares-tests" arch="src">
  <version epoch="0" ver="1.17.1+20200724" rel="lp152.2.9.1"/>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
</package>
<package pkgid="4cc5472e8d496f29525437963bbcddecaa3d162e073f4b4029366c4eaed1abda" name="c-ares-utils" arch="i586">
  <version epoch="0" ver="1.17.0" rel="lp152.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="09f2d54ec23b308ad3696741e499100a1d0fdab58c85e91cdc845d3eb127f64b" name="c-ares-utils" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp152.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="3184e28c8298fd3718039467e0a5a04c3ebcb291e47fb31514cc5c70dae9f5fd" name="c-ares-utils" arch="i586">
  <version epoch="0" ver="1.17.0" rel="lp152.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="92809b78763a2660fb18a7f44558d31ff28b84dc9e68152bec145124fdcacab6" name="c-ares-utils" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp152.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="cc6eb946d240d4d09d56ffed69981b37e6957190d9d8c8e1f228dd1ab3619809" name="c-ares-utils" arch="i586">
  <version epoch="0" ver="1.17.1+20200724" rel="lp152.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
</package>
<package pkgid="5e97db50c3fdc7efca9cc83542c5f4c994313539c0558ca21e91fab07b713e6b" name="c-ares-utils" arch="x86_64">
  <version epoch="0" ver="1.17.1+20200724" rel="lp152.2.12.1"/>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
</package>
<package pkgid="919155b29e2fdfb0f43928097d965aacb9960b82b9caa69a7e24387e08c15847" name="c-ares-utils" arch="i586">
  <version epoch="0" ver="1.17.1+20200724" rel="lp152.2.9.1"/>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
</package>
<package pkgid="ffffa5b985917edcde3aca3385929a40286d7f46d008ecca3fdff7e9f1e01b38" name="c-ares-utils" arch="x86_64">
  <version epoch="0" ver="1.17.1+20200724" rel="lp152.2.9.1"/>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
</package>
<package pkgid="2ae93557c4943e25c3a65c47b23af60c7e29daafa581f95dbfc68de2d13ecd0c" name="ca-certificates-cacert" arch="noarch">
  <version epoch="0" ver="1" rel="lp152.4.3.1"/>
  <changelog author="lnussel@suse.de" date="1269432000">- new package</changelog>
  <changelog author="lnussel@suse.de" date="1336651200">- include root distribution license (bnc#761554)</changelog>
  <changelog author="lnussel@suse.de" date="1371729600">- adjust to new filesytem location</changelog>
  <changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
  <changelog author="meissner@suse.com" date="1406721600">- replaced the "Class 3 PKI Key" by the current version. Changes its
  signature algorithm from RSA-MD5 to RSA-SHA256. (bnc#868884)</changelog>
  <changelog author="mpluskal@suse.com" date="1483876800">- Use urls for sources
- Simplify spec file</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1621512000">- update Class 3 certificate from https://www.cacert.org/class3.crt
  (the old one expired today)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621684800">- spec-cleaner run (bsc#1186362)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1621771200">- Update class3.crt to the new one expiring 2031 again</changelog>
</package>
<package pkgid="310bfc12639e7126bff777b5cfc97fb240ce76d004a01588025f4428f127f119" name="ca-certificates-cacert" arch="src">
  <version epoch="0" ver="1" rel="lp152.4.3.1"/>
  <changelog author="lnussel@suse.de" date="1269432000">- new package</changelog>
  <changelog author="lnussel@suse.de" date="1336651200">- include root distribution license (bnc#761554)</changelog>
  <changelog author="lnussel@suse.de" date="1371729600">- adjust to new filesytem location</changelog>
  <changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
  <changelog author="meissner@suse.com" date="1406721600">- replaced the "Class 3 PKI Key" by the current version. Changes its
  signature algorithm from RSA-MD5 to RSA-SHA256. (bnc#868884)</changelog>
  <changelog author="mpluskal@suse.com" date="1483876800">- Use urls for sources
- Simplify spec file</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1621512000">- update Class 3 certificate from https://www.cacert.org/class3.crt
  (the old one expired today)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1621684800">- spec-cleaner run (bsc#1186362)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1621771200">- Update class3.crt to the new one expiring 2031 again</changelog>
</package>
<package pkgid="f04d6d4b8b834abc12d744814d4aaf5e27802924e4d3fde86d1cd6e50cdcd415" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.42" rel="lp152.2.3.1"/>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
</package>
<package pkgid="24b83cab2dfd23bb50d3c00a4a8de65ef9e3768e1adc403a74c8d2c2b7195bfd" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.42" rel="lp152.2.3.1"/>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
</package>
<package pkgid="48d6268e74b4ad03359b0657ded8496d433ca34689e3cea9470f23009f5b83ae" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.42" rel="lp152.2.4.2"/>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017
- Reverted p11-kit changes for (boo#1154871), this is fragile on
  fresh installs with "too old" p11-kit.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024001">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
</package>
<package pkgid="fabb756d95d8b0a585fd4083d204074b43592f1f002b03c5eae6582521c811be" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.42" rel="lp152.2.4.2"/>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017
- Reverted p11-kit changes for (boo#1154871), this is fragile on
  fresh installs with "too old" p11-kit.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024001">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
</package>
<package pkgid="3bd7aa1dee97fad301b94e6cdac022a21ee276ee88657d905eef89d33cef3080" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.44" rel="lp152.2.10.1"/>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
</package>
<package pkgid="ee391542bf14e1a213ee3c6d12001d7ed6631de70ef84d1b031cd1721061845d" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.44" rel="lp152.2.10.1"/>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
</package>
<package pkgid="75c7c3f4f67d2e8e565cb1166e581eb923eb289b851d4e263858add387d41e1c" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.44" rel="lp152.2.13.1"/>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
</package>
<package pkgid="18ef87f9034f7ab56d1dd89c6bb481fe073f1c8edc07f4e187e737b192dcf9ca" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.44" rel="lp152.2.13.1"/>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
</package>
<package pkgid="7e75c193cfe4ff1e63b069e17f6476c64b582f5ce4f01a5d6996e8321d0503a8" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.44" rel="lp152.2.7.1"/>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
</package>
<package pkgid="3c959dfb4d8697e03481622c914e6ca4f1078811d5339964e4d91f0bb2f10570" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.44" rel="lp152.2.7.1"/>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7 (bsc#973042).
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
</package>
<package pkgid="78d7632fbe11f9603751023e1aff39469d56ce7a2a2f34de3894d8fa333576ab" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.13" rel="lp152.2.3.1"/>
  <changelog author="uhaider.msee15seecs@seecs.edu.pk" date="1531483200">-Fixed missing packages php-json, php-ctype, and php-gd in cacti.spec. bsc#1101024
-Fixed Apache2.4 and Apache2.2 runtime configuration issue. bsc#1101139</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
</package>
<package pkgid="1921bd446b71d36f5ebcf60ef08530506f934903db8bffc52bd5eeea2e364667" name="cacti" arch="src">
  <version epoch="0" ver="1.2.13" rel="lp152.2.3.1"/>
  <changelog author="uhaider.msee15seecs@seecs.edu.pk" date="1531483200">-Fixed missing packages php-json, php-ctype, and php-gd in cacti.spec. bsc#1101024
-Fixed Apache2.4 and Apache2.2 runtime configuration issue. bsc#1101139</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
</package>
<package pkgid="267d8724d2e07469f2da088707970378c563885fd47a71fedeb035c4a1230a82" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.14" rel="lp152.2.6.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850)</changelog>
</package>
<package pkgid="f50e5e8cd9101d3a1aa038282f0c9b37dafcfeba128b45578c1b9728229b6836" name="cacti" arch="src">
  <version epoch="0" ver="1.2.14" rel="lp152.2.6.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">-Build version 1.2.0
  - feature: Add a Timeout setting for Remote Agent calls
  - feature: Add Graphs and Data Sources hyperlinks on Device page
  - feature: Add One Minute Sampling to the default Data Source Profiles
  - feature: Add support for DDERIVE and DCOUNTER to Cacti
  - feature: Add Timezone support for Remote Data Collectors
  - feature: Allow Adding Aggregate Graphs to a Report
  - feature: Allow ASCII filepath paths to not be found on settings save
  - feature: Allow drill down from Graphs to Data Queries or Templates
  - feature: Allow Import/Export to be hookable
  - feature: Allow snmpagent to be disabled for very large installs
  - feature: Allow Top tabs to be Glyphs or Text or both
  - feature: Big Spanish translation update plus massive QA fixes
  - feature: Change password page provides visible confirmation of password rules
  - feature: Do not allow second data source to be added to an SNMP Get data template
  - feature: Don't allow removal of Data Sources from Data Template once its in use
  - feature: Inform the primary Cacti administrator of problems by Email
  - feature: Make all user settings dynamic and allow resetting to default.
  - feature: Make Graph and Data Source suggested naming more efficient
  - feature: Make it easy to find Data Query based graphs that have lost indexes
  - feature: Make Top Tabs use Ajax Callback
  - feature: Make tree editing responive
  - feature: New Install/Upgrade user permission to limit access to being able to upgrade
  - feature: Provide option to debug width errors where output exceeds column width
  - feature: Removed the Authentication Method of 'None'
  - feature: Tree automation is now defaulted to on for new install
  - feature: Update JavaScript library c3.js to version 0.6.8
  - feature: Update JavaScript library Chart.js to 2.7.3
  - feature: Update JavaScript library d3.js to version 5.7.0
  - feature: Update JavaScript library jquery.js to 3.3.1
  - feature: Update JavaScript library jquery-migrate.js to 3.0.1
  - feature: Update JavaScript library jquery.tablesorter.js to version 2.30.7
  - feature: Update JavaScript library jstree.js to 3.3.7
  - feature: Update JavaScript library screenfull.js to 3.3.3
  - feature: Update phpmailer to version 6.0.6
  - feature: Update phpseclib to version 2.0.13
  - feature#289: Allow external nologin access for Realtime Graphs
  - feature#553: When display a host, include Aggregated Graphs as well as standard graphs
  - feature#614: Allow users to duplicate Data Input Methods
  - feature#973: When creating a new user authenticated via LDAP, attempt to retrieve users
    email and full name
  - feature#122: Support a Site Branch Type
  - feature#1060: Design Enhancement for Large scale Cacti Implementations
  - feature#1142: Add Site dropdown to the Graphs and Data Source pages
  - feature#1184: Improve Data Input Methods editability and message handling
  - feature#1200: Aggregate Graphs can now include COMMENT
  - feature#1282: Email notification for Automation Network discovery process
  - feature#1347: Update automation logging to work better
  - feature#1395: Ensure messages have each new line keep the same prefix in cacti_log()
  - feature#1399: Allow 'requires' to include version against a plugin
  - feature#1400: User settings are now dynamic and can be reset (removed) to return to global settings
  - feature#1422: Automatically select the next unused data input field when clicking add on
    data input method
  - feature#1505: When displaying a graph, provide breadcrumb link to edit device
  - feature#1527: Update Fontawesome from 4.7 to 5.0.10
  - feature#1580: Support Drag &amp; Drop for Builtin Report Items
  - feature#1581: Allow Mass Adding of Graphs to Reports
  - feature#1584: Allow theme selection when installing
  - feature#1588: Check that PHP can run a test file
  - feature#1593: Allow External links to auto refresh
  - feature#1597: Ensure synchronised files have same attributes as originals
  - feature#1610: On Unix, redirect error messages to log files when running external scripts
  - feature#1628: Allow the User to define an initial Automation Network for discovery when installing
  - feature#1670: Improve Graph Management to show type of source for a graph
  - feature#1671: When duplicating a Graph Template, properly duplicate Data Query Graph Template Mappings
  - feature#1677: Default Tree nodes sorting to be inherited
  - feature#1691: On Graph context menu, add a 'Copy graph' option to copy graph image
  - feature#1692: Separate option for logging Input Validation issues
  - feature#1703: On Graph context menu, text is now multi-lingual
  - feature#1708: Allow the User to override global Automation email recipients at the Automation Network level
  - feature#1709: Suppress warning from RRDTool when attempting to make updates in the past
  - feature#1711: Add support for SSL connections to MySQL
  - feature#1731: Prevent loss of changes by warning user about unsaved items
  - feature#1734: When displaying a graph, provide more information when error
    image is displayed (see also #1428)
  - feature#1763: Enable automatic refresh for Time Graph View
  - feature#1806: Control low level debug routines via config.php (Develoepr Use)
  - feature#1819: Provide CLI program to enable graphs to be removed by scripts
  - feature#1969: Graph previews can now be linked using a host's external id
  - feature#2006: Introduce new Data Source Profile to handle decade long graphs
  - feature#2173: Introduce Device and Graph Template Caching to Speed UI
  - feature#2228: Add Device ID to Device search field
  - issue: Fix issue with display_custom_error_message() causing problem with system error message handling
  - issue: Graph List View was not fully responsive
  - issue: Move Graph removal function to Graph API
  - issue: On the Data Sources page, if there is no filtered Device and a
    Data Source is edited, device association is lost
  - issue: Typo in Dutch translations when an error occurred while downgrading
  - issue: Unable to display user profile tabs
  - issue: Verify all Fields not working due to Cacti 1.x upgrade error
  - issue#186: Cacti does not support jQueryUI 1.12.x
  - issue#187: Remove the use of jQuery Migrate plugin
  - issue#948: Do not create a new datasource when adding a new Graph for the same device/field
  - issue#454: Cacti Re-Index does not resolve index changes properly during re-index
  - issue#983: Import Template Preview is misleading
  - issue#1097: When copying template user, newly created user should always be enabled to allow logging in
  - issue#1097: When copying template user, it should be disable to prevent logging in as template user directly
  - issue#1174: When display a tree, disable drag and drop unless in edit mode
  - issue#1298: Display fatal error to prevent issues caused when system log is not writable
  - issue#1350: When switching an Automation Tree Rule's leaf type, remove invalid Automation Rule Items
  - issue#1383: CSRF Timeout does not obey session timeout
  - issue#1408: Update SQL / Backtrace to use new clean_up_lines() function
  - issue#1414: DSSTATS reports incorrectly that a data source does not exist
  - issue#1420: Fix issues found by Debian package builds
  - issue#1421: Fix issue when SQL had all bad modes, missing variable warning was generated
  - issue#1426: Fix issue where remote poller was not using unique filenames when attempting to verify files
  - issue#1437: Plugin install hover message sometimes shows line breaks rather than formatted text
  - issue#1454: When using oid_regexp_parse, filter indexes to those that match
  - issue#1473: Recovery Date overwritten by subsequent checks
  - issue#1494: Unable to Deep Link/Bookmark Trees
  - issue#1503: Undefined function clearstatscache in DSSTATS
  - issue#1507: When saving graph settings from the graph page, the graph template id should not be included
  - issue#1510: New Graphs Undefined Variable $graph_template_name
  - issue#1521: Force boost to be enabled when there are Remote Data Collectors
  - issue#1528: Saving a device can result in WARNINGS related to string vs array handling
  - issue#1529: Allow Aggregate Graphs to Sum Bandwidth and Percentile COMMENTS
  - issue#1543: Graph Preview appends header=false too many times
  - issue#1553: Poller does not set rrd_step_counter correctly if no steps taken
  - issue#1559: CLI Output Issues due to over escaping
  - issue#1560: Warning that escapeshellarg() is escaping a null
  - issue#1567: Technical support - add notification if Cacti and Spine version is different
  - issue#1574: User templates are not correctly being applied
  - issue#1589: Installer now checks that the temporary folder is writable
  - issue#1590: User Admin generates SQL error if user is not part of any groups
  - issue#1601: Aggregate Graphs can not include some classes of COMMENT
  - issue#1602: PHP ERROR: Call to undefined function api_data_source_cache_crc_update()
  - issue#1604: Failed to connect to remote collector
  - issue#1606: Boost debug log not functional
  - issue#1607: Boost next run time occurs in the past
  - issue#1608: Possible boost race conditions
  - issue#1609: Remote pollers update 'stats_poller' on main poller
  - issue#1617: Editing a data query results in missing $header variable
  - issue#1621: Realtime Popup can cause automatic logout
  - issue#1626: httpd-error.log have message about Fontconfig
  - issue#1634: Default snmp quick print setting resulting in false poller ASSERTS on some php releases
  - issue#1651: Check temporary folder has write access during import
  - issue#1655: Correct Cacti to handle new MySQL 8.0 reserved word `system`
  - issue#1658: Devices drop down should be filtered by Site
  - issue#1660: Reports based upon Tree don't maintain graph order
  - issue#1665: Must change password not working for local users when main realm is not local
  - issue#1669: Console log header grammar issue
  - issue#1674: Threads and Processes values not migrated to Poller table during upgrade
  - issue#1676: Allow automation discovery to add the same sysname on different hosts
  - issue#1682: Slow Select Statement lib/api_automation.php
  - issue#1689: Technical Support's RRDTool version should show detected RRD version
  - issue#1690: Report a warning if the default collation is not utf8mb4_unicode_ci
  - issue#1700: Mail sent without auth causes errors to appear in logs
  - issue#1710: RRDtool create command causes first update to fail
  - issue#1721: Console Side Bar not correct on first login
  - issue#1723: die() messages should include PHP_EOF for better logging
  - issue#1726: Poor page performance editing a Graphs Graph Items
  - issue#1746: Poller with no hosts does not exit until timeout is reached
  - issue#1761: Graph Management page shows bogus template names
  - issue#1783: Browser Back button still does not working
  - issue#1796: Import: Fixed handling of references to objects not included in file
  - issue#1799: Default User log sort should be date descending
  - issue#1810: Correct SQL errors with authentication set to no authentication
  - issue#1839: Dummy cosmetic bug on down device selection option
  - issue#1841: Data Source Stats table not properly migrated from pre 1.x Cacti plugin
  - issue#1849: SNMPAgent not sending traps
  - issue#1852: Reports Preview/Mails show no graphs
  - issue#1889: Insecure $ENV{ENV} which running setgid
  - issue#1901: Upgrade from 0.8.8h fails on external_links statement
  - issue#1921: Data Query XML field method 'rewrite_index' does not correctly query for value
  - issue#1926: Deselecting items should present warning or disable GO button
  - issue#1948: Device Template should warn about need to re-sync
  - issue#1953: set_default_action() should warn if more than one action provided
  - issue#1973: SpikeKill Menu does not display properly
  - issue#1976: Default admin permissions do not allow everything
  - issue#1982: Certain hooks should occur within api functions rather than UI functions
  - issue#2002: api_plugin_db_table_create should support non-string defaults
  - issue#2012: For kernel 3.2+, "Linux - Memory - Free" should grep for "MemAvailable:", not "MemFree:"
  - issue#2085: CLOG Regex Parser does not verify registered function exists
  - issue#2126: api_device.php generates undefined function poller_push_to_remote_db_connect()
  - issue#2127: Unable to save error when duplicating graph
  - issue#2135: api_tree_lock() and api_tree_unlock() forcing redirection incorrectly
  - issue#2143: export.php Illegal string offset 'method'
  - issue#2144: Device Management "Status" column does not sort properly
  - issue#2152: When editing a device, should show disable/enable option
  - issue#2153: Utilities page issues the wrong hook for tabs
  - issue#2163: LDAP functions are not consistent
  - issue#2164: Login page does not remember selected realm
  - issue#2171: datepicker and timepick translation not available
  - issue#2178: Header/Footer included more than once
  - issue#2182: Graph View missing 'html_graph_template_multiselect()' function
  - issue#2184: html_host_filter() does not handle host_id consequently
  - issue#2186: Boost generates invalid SQL during on demand update
  - issue#2188: SNMP timeout errors are being duplicated
  - issue#2191: i18n_themes is not properly primed in global_arrays.php
  - issue#2202: Can't create more than one graph with add_graphs.php from one template
  - issue#2207: Removing Graph Template does not Remove Data Query Associations
  - issue#2217: cmd.php not handling quoted snmp values properly
  - issue#2240: SNMP system Data Input Methods should not be modified on import
  - issue#2241: Spike removal not functional due to Debian packaging
  - security#1072: Prevent exploitation of Data Input Methods to escalate privileges (CVE-2009-4112)
  boo#1122535
  - security#1882: Bypass output validation in select cases
  - security#2212: Stored XSS in "Website Hostname" field
  CVE-2018-20724 boo#1122244
  - security#2213: Stored XSS in "Website Hostname" field - Devices
  CVE-2018-20726 boo#1122242
  - security#2214: Stored XSS in "Vertical Label" field - Graph
  CVE-2018-20725 boo#1122243
  - security#2215: Stored XSS in "Name" field - Color
  CVE-2018-20723 boo#1122245</changelog>
  <changelog author="astieger@suse.com" date="1547812800">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Build version 1.2.1
  - issue#2259: Unable to View Aggregate Graphs
  - issue#2267: Remove unnecessary includes in aggregate template code
  - issue#2270: Realtime Graphs consuming too much memory
  - issue#2272: Site Tree Branches not showing Graphs
  - issue#2273: Error when saving changes to Data Collectors
  - issue#2279: SQL Errors in add_graphs.php
  - issue#2280: SQL Errors in snmpagent cache table inserts
  - issue#2281: Database audit cli giving incorrect results
  - issue#2285: Allow HRULEs for bandwith and ptile
  - issue#2292: Allow Realtime to use 1 second data collection
  - issue#2298: Ambiguous Toggle Switches in Sunrise Theme
  - issue#2303: Problem with "Notify Primary Admin of Issues" function
  - issue#2304: Installation progress stays at 0%
  - issue#2305: BOOST PROGERR: ERRNO:'8'
  - issue#2311: Unable to update PHP location during installation due to
    incorrect CLI environment
  - issue#2319: Primary admin account not always given access to a
    plugin when that plugin is enabled
  - issue#2321: Date separator not being used properly for graphs
  - issue#2322: Modifying plugin realm registration files and description
    not supported
  - issue: Installer does not identify when shell_exec()/exec() are disabled
  - issue: Removing a Device or Graph Template can not be seen till next login
  - issue: Visual issues with custom data when using paper-plane theme
  - issue: Undefined function errors attempting to sync device templates
  - issue: Plugin dependency handling inconsistant
  - issue: Editing a report shows incorrect graphs from dropdown</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850)</changelog>
</package>
<package pkgid="89d76128762396fb389a932e702f27965e7df9751c4f6dfb58f98b98b9cc116c" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.16" rel="lp152.2.9.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
</package>
<package pkgid="bb12d968cc037835d2537449ad12ea59853cf9fc81514d4e3ff402362b0c594a" name="cacti" arch="src">
  <version epoch="0" ver="1.2.16" rel="lp152.2.9.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Build version 1.2.2
  - issue#599: Aggregate graph templates assume AVG consolidation function
  - issue#2312: Retrieving Device Information appears to fail on Safari
  - issue#2317: Unabe to add new records to 'poller_time' table
  - issue#2327: Memory exhausted whilst running poller replication
  - issue#2334: Some browsers report JavaScript errors when switching to console
  - issue#2337: When running an upgrade, the path of the log file is reset
  - issue#2339: Certain characters in recipient address can cause email to fail
  - issue#2343: Export hooks no longer work due to missing default keyword
  - issue#2346: When listing plugin permissions, "Legacy 1.x Plugins" can appear
    in the wrong cell
  - issue#2347: Allow sort output to inject returned data into a specific object
  - issue#2350: Unable to Select Data Source for HRULES and COMMENTS that include
    nth Percentile and Bandwidth
  - issue#2352: SNMP description field can sometimes contain mangled data
  - issue#2354: When reindexing in Automation, titles are not updated for Graph
    and Data Source
  - issue#2355: Data Sources are sometimes duplicated when Custom Data is specified
  - issue#2357: When indexes are incorrect, poller should log more information
  - issue#2359: When upgrading, "Install/Upgrade" privilege may have been previously lost
  - issue#2360: When retrieving database / table / column information, schema
    name is not always applied
  - issue#2362: No way to default an interface speed when ifSpeed and ifHighSpeed
    come back as zero
  - issue#2365: When editing Aggregate Graphs, orphaned items were not always removed
  - issue#2372: Data Query reindexing leads gaps in Graphs
  - issue#2376: Manually adding a device discovered by Automation causes errors to be logged
  - issue#2380: Devices may experience constant reindexing
  - issue#2384: When authentication method is set to None, change to Builtin as
    None has been removed
  - issue#2393: When reindexing a device, Graph Automation creates duplicate graphs every time
  - issue#2416: SELinux wants APPEND not WRITE permission for Fedora/EPEL (RHEL, Centos)
  - issue#2419: Host state time was not correctly calculated
  - issue#2426: Reinstate missing plugin hooks for 'custom_logout_message' and 'custom_denied'
  - issue#2431: Default value for 'Mail Method' (settings_how) is incorrect resulting in errors
  - issue#2432: Undefined variable warnings when updating RRD data
  - issue#2451: Drag and drop does not always function correctly
  - feature: Update JavaScript library c3.js to version 0.6.12
  - feature: Update phpseclib to version 2.0.14
  - feature: Update PHPMailer to version 6.0.7
  - feature: Update JavaScript library d3.js to version 5.9.1</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
</package>
<package pkgid="5b549251a4dab2745e3ef9b76d9bb09f7560c238a059e947e24c50f58bb0a1d3" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="lp152.2.12.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti 1.2.17:
  * Fix incorrect handling of fields led to potential XSS issues
  * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804)
  * Fix various XSS issues with HTML Forms handling
  * Fix handling of Daylight Saving Time changes
  * Multiple fixes and extensions to plugins
  * Fix multiple display, export, and input validation issues
  * SNMPv3 Password field was not correctly limited
  * Improved regular expression handling for searcu
  * Improved support for RRDproxy
  * Improved behavior on large systems
  * MariaDB/MysQL: Support persistent connections and improve
    multiple operations and options
  * Add Theme 'Midwinter'
  * Modify automation to test for data before creating graphs
  * Add hooks for plugins to show customize graph source and customize
    template url
  * Allow CSRF security key to be refreshed at command line
  * Allow remote pollers statistics to be cleared
  * Allow user to be automatically logged out after admin defined
    period
  * When replicating, ensure Cacti can detect and verify replica
    servers</changelog>
</package>
<package pkgid="37ce40edc13de277b467dc6993523d5b9d5cb1168e21a9e66441abb8483048bd" name="cacti" arch="src">
  <version epoch="0" ver="1.2.17" rel="lp152.2.12.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551355200">-Add cacti-ss_fping.patch</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti 1.2.17:
  * Fix incorrect handling of fields led to potential XSS issues
  * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804)
  * Fix various XSS issues with HTML Forms handling
  * Fix handling of Daylight Saving Time changes
  * Multiple fixes and extensions to plugins
  * Fix multiple display, export, and input validation issues
  * SNMPv3 Password field was not correctly limited
  * Improved regular expression handling for searcu
  * Improved support for RRDproxy
  * Improved behavior on large systems
  * MariaDB/MysQL: Support persistent connections and improve
    multiple operations and options
  * Add Theme 'Midwinter'
  * Modify automation to test for data before creating graphs
  * Add hooks for plugins to show customize graph source and customize
    template url
  * Allow CSRF security key to be refreshed at command line
  * Allow remote pollers statistics to be cleared
  * Allow user to be automatically logged out after admin defined
    period
  * When replicating, ensure Cacti can detect and verify replica
    servers</changelog>
</package>
<package pkgid="c7110c24bfcc88077f5919805c9943a1d2fa889b1357ed60bb8fa4b4154e36b2" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.18" rel="lp152.2.15.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti 1.2.17:
  * Fix incorrect handling of fields led to potential XSS issues
  * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804)
  * Fix various XSS issues with HTML Forms handling
  * Fix handling of Daylight Saving Time changes
  * Multiple fixes and extensions to plugins
  * Fix multiple display, export, and input validation issues
  * SNMPv3 Password field was not correctly limited
  * Improved regular expression handling for searcu
  * Improved support for RRDproxy
  * Improved behavior on large systems
  * MariaDB/MysQL: Support persistent connections and improve
    multiple operations and options
  * Add Theme 'Midwinter'
  * Modify automation to test for data before creating graphs
  * Add hooks for plugins to show customize graph source and customize
    template url
  * Allow CSRF security key to be refreshed at command line
  * Allow remote pollers statistics to be cleared
  * Allow user to be automatically logged out after admin defined
    period
  * When replicating, ensure Cacti can detect and verify replica
    servers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625918400">- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue</changelog>
</package>
<package pkgid="49ade35afd9d2d005ed4adc0e52516446b95904225816de0a79d5ebde48e5df5" name="cacti" arch="src">
  <version epoch="0" ver="1.2.18" rel="lp152.2.15.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554033600">-Remove cacti-ss_fping.patch
-Build version 1.2.3
  - issue#1063: Tree View does not display the last item correctly under
    'Modern' theme
  - issue#2282: Install Wizard does not Detect RRDtool Version on Windows
  - issue#2430: "New Device" menu item showing as selected incorrect
    when "Devices" clicked
  - issue#2435: Tree View becomes narrower and narrower when
    expanding/collapsing nodes with long names
  - issue#2449: Index incorrectly changed to 1 if the index is alphanumeric
    when  OID/REGEXP: or OIDVALUE/REGEXP:
  - issue#2452: Missing 'getSNMPQueries()' function when calling
    add_data_query.php
  - issue#2453: When running add_graphs.php, cannot retrieve list of valid
    snmp values
  - issue#2460: sqltable_to_php.php does not export 'default' value
    of columns correctly
  - issue#2456: When attempting to display actions that can be taken,
    having no actions caused error
  - issue#2457: When creating a graph, undefined function prevents
    confirmation from appearing
  - issue#2459: ss_host_disk.php attempts to return an empty array
    instead of a string
  - issue#2463: Partial Fix: Display zombie data sources without graphs
  - issue#2464: When viewing a User's effective permissions, disabled
    devices should show denied
  - issue#2465: Too many groups hide effective permission column when
    viewing User's effective permissions
  - issue#2466: Manual data source creation is broken
  - issue#2469: When using Matching Objects filter within Automation
    Graph Rules, unexpected redirect occurs
  - issue#2471: When Creating a new Graph Template, clear the Graph
    Template permissions cache
  - issue#2472: Bad navigation items cause Array to string conversion errors
  - issue#2474: REGEXP_SNMP_TRIM does not handle Gauge fields properly
  - issue#2475: When resetting filters, multiple sort session variables do
    not always reset properly
  - issue#2476: When using CMD.PHP for polling, device polling time is not updated
  - issue#2477: When saving a Data Input Method, Output Field name changes
    to incorrect value
  - issue#2478: When saving a LINEX type Graph Item, the Line Width value is
    too restrictive
  - issue#2479: RPN function select list should be sorted when editing
    CDEF and VDEF's
  - issue#2480: RRDtool versions in Cacti not granular enough
  - issue#2482: When upgrading past 1.1.34, upgrade attempts to drop a
    non-existing primary key
  - issue#2491: Data Source Info suggests commands RRDTool can't honor
  - issue#2492: When data templates are filtered by profile, data source
    list does not get same filter applied
  - issue#2493: Data Source Info is not separated properly
  - issue#2494: User Login History is not fully enabled for translations
  - issue#2497: When linking to Graphs, unless both start and end are
    specified, only defaults are used
  - issue#2499: Data Source reapply names does not update name from
    data query or template.
  - issue#2500: Allow Data Source repairs from the Data Source Debug and
    Data Source Info pages
  - issue#2502: Unable to have a min or max value for RRDfile at zero '0'
  - issue#2503: The Cacti Statistics Device Template is not include in release
  - issue#2509: When checking for correct Unicode, minimum MySQL version
    is incorrect
  - issue#2513: When a plugin INFO file is malformed or missing elements,
    plugin_load_info_file() should fill missing elements
    with defaults
  - issue#2519: When editing a data query, graph template picker shows
    poor performance
  - issue#2518: Unexpected errors when filtering Data Sources with
    invalid 'rows' value
  - issue#2522: When upgrading from pre-1.0.0, colors were not upgraded
    properly by Givo29
  - issue#2525: Tree branches that includes sites which have valid devices
    do not appear on Graph Tree
  - issue#2527: When importing a package, if Cacti version is below the
    version which that exported, a clear message should be shown
  - issue#2531: When updating color template items, the table name used
    is incorrect by Givo29
  - issue#2535: Ensure Graph ListView uses same UI logic as Graph Management
  - issue#2537: Incorrect title showing when changes are made to Tree
  - issue#2543: Poor performance showing a device's graphs on a tree
  - issue#2547: RRD values are not being properly trimmed
  - issue#2551: When checking MySQL configuration values, consider ON/OFF
    to be equal to 1/0
  - issue#2553: When upgrading from 1.0.0 or below, renaming automation
    columns can cause issues
  - issue#2555: Missing configuration defaults prevent installations/upgrades
    without showing reason
  - issue#2563: When sorting Data Sources, missing index causes unnecessary delays
  - issue#2564: Filtering for Orphan Data Sources is unreliable
  - issue#2565: Pages with 500+ selectable items in a single able can
    suffer from poor performance
  - issue#2568: When querying for diagnostic data, devices on remote pollers
    should proxy the request
  - issue#2571: External Links do not properly validate user permissions
  - issue#2575: Poller errors occur if a file exists that the website cannot read
  - issue#2576: Spikekill API does not work when called from plugins
  - issue#2578: When importing packages, missing/new resources are not created
  - issue#2581: When viewing poller cache, Device SNMP community is not
    properly escaped
  - issue#2583: When JSON module is not installed, Installer does not
    correctly show missing message
  - issue#2584: When user/group permissions are reset, this is not reflected
    immediately to the end user
  - feature#2505: Improve performance of Data Source Statistics
  - feature#2515: Allow more than one SNMP port to be specified when
    adding devices via CLI
  - feature: Update phpseclib to version 2.0.15
  - feature: Adjust the max table rows based upon value of 'max_input_vars'</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti 1.2.17:
  * Fix incorrect handling of fields led to potential XSS issues
  * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804)
  * Fix various XSS issues with HTML Forms handling
  * Fix handling of Daylight Saving Time changes
  * Multiple fixes and extensions to plugins
  * Fix multiple display, export, and input validation issues
  * SNMPv3 Password field was not correctly limited
  * Improved regular expression handling for searcu
  * Improved support for RRDproxy
  * Improved behavior on large systems
  * MariaDB/MysQL: Support persistent connections and improve
    multiple operations and options
  * Add Theme 'Midwinter'
  * Modify automation to test for data before creating graphs
  * Add hooks for plugins to show customize graph source and customize
    template url
  * Allow CSRF security key to be refreshed at command line
  * Allow remote pollers statistics to be cleared
  * Allow user to be automatically logged out after admin defined
    period
  * When replicating, ensure Cacti can detect and verify replica
    servers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625918400">- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue</changelog>
</package>
<package pkgid="b86461fcddb7f21390cce97c84974a5f97ea76131990ac09ecb40c9099b68d2c" name="cacti" arch="noarch">
  <version epoch="0" ver="1.2.19" rel="lp152.2.18.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti 1.2.17:
  * Fix incorrect handling of fields led to potential XSS issues
  * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804)
  * Fix various XSS issues with HTML Forms handling
  * Fix handling of Daylight Saving Time changes
  * Multiple fixes and extensions to plugins
  * Fix multiple display, export, and input validation issues
  * SNMPv3 Password field was not correctly limited
  * Improved regular expression handling for searcu
  * Improved support for RRDproxy
  * Improved behavior on large systems
  * MariaDB/MysQL: Support persistent connections and improve
    multiple operations and options
  * Add Theme 'Midwinter'
  * Modify automation to test for data before creating graphs
  * Add hooks for plugins to show customize graph source and customize
    template url
  * Allow CSRF security key to be refreshed at command line
  * Allow remote pollers statistics to be cleared
  * Allow user to be automatically logged out after admin defined
    period
  * When replicating, ensure Cacti can detect and verify replica
    servers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625918400">- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti 1.2.19:
  * Further fixes for grave character security protection (boo#1192408)
  * Fix Over aggressive escaping causing menu visibility issues on Create Device page
  * Add SHA256 and AES256 security levels for SNMP polling
  * Import graph template(Preview Only) show color_id new value as a blank area
  * Fix Editing graphs errors due to missing sequence
  * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen
  * Fix 2hen RealTime is not active, console errors may appear
  * Fix race conditions may occur when multiple RRDtool processes are running
  * Fix errors creating graphs from templates
  * Fix errors when duplicating reports
  * Fix Boost may be blocked by overflowing poller_output table
  * Fix Template import may be blocked due to unmet dependency warnings with snmp ports
  * Fix Newer MySQL versions may error if committing a transaction when not in one
  * Fix SNMP Agent may not find a cache item
  * Fix Correct issues running under PHP 8.x
  * Fix When polling is disabled, boost may crash and creates many arch tables
  * Fix When poller runs, memory tables may not always be present
  * Fix Timezones may sometimes be incorrectly calculated
  * Fix Allow monitoring IPv6 with interface graphs
  * Fix When a data source uses a Data Input Method, those without a mapping should be flagged
  * Fix When RRDfile is not yet created, errors may appear when displaying the graph
  * Fix Cacti missing key indexes that result in Preset pages slowdowns
  * Fix Data Sources page shows no name when Data Source has no name cache
  * Fix db_update_table function can not alter table from signed to unsigned
  * Fix data remains in poller_output table even if it's flushed to rrd files
  * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places
  * Fix Offset is a reserved word in MariaDB 10.6 affecting Report
  * Fix Rendering large trees slowed due to lack of permission caching
  * Fix Error on interpretation of snmpUtime, when to big
  * Fix Applying right axis formatting creates an error-image
  * Fix Unable to Save Graph Settings from the Graphs pages
  * Fix Graph Template Cache is nullified too often when Graph Automation is running
  * Fix When Adding a Data Query to a Device, no Progress Spinner is shown
  * Fix New Browser Breaks Plugins that depend on non UTC date time data
  * Fix errors when testing remote poller connectivity
  * Fix errors when renaming poller
  * Fix Removing spikes by Variance does not appear to be working beyond the first RRA
  * Fix LDAP API lacks timeout options leading to bad login experiences
  * Add a normal/wrap class for general use
  * Limit File Types available for Template Import operations
  * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication
  * Support Stronger Encryption Available Starting in Net-SNMP v5.8
  * Allow Cacti to use multiple possible LDAP servers
  * Add a 15 minute polling/sampling interval
  * Provide additional admin email notifications
  * Add warnings for undesired changes to plugin hook return values
  * When creating a Graph, make testing the Data Sources optional by Template
  * Update phpseclib to 2.0.33
  * Update jstree.js to 3.3.12
  * Improve performance of Cacti poller on heavily loaded systems
  * MariaDB recommendations need some tuning for recent updates</changelog>
</package>
<package pkgid="c64b6f0402f195a6bdb8d17bc16cff62836a1ceebb6300f8a231a3ff8f714336" name="cacti" arch="src">
  <version epoch="0" ver="1.2.19" rel="lp152.2.18.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Build version 1.2.4
  - issue#2523: Send A Test Email stops working under PHP 7.3
  - issue#2589: Missing RRD file can cause DSSTATS to throw errors
  - issue#2590: When installing, chosen language is sometimes lost
  - issue#2591: Menu selection does not always match selected page/section
  - issue#2592: When viewing an aggregate graph, 'Display graphs from this aggregate'
  option does always not work
  - issue#2593: Unable to migrate aggregate graphs to matching aggregate template
  - issue#2598: Creating an aggregate graph without associated template causes
    RRDtool error
  - issue#2599: Creating/Updating an Aggregate Graph to use LINE/STACK's
    generates invalid SQL statements
  - issue#2604: When adding a dataquery, SQL errors can be generated
  - issue#2605: When installing, checking database tables can cause errors
  - issue#2608: db_update_table() function should not require an engine type or comment
  - issue#2609: When updating from earlier than 1.2, timezone column might not exist
  - issue#2610: Data Sources troubleshooter generates warning that each()
    function is deprecated
  - issue#2612: When RRDtool fails to initialize, DSStats generates lots of warnings
  - issue#2618: ifAdminStatus in snmp_queries/interfaces.xml
  - issue#2621: File paths that accept blanks are not allowing blanks
  - issue#2622: Various undefined variables generate errors within database.php
  - issue#2623: When using form_text_area(), invalid HTML can be generated
  - issue#2627: Some filenames can be lost in log file selection list
  - issue#2629: When upgrading, ldap library is not loaded properly due to incorrect paths
  - issue#2632: Automated Networks are not being properly replicated to additional pollers
  - issue#2635: When running automation scans, database connection should be
    forced to central database
  - issue#2638: Support disabling PHP SNMP extension by mhoran
  - issue#2645: Some URLs are incorrectly calculated
  - issue#2649: Automation not creating graphs when there are custom items
  - issue#2650: Several undefined variables are generating warnings
  - issue#2662: HRULE objects broken in some cases
  - issue#2668: Trailing parentheses are removed from the SNMP system description
  - issue#2672: Cacti Install on Windows Fails
  - issue#2676: Skin paper plane not working on iPhone XR
  - issue#2678: Call to undefined function _() in data_queries.php
  - issue#2679: Users with passwords that do not meet complexity requirements are
    not redirected to the Change Password page
  - issue#2680: Remove deprecated $php_errormsg usage
  - issue#2689: Increase boost maximum memory limits
  - issue#2693: Graph links do not contain URL path causing links to fail
  - issue#2698: Avoid duplicated icon in the main.js of all themes
  - issue#2699: Login option "Show the page that user pointed their browser to"
    does not work properly
  - issue#2702: sqltable_to_php.php does not always generate valid table data arrays
  - issue#2707: Some pages that have permission errors dont raise proper messages
  - issue#2712: PHP memory should be unlimited in scripts that need more memory than the default
  - issue#2713: SNMP System Description with UTF8 strings properly are not properly parsed
  - issue#2718: When links are converted to ajax calls, mailto links should not be included
  - issue#2720: When calculating percentiles, the value is incorrect as
    the steps are not placed in correct order
  - feature#2538: Allow users to change default method of removing data sources
    when deleting graphs
  - feature#2539: Allow users to set the default graph lock status
  - feature#2540: Allow users to enable/disable graph tree history
  - feature#2646: Allow application of automation rules on CLI by rb83
  - feature#2654: New hook to notify plugins of user profile changes ('auth_profile_update_data')
  - feature#2664: Add option to purge spikekill backups
  - feature#2701: Provide option to continue graphing objects that loose their index
  - feature#2704: Device and template cache do not refresh properly</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Build version 1.2.5
  - issue#1978: Popup Menus can appear off screen when using Graph Thumbnails
  - issue#2282: Installation wizard does not detect RRDtool version correctly
  - issue#2524: When editing a tree, Drag and Drop of Devices does not always
    work as expected
  - issue#2573: Associated Graph Template for Data Query can sometime disappear
  - issue#2656: GPRINT text_format does not replace Data Query and Host Fields
  - issue#2661: Automation does not always calculate network range/subnet correctly
  - issue#2663: Some legacy Data Queries can not determine their index order
    causing broken graphs
  - issue#2674: Large strings can sometimes cause language translation can fail
  - issue#2719: Automation may sometimes create empty graphs
  - issue#2721: When replacing '|input_xxxx|' strings, undefined index can occur
  - issue#2722: Calls to _db_replace() are not consistent resulting in warnings
  - issue#2723: When replicating to remote pollers, Undefined Variable errors may be seen
  - issue#2724: When graphing HRULE items, 'Only Variables should be passed by
    reference' error may be seen
  - issue#2725: When viewing logs in utilities, filenames should be limited the same as clog
  - issue#2726: During Automation logging, include the Rule ID that triggers
    the creation of an item by xmacan
  - issue#2732: When using basic authentication, automatically strip any @domain information
  - issue#2734: Allow non-english labels to be used on Graph Templates
  - issue#2727: When using Polling Hosts Template, warnings can be issued when
    CMD.PHP is the poller
  - issue#2733: When processing SNMP data, space delimited hex strings do not
    always convert into MAC addresses
  - issue#2735: Mouse cursor should show as default pointer if column is not sortable
  - issue#2736: When using MySQL 8 or above, 'function' is considered a reserved word
    unless quoted by xmacan
  - issue#2741: Various errors can occur due to undefined or incorrect variable names
  - issue#2742: Various errors can occur due to undefined or incorrect variable names
  - issue#2743: Attempts to close a tooltip when no tooltip has been set may cause errors
  - issue#2744: When changing password, undefined index error can occur if user is not logged in
  - issue#2748: If PHP location setting is invalid during install/upgrade, this
    should be notified on modules page
  - issue#2750: When performing multiple sort, highlighting of content occurs
  - issue#2751: When editing a Tree, display filter may not allow 'All' option to work
  - issue#2752: When running verbose query on device, you are unable to copy text from items
  - issue#2753: Unable to copy entire verbose query using clipboard command
  - issue#2757: Page Navigation can be subject to XSS injection
  - issue#2758: Various sensitive directories are browsable if web server directory browsing is enabled
  - issue#2760: Unable to add items into a report
  - issue#2762: Creating an aggregate graph can sometimes fail due to unknown RRD tools error
  - issue#2766: When modifying Aggregate Templates, changes are not always cascaded to Graph
  - issue#2768: Aggregate Graphs may sometimes show the wrong row count
  - issue#2770: ItemType is not updated when saving Report Items
  - issue#2772: Add tooltip support to html_header() and html_header_checkbox()
  - issue#2775: Remote pollers may sometimes fail to replicate data back to main system
  - issue#2777: Attempting to edit a non-existent report generates an error
  - issue#2778: When rendering graphs, resizing can sometimes occur repeatedly
  - issue#2779: On new installations, automation rules for Interface Graphs are broken
  - issue#2780: Upgrade database script not actually upgrading Cacti
  - issue#2782: When replicating the syslog plugin, the configuration file is ignored causing errors
  - issue#2783: When limiting the number of displayed characters, international characters
    may sometimes display incorrectly
  - issue#2784: When removing a device with graphs but no data sources , errors are generated
  - issue#2785: When editing a graph rule, warnings incorrectly appear about unsaved changes
  - issue#2792: When a checkbox 'friendly name' has a comma, checkbox functionality stops working
  - issue#2797: When upgrading from before 1.x, SuperLinks view permissions may not be correct
  - issue#2799: Under heavy use of Real Time Graphs, SQL errors may start appearing
  - issue#2800: When editing a tree, using a comma in the search field stops search from working
  - issue#2802: If a Device lacks ifName, an alternative field is not always found even if available
  - issue#2807: When editing a Data Template that has dependant graphs, some attributes
    should not be modifiable
  - issue#2808: When navigating a tree, the layout may unexpectedly move
  - issue#2814: When viewing the utilities page, HTML tags may be seen rather than rendered
  - issue#2816: When viewing logs, paging does not always working correctly
  - issue#2818: Automation can sometimes incorrectly add duplicate devices with the same sysname
  - issue#2820: When path is blank, is_resource_writable() will generate 'Uninitialized string offset: -1'
  - issue#2821: When the desired locale can not be located, a number format issue may occur
  - feature#2728: Update phpseclib to 2.0.17 by DavidLiedke
  - feature#2809: Update c3.js &amp; d3.js by DavidLiedke
  - feature#2730: Update jstree.js to 3.3.8 by DavidLiedke
  - feature#2754: Allow Devices, Graphs and Data Sources to be searched by ID
  - feature#2765: When editing a tree, allow cascading selection of available graphics
  - feature#2805: Merged plugins are not always upgraded correctly
  - feature#2823: Enhance the splice_rrd.php to be able to merge RRDfiles of differing step</changelog>
  <changelog author="kukuk@suse.de" date="1566302400">- BuildRequire cron as this contains now the cron directories</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Build version 1.2.6
  - issue#2794: Graph template not saved on graph edit
  - issue#2825: "innodb_doublewrite = off" possibly dangerous recommendation
  - issue#2829: PHP recommendations always see memory limit as unlimited
  - issue#2830: Disabled Top/Bottom external links should not be displayed
  - issue#2832: Install/Upgrade log does not show anything
  - issue#2833: Undefined index can occur when data source does not have an
    snmp_index
  - issue#2834: Boost performance drops on very large systems
  - issue#2835: When creating graphs and inneficient query is causing long
    creation times
  - issue#2837: Sunrise theme does not render checkboxes 100% correctly
  - issue#2838: jQueryMultiselect does not match upstream due to forking
  - issue#2839: Non regular expression search filters don't support international
    characters
  - issue#2841: Total count is wrong after searching for External Link pages
  - issue#2843: DSStats reruns Daily Aggregation every minute
  - issue#2844: Autocomplete settings for passwords are not properly defined
  - issue#2845: Data Template can't be edited when it is in use
  - issue#2846: Allow tooltips for section headers with 'question' icon
  - issue#2847: Permanently convert an Aggregate to a regular graph
  - issue#2848: Aggregate graphs get clipped due to incorrect date range
  - issue#2856: Aggregate issues with very long RRDtool command lines
  - issue#2857: When trying to find the best index to use, a 'must implement
    Countable' warning appears
  - issue#2860: When testing remote poller connections during install, undefined
    variable warning can occur
  - issue#2862: Automation does not calculate network information correctly for
    single hosts
  - issue#2866: Add poller ID to subject for admin notifications
  - issue#2869: When creating aggregates from Graphs, JavaScript issues can occur
  - issue#2872: Add support for MySQL 8 and use of grouping as name for a column
  - issue#2875: Undefined variable when removing spikes in some cases
  - issue#2877: When attempting to send report, undefined function 'get_tinespan' messages appear
  - issue#2878: Function get_magic_quotes_gpc() is now deprecated in PHP 7.4
  - issue#2879: Switching from authPriv to authNoPriv produces error when saving
  - issue#2884: Replication continues to occur when poller has been disabled by sysres-dev
  - issue#2891: Script server script ss_fping.php generates error when not called
    by script server
  - issue#2895: Percentile calculation is incorrect on Graphs with multiple Data
    Sources from different RRDs
  - issue#2901: Poller overrun warning message is badly worded
  - issue#2902: Mailer incorrectly reports it is sending to noone
  - issue#2903: PHP recommendations can generate a warning causing JSON issues
  - issue#2905: Sorting plugins by version can lead to unexpected ordering
  - issue#2907: SSL column for multiple pollers can be incorrectly set causing SQL errors
  - issue#2908: When URL_PATH is blank, it should assume that it is '/'
  - issue#2909: Correct usage of affect vs effect in strings
  - issue#2910: Can not show user menu when in portrait mode on mobile devices
  - issue#2911: Graph variables are not always encoded to JSON properly resulting in warnings
  - issue#2912: Navigation cache can sometimes be corrupted resulting in a non-array value
  - issue#2913: When adding new graphs, the type of graph is not remembered
  - issue#2917: Action icons next to graphs can sometimes become unselectable due to zoom
  - issue#2919: When refreshing menu, selected items are sometimes lost and submenu
    items can become hidden</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Build version 1.2.7
  - security#2964: CVE-2019-16723 Security issue allows to view all graphs
  - issue#1181: When opening the Scheduler, it may appear off screen when
    opened near the bottom of a window
  - issue#2894: When using Remote Data Collectors, database information and
    recommendations may show Incorrect values
  - issue#2895: When using data sources from different RRDs, Percentile
    calculation may be incorrect
  - issue#2899: When displaying a form, variable substitution may not always
    work as expected
  - issue#2922: When running a data query, the result may come back as undefined
  - issue#2925: When using consolidation functions, retrieving the first step
    can cause errors
  - issue#2926: When editing a graph, variable validation errors may prevent
    changes from being saved
  - issue#2929: Boost performance may become poor even in single server mode
  - issue#2930: RRDtool can generate errors to standard output which can corrupt images
  - issue#2932: When RRDTool generates an error creating an image, it is not
    always reportedly properly
  - issue#2936: Installer will loop when number of tables exceeds PHP's max_input_vars limit
  - issue#2938: Under CentOS packages, upgrade_database.php script uses incorrect
    location for DB upgrade scripts
  - issue#2940: Images are not always properly sized until the page size changes
  - issue#2949: Order icons may not be properly aligned
  - issue#2951: Allow legends to be modified for Aggregate Graphs
  - issue#2958: Drop down autocomplete lists do not always open as expected
  - issue#2961: When syncing device templates, undefined function may be raised
  - issue#2963: When running ss_cpoller script, avgTime incorrect returns maxTime
  - issue#2966: Realtime popup windows do not always honor settings
  - issue#2967: When using Spikekill, gap and range fill are not operating as expected
  - issue#2970: When a user edits their profile, buttons may appear as unusable whilst
    still being enabled
  - issue#2973: User menu does not always display properly on mobile devices
  - issue#2974: Script Server can raise unexpected warnings when 'arg_num_indexes'
    set but not found in data source
  - issue#2975: Datasource Debug does not properly handle European numbers in
    certain circumstances
  - issue#2976: Boost messages should be stored in their own log file
  - issue#2977: Data updates with past timestamps can cause boost errors
  - issue#2978: Moving hosts between data collectors is slow
  - issue#2979: Multi Output Fields are not parsed correctly
  - issue#2984: When checking SQL fields, value was not always primed
  - issue#2986: Selecting 'Devices' menu pick closes 'Management' menu
  - feature#2943: Allow all Data Queries of a device to be re-indexed at once
  - feature#2952: If device is down or threshold breached, highlight in tree view
  - feature#2985: Update phpseclib to 2.0.23</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti 1.2.8:
  * CVE-2019-17357: When viewing graphs, some input variables were
    not properly checked (SQL injection possible) [boo#1158990]
  * CVE-2019-17358: Unsafe deserialisation of data [boo#1158992]
  * When using HTTPS, secure cookie to prevent potential weakness
  * various bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti 1.2.9:
  * CVE-2020-7106: Lack of escaping on some pages could lead to XSS
    exposure (boo#1161297)
  * CVE-2020-7237: Remote Code Execution due to input validation
    failure in Performance Boost Debug Log (boo#1161297)
  * many bug fixes</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584273600">- cacti 1.2.10:
  * CVE-2020-8813: when guest users have access to realtime graphs,
    remote code could be executed (boo#1164675)
  * When using User Domains, global template user is used instead of
    the configured domain template user
  * Unix timestamps after Sep 13 2020 are rejected as graph start/end
    arguments
  * many bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti 1.2.11:
  * security fixes and hardening (boo#1169215)
    + Add SameSite support for cookies
    + Cookie should be properly verified against password
    + CSRF at Admin Email
    + Improper Access Control on disabling a user
    + Update to jQuery 3.4.1 to resolve XSS issues with jQuery 3.3.1
  * a number of bug fixes
  * feature additions
    + Allow system uptime to be a variable for use with graphs
    + Add Refresh Interval to Data Collectors display
    + Add Location based filtering
    + Allow for Purging of Data Source Statistics from the GUI
    + Restore ability to duplicate a data profile
    + Enhance table navigation bars to support systems with larger number of items
    + Increase length of Graph Item 'value' field to support pango-markup better
    + Allow Basic Auth Accounts to be mapped by CSV file
    + Make form elements under checkbox_groups flow using flex grid style
    + Set the domain attribute to secure cookies for the 'remember me' option
    + Enhance the "Graph Debug Mode" to display RRDtool Command lengths and excess warnings</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti 1.2.12:
  * CVE-2020-7106: Lack of escaping of color items can lead to XSS
    exposure (boo#1163749)
  * Fix multiple graphing bugs and web UI issues
  * Fix multiple warnings, PHP Exceptions and errors
  * Content-Security-Policy prevents External Links from being opened
  * Prevent runtime memory issues by increasing memory limit
  * Improve SNMPv3 handling</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1589198400">- switch from cron to systemd timers (boo#1115436):
  + cacti-cron.timer
  + cacti-cron.service
- introduce rpmlintrc for obvious false positives from rpmlint
  + cacti-rpmlintrc
- use fdupes to reduce amount of needed/wasted space
- re-introduce RPM Group to avoid huge rpmlint complains on 15.1
- remove .gitignore and .gitattributes files (not needed)
- avoid potential root escalation on systems with fs.protected_hardlinks=0
  (boo#1154087): handle directory permissions in file section instead
  of using chown during post installation
- rewrote apache configuration to get rid of .htaccess files and
  explicitely disable directory permissions per default
  (only allow a limited, well-known set of directories)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti 1.2.13:
  * Query XSS vulnerabilities require vendor package update
    (CVE-2020-11022 / CVE-2020-11023)
  * Lack of escaping on some pages can lead to XSS exposure
  * Update PHPMailer to 6.1.6 (CVE-2020-13625)
  * SQL Injection vulnerability due to input validation failure when
    editing colors (CVE-2020-14295, boo#1173090)
  * Lack of escaping on template import can lead to XSS exposure</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti 1.2.14:
  * Poller keeps using old IP address for a device
  * poller bug fixes and various display fixes
  * Fix XSS vulnerability due to improper escaping of error message
    during template import preview (boo#1174850, CVE-2020-25706)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti 1.2.15, fixing the following bugs:
  * When editing Maximum OIDs Per Get Request, blank value can cause errors
  * Boost may run more often than it should
  * Recache Event Loop can cause Interface Graphs to show gaps
  * When searching Graph Tree's, non matching devices remain visible
  * Page validation errors may occur when opening real time graphs
  * External Links do not always open if they are still open from previous usage
  * Cultural changes to various word usage
  * Replicate deleted device status instead of poller sync
  * Description field allows more characters entered than is stored
  * When installing or upgrading, LDAP functions may not always be included properly
  * Unable to remove discovered device
  * When installing or upgrading, PHP recommendations may not always return a valid value
  * Graph Templates has duplicate SQL delete statement
  * When syncing to remote poller, missing function errors may occur
  * When removing devices from remote pollers, devices may reappear without details
  * When removing devices, array errors may sometimes be recorded
  * Variable injection does not always work as expected
  * Editing Data Queries with multiple data templates can give errors about Suggested values
  * Progress bar does not provide enough visual information during long page loads
  * Some themes do not allow for a way to see which user is currently signed in
  * When viewing tables, allow users to force all columns to be visible
  * Column sizing is being lost between pages refreshes
  * When viewing input methods table, no ID is shown to help identify which method is being viewed
  * Filters do not always respect using keyboard to initiate searching
  * When exporting a data query, an invalid column name error can sometimes be shown
  * When checking if a view is allowed, having no session can result in errors
  * When removing devices via the CLI, undefined variable errors may be seen
  * Real Time Graphs may cause invalid index errors
  * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues
  * Plugin setup can generate errors when reading options via system function
  * Plugin version numbers can be unexpectedly truncated
  * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it
  * When removing multiple items, selection process does not always work
  * When exporting colors, the indicator is not always removed upon completion
  * Unable to pass tree and leaf ID to 'graph_button' hook
  * When performing maintenance, various errors may sometimes be seen
  * When Guest User setting is active, current user is not always properly set
  * When installing Cacti, minor errors in text can be seen
  * Numbers are not always formatted properly when there are no decimal places
  * When viewing Real Time Graphs, an undefined index error may be recorded
  * Minor memory leaks and refresh issues when zooming on graphs
  * Real Time Graphs may sometimes fail due to folder permissions
  * Navigation can sometimes occur unexpectedly due to background timers
  * Trees management screen not reporting correct number of trees
  * Tree sequences can sometimes skip numbers during resorting
  * Guest user selection should not allow setting the currently logged in user
  * Links in Table Headers do not show clearly when in modern theme
  * Under some cases tree logic leads to undefined index errors
  * Cacti Data Debug can show errors if the Data Source is damaged or has been removed
  * When importing a data query, an invalid column name error can sometimes be shown
  * When using shift functions on graphs, negative values are not allowed
  * Correct issue when file is unreadable reporting no file was specified
  * Orphaned Plugins have no option to be removed
  * Update MySQL recommendations for Character Set and Colation
  * Correct sorting of IP addresses to be numeric not alpha by JamesTilt
  * Saving a device should not always repopulate the poller cache</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1606996800">- cacti 1.2.16:
  * When generating a report, the Cascade to Branches function does not as expected
  * When viewing graphs, automatic refresh so not always work as expected
  * Realtime graph pop up counter bug
  * Undefined variable errors may occur when creating a new datasource
  * The cli-based installer does not exit with a non-zero exit code when error occurs
  * When an export is complete, sometimes the progress bar remains
  * When enabling many devices, a threshold can be reached causing a slowdown in the process
  * When performing actions against Devices, replicated device information could sometimes be lost
  * When using API to rename a tree node, backtrace may be incorrectly shown
  * When searching, valid pages can sometimes be shown as empty by ddb4github
  * When exporting data from graphs, not all data was properly included
  * Graph Templates filter is not updated after new graph created by ddb4github
  * Username and password on the login page is not visible in Classic theme
  * Improve wording of concurrent process and thread settings
  * Location filter should remove blank entries by ddb4github
  * When syncing data collectors, a reindex event may be triggered unnecessarily
  * Automation Networks allows discovery of invalid IP addresses
  * When changing permissions of the current user, they don't take effect immediately
  * When reindexing a device, an incorrect page was sometimes displayed
  * When repairing database, audit_database.php does not add missing columns
  * Log page should not be empty if no log info exists
  * During upgrade, there are times when realms can be duplicated leading to SQL errors
  * When using ping.php, UDP response times are not interpreted properly by hypnotoad
  * Improve warning you get when attempting to view a log file you don't have access to
  * When replicating files, scripts are not marked as executable
  * When creating plugin tables, collation is not set properly
  * Update c3.js to version 0.7.20
  * Update Chart.js to version 2.9.4
  * Update phpseclib to version 2.0.29
  * Update PHPMailer to version 6.1.8
  * Use LSB shebang notation for cli scripts
  * Add support for cactid daemon based launcher
  * Add ability to hide the Graph Drilldown icons by datatecuk
  * Add hooks for plugins to show custom Graph Source and custom Template URL (List View)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608292800">- fix httpd startup errors due to mismatched configuration
  directives boo#1175314</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti 1.2.17:
  * Fix incorrect handling of fields led to potential XSS issues
  * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804)
  * Fix various XSS issues with HTML Forms handling
  * Fix handling of Daylight Saving Time changes
  * Multiple fixes and extensions to plugins
  * Fix multiple display, export, and input validation issues
  * SNMPv3 Password field was not correctly limited
  * Improved regular expression handling for searcu
  * Improved support for RRDproxy
  * Improved behavior on large systems
  * MariaDB/MysQL: Support persistent connections and improve
    multiple operations and options
  * Add Theme 'Midwinter'
  * Modify automation to test for data before creating graphs
  * Add hooks for plugins to show customize graph source and customize
    template url
  * Allow CSRF security key to be refreshed at command line
  * Allow remote pollers statistics to be cleared
  * Allow user to be automatically logged out after admin defined
    period
  * When replicating, ensure Cacti can detect and verify replica
    servers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625918400">- cacti 1.2.18:
  * CVE-2020-14424: Lack of escaping on template import can lead to
    XSS exposure under 'midwinter' theme (boo#1188188)
  * Real time graphs can expose XSS issue</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti 1.2.19:
  * Further fixes for grave character security protection (boo#1192408)
  * Fix Over aggressive escaping causing menu visibility issues on Create Device page
  * Add SHA256 and AES256 security levels for SNMP polling
  * Import graph template(Preview Only) show color_id new value as a blank area
  * Fix Editing graphs errors due to missing sequence
  * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen
  * Fix 2hen RealTime is not active, console errors may appear
  * Fix race conditions may occur when multiple RRDtool processes are running
  * Fix errors creating graphs from templates
  * Fix errors when duplicating reports
  * Fix Boost may be blocked by overflowing poller_output table
  * Fix Template import may be blocked due to unmet dependency warnings with snmp ports
  * Fix Newer MySQL versions may error if committing a transaction when not in one
  * Fix SNMP Agent may not find a cache item
  * Fix Correct issues running under PHP 8.x
  * Fix When polling is disabled, boost may crash and creates many arch tables
  * Fix When poller runs, memory tables may not always be present
  * Fix Timezones may sometimes be incorrectly calculated
  * Fix Allow monitoring IPv6 with interface graphs
  * Fix When a data source uses a Data Input Method, those without a mapping should be flagged
  * Fix When RRDfile is not yet created, errors may appear when displaying the graph
  * Fix Cacti missing key indexes that result in Preset pages slowdowns
  * Fix Data Sources page shows no name when Data Source has no name cache
  * Fix db_update_table function can not alter table from signed to unsigned
  * Fix data remains in poller_output table even if it's flushed to rrd files
  * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places
  * Fix Offset is a reserved word in MariaDB 10.6 affecting Report
  * Fix Rendering large trees slowed due to lack of permission caching
  * Fix Error on interpretation of snmpUtime, when to big
  * Fix Applying right axis formatting creates an error-image
  * Fix Unable to Save Graph Settings from the Graphs pages
  * Fix Graph Template Cache is nullified too often when Graph Automation is running
  * Fix When Adding a Data Query to a Device, no Progress Spinner is shown
  * Fix New Browser Breaks Plugins that depend on non UTC date time data
  * Fix errors when testing remote poller connectivity
  * Fix errors when renaming poller
  * Fix Removing spikes by Variance does not appear to be working beyond the first RRA
  * Fix LDAP API lacks timeout options leading to bad login experiences
  * Add a normal/wrap class for general use
  * Limit File Types available for Template Import operations
  * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication
  * Support Stronger Encryption Available Starting in Net-SNMP v5.8
  * Allow Cacti to use multiple possible LDAP servers
  * Add a 15 minute polling/sampling interval
  * Provide additional admin email notifications
  * Add warnings for undesired changes to plugin hook return values
  * When creating a Graph, make testing the Data Sources optional by Template
  * Update phpseclib to 2.0.33
  * Update jstree.js to 3.3.12
  * Improve performance of Cacti poller on heavily loaded systems
  * MariaDB recommendations need some tuning for recent updates</changelog>
</package>
<package pkgid="f7691bb6ba5698c241715ef62bbe50215b891955f7926371540573722b3e92ae" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.13" rel="lp152.2.3.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516708800">- Update to version 1.1.33
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
</package>
<package pkgid="6c554cd38c50f3a8b30d6270c1ea09e2c80589e66387add7cb6e67e6081fb31a" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="lp152.2.3.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516708800">- Update to version 1.1.33
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
</package>
<package pkgid="bdd0f753047f2dcf5b7acc4f45634f1469679687c53a21b5ac229bcccfeb510b" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.14" rel="lp152.2.6.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
</package>
<package pkgid="d0d4387cefebee481f998459b82bb13e7e004ce14209efc8bdce75a272189017" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="lp152.2.6.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
</package>
<package pkgid="a51e59cd14b89277f8792b43dd94233e1ac89cd05508b40508e436f8cf708cc7" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.17" rel="lp152.2.9.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
</package>
<package pkgid="9e19cb4189dff5124e10d9684b416f8460878758d8cb144fec922016ee76f96e" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="lp152.2.9.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
</package>
<package pkgid="dd157762a8ae998d6d800980349148b8d2eb24d1a9b3fd019f4476ea16817ea4" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.18" rel="lp152.2.12.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
</package>
<package pkgid="13b3c8f33845aac809f0cbc239bf4d0a47246a5a37c5e3c5d35d039dbbb15aba" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.18" rel="lp152.2.12.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
</package>
<package pkgid="dc8df34b08fff002a7d035287b9669992171753fb092001de4493d7c5f9a3a55" name="cacti-spine" arch="src">
  <version epoch="0" ver="1.2.19" rel="lp152.2.15.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
</package>
<package pkgid="a88ff22cf20e536e795814a9480a3689f67a4029209599ef83c3fbca97be1e66" name="cacti-spine" arch="x86_64">
  <version epoch="0" ver="1.2.19" rel="lp152.2.15.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
</package>
<package pkgid="d419c76a4dc48c27eecb149557d244ea9f519dece4f98078d686de6e4874da9f" name="caja-extension-nextcloud" arch="noarch">
  <version epoch="0" ver="3.1.2" rel="lp152.2.3.1"/>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1569585600">- Update to 2.6.0
  * desktop#1222 Reinstate Debian build in the new Drone config
  * desktop#1225 Typo
  * desktop#1256 Marking unused strings as unstranslatable
  * desktop#1275 Fixes #607
  * desktop#1278 Fixes issue #878
  * desktop#1342 Fixes issue #1187
  * desktop#1347 Displays FileIgnored activities with an info icon
  * desktop#1354 Minor text change in the link to help in the tab 'General'.
  * desktop#1359 Update Qt 5.5 compatibility patch for Xenial
  * desktop#1360 Remove Ubuntu Cosmic and add Eoan package
  * desktop#1366 Add proper CA to client side certificate connection
  * desktop#1372 Remove dependency on libgnome-keyring0 on Eoan
  * desktop#1374 Read .sync_exclude.lst in each subdirectory
  * desktop#1376 Updates ChangeLog.
  * desktop#1384 Login flow v2
  * desktop#1389 Adds SSL client cert storage to webflow + Login Flow v2
  * desktop#1394 Windows: Workaround for CredWriteW used by QtKeychain
  * desktop#1399 Integrated registry check on windows when hasDarkSystray is called.
  * desktop#1401 Logo update
  * desktop#1402 Updated .gitignore to integrate unwanted files when working with VSC ?
  * desktop#1405 Full-Scaled new logo in Windows 10 start menu tile
  * desktop#1408 Qt5.5 compatiblity patch for login flow V2 + UI improvement (Use newer digest algorithms in TLS error dialog)
  * desktop#1427 Fix for #1382 "linux client crashes for no discernable reason"
  * desktop#1434 UI improvement: Message box: Delete / Keep all files
  * desktop#1443 Improve wording of the context menu in the file manager extension.
  * desktop#1447 Changes wording in the share context menu.
  * Fix White Window issue on Windows by upgrading to Qt 5.12.5</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1570708800">- Do not BuildRequire python: this is python2, but in other places
  we buildrequire python3-Sphinx. This does not really belong
  together.
- Switch the python-nautilus Requires in
  nautilus-extension-nextcloud to be python3-nautilus: the plugin
  supports py3 already, so best to make use of it.</changelog>
  <changelog author="ecsos@opensuse.org" date="1572955200">- Update to 2.6.1
  - desktop#1032 Changed max GUI bandwidth limits
  - desktop#1039 Add sync date next to "Synchronized with local
    folder"
  - desktop#1149 Slideshow buttons
  - desktop#1214 Fix qt warning about registering a URL sheme first.
  - desktop#1231 Issue #1216: added sync-exclude entry for emacs
    recovery files
  - desktop#1240 Race condition in the remote size loading logic
  - desktop#1409 Review of msvc/gcc warnings -&gt; code cleanup,
    prevention of implicit casts, variadic macros
  - desktop#1414 Fix double slashes
  - desktop#1420 Fixing E2E CSR transmission failure for new
    connections
  - desktop#1441 Fixed missing 'translatable' exclusions, added
    missing window titles
  - desktop#1461 Checks if exclude file is empty before creating
    the regular expressions.
  - desktop#1465 Add server info to menu
  - desktop#1474 Fixed grammar
  - desktop#1477 Prevent jumping of tray menu
  - desktop#1478 Don't run connection wizard when quitting the
    application
  - desktop#1481 Avoiding copying in range-based loops
  - desktop#1495 Add a 'Content-Length: 0' header to initial POST
    requests
  - desktop#1504 Remote wipe.
  - desktop#1520 Pick from upstream: Update qtmacgoodies for an OSX
    crash fix #6930
  - desktop#1522 * fix for issue no. #1351
  - desktop#1523 Merge the list of ignored files/symlinks into one
    Activity notification.
  - desktop#1527 Update submodules for Qt 5.12.5 (qtmacgoodies)
  - desktop#1554 Fix duplicate items in Apps menu
    (a bug introduced in #1477)
  - desktop#1573 Fix #1182
  - desktop#1579 Fix remote wipe when a proxy is configured.
  - desktop#1580 Fix updater message: Download link instead of
    "use the system's update</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1573214400">- Rename 100-nextcloud-client-sync-inotify.conf to
  99-nextcloud-client-sync-inotify.conf (boo#1155457).</changelog>
  <changelog author="ecsos@opensuse.org" date="1577275200">- Update to 2.6.2
  - desktop#1456 Revert DEFAULT_REMOTE_POLL_INTERVAL back from 5
    seconds to 30 seconds
  - desktop#1459 Use user-provided username in displayName() -
    Fix #836
  - desktop#1462 Fix typo
  - desktop#1471 Build with libcloudproviders on debian and in the
    AppImage
  - desktop#1487 Fix tests for Windows platform
  - desktop#1523 Merge the list of ignored files/symlinks into one
    Activity notification.
  - desktop#1526 Fix clang's variadic macro warnings
  - desktop#1531 Add libdbus-1-dev to the build dependencies
  - desktop#1593 Compare QDateTime objects more efficient
  - desktop#1611 Improve the translation of "Share via ?"
  - desktop#1617 Upgrade for Qt 5.12.5 in docker-ci
  - desktop#1619 Bump Qt 5.12.5 image
  - desktop#1621 Add timestamp to Mac installer code signing
  - desktop#1623 MacOS build: Avoid the Get-Task-Allow Entitlement
    (Notarization)
  - desktop#1629 Build for Debian stable and oldstable
  - desktop#1641 Happy new year
  - desktop#1644 Fall back to old login flow on GS as this is not
    yet ready
  - desktop#1645 [stable-2.6] macOS build: Avoid the Get-Task-Allow
    Entitlement (Notarization)
  - desktop#1646 Fix remote wipe keychain storage (issue #1592)
  - desktop#1647 Fix copyright year in MacOSXBundleInfo.plist.in
    for 2019
  - desktop#1651 Fix macOS GUI (Qt 5.12)
  - desktop#1664 Windows: Workaround for storing &gt;= 4k (4096 bit)
    client-cert SSL keys</changelog>
  <changelog author="ecsos@opensuse.org" date="1581940800">- Update to 2.6.3
  - desktop#1782 Add UserInfo class and fetch quota via API instead
    of PropfindJob
  - desktop#1770 l10n: Changed grammar and triple dots to ellipsis
  - desktop#1767 l10n: Changed spelling of user name to username
  - desktop#1765 Start the client in background if activated
    by D-Bus
  - desktop#1764 Do not install files related to cloud providers
    under Xenial
  - desktop#1763 Make sure that the libcloudprovider integration is
    using a valid D-Bus path
  - desktop#1762 Changed product name to Nextcloud
  - desktop#1760 Update autoupdate.rst
  - desktop#1745 Use system proxy by default if no config file is
    present
  - desktop#1729 Install libcloudproviders files by default on
    debian
  - desktop#1727 Windows 7 is out of support
  - desktop#1721 BugFix: Handle broken shared file error gracefully
  - desktop#1720 Fix Explorer integration on Windows and the crash
    on other systems
  - desktop#1718 Welcome to 2020
  - desktop#1707 Updated year in legalnotice.cpp
  - desktop#1699 apply http2 qt resend patch from owncloud
- Run spec-cleaner.</changelog>
  <changelog author="ecsos@opensuse.org" date="1583323200">- Update to 2.6.4
  * Fix Explorer pinning: Add fallbacks for Shell commands
    (gh#nextcloud/desktop#1599).
  * WebFlowCredentials: Make username comparison case-insensitive
    (gh#nextcloud/desktop#1741).
  * ActivityListModel: Show full date and time as a Tooltip only.
  * Disable HTTP/2 for now due to a Qt bug, allow enabling it via
    an environment variable.
  * Fix Explorer integration re-save and hide option.
  * l10n: Changes to improve source strings.
  * Updater: Add query-parameter "updatesegment" to the update
    check.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1583668800">- Rename nextcloud-client to nextcloud-desktop following upstream.
- Stop redundantly recommending the -lang package.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1591617600">- Fix build error in Tumbleweed.
  - Add nextcloud-desktop-qt_5.15.patch to fix build error with
    Qt 5.15.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1594296000">- Update to 2.6.5
  - #1449 Linux/Wayland: Updated .desktop file naming scheme
  - #1834 Use print() function in both Python 2 and Python 3
  - #1835 Added build for Focal
  - #1838 Allow sharing to circles
  - #1839 Added Focal-specific files
  - #1841 Allow sharing to circles
  - #1843 Enhance Version info display (minimal info, hide details)
  - #1847 Updater: Enhance UI, make build optional
  - #1848 WebView: Add missing Q_OBJECT macros
  - #1851 Enhance Version info display (minimal info, hide details)
  - #1853 Updater: Fix Tests build (failed with BUILD_UPDATER=NO)
  - #1854 Updater: Fix Tests build (failed with BUILD_UPDATER=NO)
  - #1855 WebView: Add missing Q_OBJECT macros
  - #1859 Provide specific install file for Debian oldstable
  - #1879 Add desktop-entry hint to notifications
  - #1880 Remove timeout parameter from showMessage
  - #1881 Use qEnvironmentVariableIsEmpty
  - #1882 Fix container detaching
  - #1883 [dolphin] Add icon to context menu
  - #1886 Move the proxyfiles to libsync where they make more sense
  - #1909 Fix build with Qt 5.15
  - #1931 Fix container detaching
  - #1932 [dolphin] Add icon to context menu
  - #1933 Fix build of Dolphin integration
  - #1934 Fix build of Dolphin integration
  - #1954 Fix typos.
  - #1956 Update ChangeLog with 2.6 series.
  - #1958 Resolve symlinks when checking for registered paths.
  - #1972 Fix leak in FileUtil::IsChildFile
  - #1973 Fix leak in FileUtil::IsChildFile
  - #1974 Don't silently kill debug messages
  - #1975 Don't silently kill debug messages
  - #1986 Properly handle denormalized href
  - #1987 Fix a few leaks
  - #1988 Use nullptr when appropriate
  - #1989 Remove useless virtual, better use override only
  - #1991 Improve sanitizer support
  - #1992 Update github links to desktop repository
  - #1996 Properly handle denormalized href
  - #1997 Use nullptr when appropriate
  - #1998 Update github links to desktop repository
  - #1999 Remove useless virtual, better use override only
  - #2000 Don't use int literals for bools
  - #2001 Use default member initialization
  - #2005 Use default member initialization
  - #2006 Improve URL input field in Wizard
  - #2007 Improve URL input field in Wizard
  - #2017 Remove redundant initializer
  - #2018 Use using instead of typedef
  - #2019 Remove redundant void argument list
  - #2020 Use make_unique when appropriate
  - #2021 Use = default for trivial ctors and dtors
  - #2023 Use the return braced init list pattern
  - #2024 Use raw string literals when appropriate
  - #2025 Remove redundant initializer
  - #2026 Use using instead of typedef
  - #2027 Remove redundant void argument list
  - #2028 Use make_unique when appropriate
  - #2029 Use = default for trivial ctors and dtors
  - #2032 TestLaunchOnStartup shouldn't fail on dev setup
  - #2033 Use the return braced init list pattern
  - #2034 testLaunchOnStartup shouldn't fail on dev setup
  - #2051 Remove Submodule binary (old upstream binaries)
  - #2052 Remove Submodule binary (old upstream binaries)
  - #2061 Improve command line version info and help display (gui &amp; cmd)
  - #2062 Improve command line version info and help display (gui &amp; cmd)
  - #2063 MacOS: Opt In to Dark Mode for building against older macOS SDKs &lt; 10.14
  - #2064 macOS: Opt In to Dark Mode for building against older macOS SDKs &lt; 10.14
  - #2065 Use APPLICATION_ICON_NAME for autostart icon
  - #2068 Don't show a message box if the entered url returned an error
  - #2069 Use APPLICATION_ICON_NAME for autostart icon
  - #2071 Linux/Wayland: Updated .desktop file naming scheme
  - #2072 AppImage: Upgrade to Qt 5.12.8
  - #2078 Replace NULL by nullptr in all C++ files
  - #2083 Simplify nullptr comparisons where appropriate
  - #2084 macOS: Use macdeployqt instead of the old admin/osx/macdeployqt.py
  - #2093 Add photothumb.db to sync-exclude.lst
  - #2106 Fix libsync exports for proxy changes in #1886
  - #2109 Default system proxy not working with Account Wizard (fixes #2108)
  - #2127 ConfigFile security: Migrate Proxy password to keychain
  - #2147 Repair and improve logging
  - #2152 Don't display quota information when the user has no quota.
  - #2162 ConfigFile security: Migrate Proxy password to keychain
  - #2168 Display the correct default permissions when creating a share.
  - #2170 [stable 2.6] Asemmar/issue 2137
  - #2177 Share link display the correct permissions for files and folders.
  - #2179 Display the correct default permissions when creating a share.
- Drop nextcloud-desktop-qt_5.15.patch because now in upstream.</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1598011200">- Update to 3.0.0
  - #1886 Move the proxyfiles to libsync where they make more sense
  - #1939 Major multi monitor improvements and rewrite of tray window positioning
  - #2093 Add photothumb.db to sync-exclude.lst
  - #2099 Ease access to main dialog
  - #2106 Fix libsync exports for proxy changes in #1886
  - #2110 Darken menu border color
  - #2119 Fix SEGV (due to circular ownership) at exit
  - #2126 Slightly simplify code for Systray positioning
  - #2127 ConfigFile security: Migrate Proxy password to keychain
  - #2128 Fix subfolder encryption scheme
  - #2139 Fix e2ee folder sync connection
  - #2144 Fix e2ee upload lock starvation
  - #2145 Repair and improve logging
  - #2150 Fix e2e moves handling
  - #2159 Reach out to the contentItem inside of the ListView to find the width
  - #2167 Fix url decoding for folder encryption status
  - #2168 Display the correct default permissions when creating a share.
  - #2177 Share link display the correct permissions for files and folders.
  - #2183 Prevent empty FileMap in local csync to be processed if folder not empty
  - #2188 Move existing syncjournal db files from client ver &lt;2.7
  - #2201 Disable parallelism for e2e remote mkdir jobs
  - #2209 Fix pause sync states
  - #2211 Logo update for 2.7
  - #2213 Drone: Upload AppImage to GitHub using nextcloud-desktop-bot
  - #2215 Change ownCloud reference to Nextcloud
  - #2224 Update CI for Qt 5.12.9
  - #2227 Support png for branded clients systray
  - #2245 Fix #2243
  - #2248 There won't be a 2.7, this is called 3.0 instead
  - #2257 [stable-3.0] Restore E2EE old key storage format compatibility
  - #2259 [stable-3.0] Keep the E2EE info message around to allow displaying mnemonic</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1598616000">- Update to 3.0.1
  - desktop#2300 Support client builds on VS2019 (QLinkedList is deprecated)
  - desktop#2302 Do not build for Eoan
  - desktop#2288 Windows shell extensions: Use custom GUIDs via CMake and prepare MSI reg
  - desktop#2292 Present sharing of E2EE files from the main dialog too
  - desktop#2292 Disable context menu actions for E2EE files and folders
  - desktop#2281 Show the "Display mnemonic" button only when we know e2e is supported
  - desktop#2278 Make sure we don't assert when calling fileStatus
- Enable libcloudprovider again.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600948800">- Update to 3.0.2
  - desktop#2346 [stable-3.0] Use httpd/unix-directory mimetype for E2EE folders
  - desktop#2388 [stable-3.0] Update copyright date and version displayed in the page title.
  - desktop#2415 [stable-3.0] syncjournaldb: index e2eMangledName column in metadata
  - desktop#2421 [stable-3.0] Use QGuiApplication::primaryScreen() as fallback for Systray::currentScreen()
  - desktop#2422 [stable-3.0] Fix menu popup in main dialog
  - desktop#2426 [stable-3.0] Include list info in tooltip
  - desktop#2428 [stable-3.0] Try to enable the CI on stable branches as well
  - desktop#2429 [stable-3.0] Improve drone config
  - desktop#2430 [stable-3.0] Fix clang tidy errors in csync tests
  - desktop#2434 [stable-3.0] Windows: Fix NSIS language encoding (use UTF-8)
  - desktop#2436 [stable-3.0] Fix incomplete journal upgrade from 2.x to 3.x
  - desktop#2448 [stable-3.0] If there's no description just say nothing
  - desktop#2455 [stable-3.0] Remove "This includes" due to tooltip order
  - desktop#2456 [stable-3.0] Fix missing subdirectory discovery on move operations in macOS
  - desktop#2458 [stable-3.0] Windows: MSI support &amp; Win32 migration tools
  - desktop#2463 [stable-3.0] Use native text rendering for qml windows
  - desktop#2465 [stable-3.0] Allow server URL to be pre-defined without enforcing it
  - desktop#2471 [stable-3.0] Force tooltip wrap mode because it's not enabled in Qt 5.12...</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600948801">- Update to 3.0.2
  - desktop#2346 Use httpd/unix-directory mimetype for E2EE folders
  - desktop#2388 Update copyright date and version displayed in the page title.
  - desktop#2415 syncjournaldb: index e2eMangledName column in metadata
  - desktop#2421 Use QGuiApplication::primaryScreen() as fallback for Systray::currentScreen()
  - desktop#2422 Fix menu popup in main dialog
  - desktop#2426 Include list info in tooltip
  - desktop#2428 Try to enable the CI on stable branches as well
  - desktop#2429 Improve drone config
  - desktop#2430 Fix clang tidy errors in csync tests
  - desktop#2434 Windows: Fix NSIS language encoding (use UTF-8)
  - desktop#2436 Fix incomplete journal upgrade from 2.x to 3.x
  - desktop#2448 If there's no description just say nothing
  - desktop#2455 Remove "This includes" due to tooltip order
  - desktop#2456 Fix missing subdirectory discovery on move operations in macOS
  - desktop#2458 Windows: MSI support &amp; Win32 migration tools
  - desktop#2463 Use native text rendering for qml windows
  - desktop#2465 Allow server URL to be pre-defined without enforcing it
  - desktop#2471 Force tooltip wrap mode because it's not enabled in Qt 5.12...</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1603800000">- Add missing dependencies (boo#1178209)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1604145600">- Update to 3.0.3
  - desktop#2479 [stable-3.0] Free IconJob after use
  - desktop#2491 [stable-3.0] Connect signal guiLog to slot to display systray message.
  - desktop#2498 [stable-3.0] Update propagateupload.cpp
  - desktop#2502 [stable-3.0] macOS: Fix memory leak in FolderWatcherPrivate::startWatching
  - desktop#2511 [stable-3.0] Windows MSI: Update Docs &amp; add SKIPAUTOUPDATE property
  - desktop#2513 [stable-3.0] Handle redirects when downloading updates
  - desktop#2524 [stable-3.0] Handle ask for optional password capability
  - desktop#2533 [stable-3.0] Repair the Windows build
  - desktop#2567 [stable-3.0] Fix share dialog animation for enforced password policy
  - desktop#2570 [stable-3.0] Fix crash when clicking on folder with status 403 in
    the main dialog.
  - desktop#2576 [stable-3.0] Avoid depth infinity propfind for e2ee
  - desktop#2577 [stable-3.0] Expose branding values to qtquick
  - desktop#2592 [stable-3.0] Also output the event flags in the debug logs</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1607947200">- Update to 3.1.0
  - desktop#2221 Make QML code more declarative by using properties
  - desktop#2497 MacOS: Fix memory leak in FolderWatcherPrivate::startWatching
  - desktop#2500 Windows MSI: Update Docs &amp; add SKIPAUTOUPDATE property
  - desktop#2512 Handle redirects when downloading updates
  - desktop#2514 Make it easier for user to provide debug information
  - desktop#2520 Handle ask for optional password capability
  - desktop#2521 Use friendly user agent during authentication
  - desktop#2527 Improve conflict handling gui
  - desktop#2530 Repair the Windows build
  - desktop#2531 Bring back the "Pause sync" action in the systray context menu
  - desktop#2534 Connection wizard improvements
  - desktop#2540 Add last / to exclude list file path.
  - desktop#2541 Don't use nullptr for QFlags
  - desktop#2542 Avoid string translation puzzle
  - desktop#2543 Update bookmarks location
  - desktop#2551 Fix share dialog animation for enforced password policy
  - desktop#2568 Fix crash when clicking on folder with status 403 in the main dialog.
  - desktop#2572 Avoid depth infinity propfind for e2ee
  - desktop#2575 Expose branding values to qtquick
  - desktop#2580 Delay initialization of SettingsDialog
  - desktop#2581 Ensure we quickly show/hide the systray window on startup
  - desktop#2582 Also output the event flags in the debug logs
  - desktop#2586 L10n: Add a space in generalsettings.ui
  - desktop#2587 Triple dot to ellipsis
  - desktop#2589 Misc fixes for Windows 7
  - desktop#2591 Remove last left over of the "remote" wording
  - desktop#2603 Get rid of FindQt5Keychain.cmake
  - desktop#2615 Fetch apps when we get connected only
  - desktop#2616 Move journaldb files back to sync folders
  - desktop#2620 Make sure the settings dialog exist before hiding it
  - desktop#2621 [documentation] upload chunks config
  - desktop#2630 Master is now 3.0.81
  - desktop#2647 Cherry pick updater fixes and improvements
  - desktop#2648 Issue a warning for Debian pipeline failures but don't fail the CI
  - desktop#2652 Handle the case when the release version differs from that in VERSION.cmake
  - desktop#2655 Use dynamic path for account online/offline state icon.
    Refresh GUI on connection state change.
  - desktop#2658 Enable the QML debugger on debug builds
  - desktop#2660 FolderWatcher: fixes and improvements
  - desktop#2662 Fix QML debugging by removing incorrect dependency
  - desktop#2663 Fix Windows compilation broken after QML debugging fix.
  - desktop#2665 Sparkle build fixes
  - desktop#2666 Notification action buttons and context menu
  - desktop#2667 Master is now 3.0.82.
  - desktop#2675 Fix AppImage build
  - desktop#2677 Fix macOS bug where tray window causes spaces to switch
  - desktop#2682 Add debug log to check which folders are being skipped during syncing.
  - desktop#2685 Fixed slow sharee search in the share dialog
  - desktop#2686 Added sharing via email.
  - desktop#2690 Update documentation on how to generate debug logs.
  - desktop#2696 Bump master version to 3.1.0</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1607947201">- Update to 3.1.0
  - desktop#2221 Make QML code more declarative by using properties
  - desktop#2497 MacOS: Fix memory leak in FolderWatcherPrivate::startWatching
  - desktop#2500 Windows MSI: Update Docs &amp; add SKIPAUTOUPDATE property
  - desktop#2512 Handle redirects when downloading updates
  - desktop#2514 Make it easier for user to provide debug information
  - desktop#2520 Handle ask for optional password capability
  - desktop#2521 Use friendly user agent during authentication
  - desktop#2527 Improve conflict handling gui
  - desktop#2530 Repair the Windows build
  - desktop#2531 Bring back the "Pause sync" action in the systray context menu
  - desktop#2534 Connection wizard improvements
  - desktop#2540 Add last / to exclude list file path.
  - desktop#2541 Don't use nullptr for QFlags
  - desktop#2542 Avoid string translation puzzle
  - desktop#2543 Update bookmarks location
  - desktop#2551 Fix share dialog animation for enforced password policy
  - desktop#2568 Fix crash when clicking on folder with status 403 in the main dialog.
  - desktop#2572 Avoid depth infinity propfind for e2ee
  - desktop#2575 Expose branding values to qtquick
  - desktop#2580 Delay initialization of SettingsDialog
  - desktop#2581 Ensure we quickly show/hide the systray window on startup
  - desktop#2582 Also output the event flags in the debug logs
  - desktop#2586 L10n: Add a space in generalsettings.ui
  - desktop#2587 Triple dot to ellipsis
  - desktop#2589 Misc fixes for Windows 7
  - desktop#2591 Remove last left over of the "remote" wording
  - desktop#2603 Get rid of FindQt5Keychain.cmake
  - desktop#2615 Fetch apps when we get connected only
  - desktop#2616 Move journaldb files back to sync folders
  - desktop#2620 Make sure the settings dialog exist before hiding it
  - desktop#2621 [documentation] upload chunks config
  - desktop#2630 Master is now 3.0.81
  - desktop#2647 Cherry pick updater fixes and improvements
  - desktop#2648 Issue a warning for Debian pipeline failures but don't fail the CI
  - desktop#2652 Handle the case when the release version differs from that in VERSION.cmake
  - desktop#2655 Use dynamic path for account online/offline state icon.
    Refresh GUI on connection state change.
  - desktop#2658 Enable the QML debugger on debug builds
  - desktop#2660 FolderWatcher: fixes and improvements
  - desktop#2662 Fix QML debugging by removing incorrect dependency
  - desktop#2663 Fix Windows compilation broken after QML debugging fix.
  - desktop#2665 Sparkle build fixes
  - desktop#2666 Notification action buttons and context menu
  - desktop#2667 Master is now 3.0.82.
  - desktop#2675 Fix AppImage build
  - desktop#2677 Fix macOS bug where tray window causes spaces to switch
  - desktop#2682 Add debug log to check which folders are being skipped during syncing.
  - desktop#2685 Fixed slow sharee search in the share dialog
  - desktop#2686 Added sharing via email.
  - desktop#2690 Update documentation on how to generate debug logs.
  - desktop#2696 Bump master version to 3.1.0
- Rebase nextcloud-desktop-fix-rpath.patch.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608724800">- Update to 3.1.1
  - desktop#2709 [stable-3.1] Have the new account wizard open again
  - desktop#2715 [stable-3.1] UserModel: check indices are inside the user list
  - desktop#2716 [stable-3.1] Use the icon color property to color the icons in the tray window header.
  - desktop#2717 [stable-3.1] Ensure a sync happens after a conflict resolution
  - desktop#2730 [stable-3.1] Make monochrome icons the default on Linux and Mac OS.
  - desktop#2753 [stable-3.1] Fixed the autostart for AppImages. See #2504.
  - desktop#2761 Bump release to 3.1.1</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1611835200">- Update to 3.1.2
  - desktop#2846 [stable-3.1] Handle SVG branded clients
  - desktop#2849 [stable-3.1] Default to colored systray on linux
  - desktop#2866 [stable-3.1] Add push notifications for file changes
  - desktop#2871 [stable-3.1] Start file conflict resolve dialog asynchronous
  - desktop#2878 [stable-3.1] Use push notifications for Tray activities/notifications fetch trigger.
  - desktop#2880 Bump release to 3.1.2</changelog>
</package>
<package pkgid="eb56578306b70f370b08cdd1f8c9627fb702746c0aed092b7bd82da0bfe57e79" name="caja-extension-nextcloud" arch="noarch">
  <version epoch="0" ver="3.1.3" rel="lp152.2.6.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1570708800">- Do not BuildRequire python: this is python2, but in other places
  we buildrequire python3-Sphinx. This does not really belong
  together.
- Switch the python-nautilus Requires in
  nautilus-extension-nextcloud to be python3-nautilus: the plugin
  supports py3 already, so best to make use of it.</changelog>
  <changelog author="ecsos@opensuse.org" date="1572955200">- Update to 2.6.1
  - desktop#1032 Changed max GUI bandwidth limits
  - desktop#1039 Add sync date next to "Synchronized with local
    folder"
  - desktop#1149 Slideshow buttons
  - desktop#1214 Fix qt warning about registering a URL sheme first.
  - desktop#1231 Issue #1216: added sync-exclude entry for emacs
    recovery files
  - desktop#1240 Race condition in the remote size loading logic
  - desktop#1409 Review of msvc/gcc warnings -&gt; code cleanup,
    prevention of implicit casts, variadic macros
  - desktop#1414 Fix double slashes
  - desktop#1420 Fixing E2E CSR transmission failure for new
    connections
  - desktop#1441 Fixed missing 'translatable' exclusions, added
    missing window titles
  - desktop#1461 Checks if exclude file is empty before creating
    the regular expressions.
  - desktop#1465 Add server info to menu
  - desktop#1474 Fixed grammar
  - desktop#1477 Prevent jumping of tray menu
  - desktop#1478 Don't run connection wizard when quitting the
    application
  - desktop#1481 Avoiding copying in range-based loops
  - desktop#1495 Add a 'Content-Length: 0' header to initial POST
    requests
  - desktop#1504 Remote wipe.
  - desktop#1520 Pick from upstream: Update qtmacgoodies for an OSX
    crash fix #6930
  - desktop#1522 * fix for issue no. #1351
  - desktop#1523 Merge the list of ignored files/symlinks into one
    Activity notification.
  - desktop#1527 Update submodules for Qt 5.12.5 (qtmacgoodies)
  - desktop#1554 Fix duplicate items in Apps menu
    (a bug introduced in #1477)
  - desktop#1573 Fix #1182
  - desktop#1579 Fix remote wipe when a proxy is configured.
  - desktop#1580 Fix updater message: Download link instead of
    "use the system's update</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1573214400">- Rename 100-nextcloud-client-sync-inotify.conf to
  99-nextcloud-client-sync-inotify.conf (boo#1155457).</changelog>
  <changelog author="ecsos@opensuse.org" date="1577275200">- Update to 2.6.2
  - desktop#1456 Revert DEFAULT_REMOTE_POLL_INTERVAL back from 5
    seconds to 30 seconds
  - desktop#1459 Use user-provided username in displayName() -
    Fix #836
  - desktop#1462 Fix typo
  - desktop#1471 Build with libcloudproviders on debian and in the
    AppImage
  - desktop#1487 Fix tests for Windows platform
  - desktop#1523 Merge the list of ignored files/symlinks into one
    Activity notification.
  - desktop#1526 Fix clang's variadic macro warnings
  - desktop#1531 Add libdbus-1-dev to the build dependencies
  - desktop#1593 Compare QDateTime objects more efficient
  - desktop#1611 Improve the translation of "Share via ?"
  - desktop#1617 Upgrade for Qt 5.12.5 in docker-ci
  - desktop#1619 Bump Qt 5.12.5 image
  - desktop#1621 Add timestamp to Mac installer code signing
  - desktop#1623 MacOS build: Avoid the Get-Task-Allow Entitlement
    (Notarization)
  - desktop#1629 Build for Debian stable and oldstable
  - desktop#1641 Happy new year
  - desktop#1644 Fall back to old login flow on GS as this is not
    yet ready
  - desktop#1645 [stable-2.6] macOS build: Avoid the Get-Task-Allow
    Entitlement (Notarization)
  - desktop#1646 Fix remote wipe keychain storage (issue #1592)
  - desktop#1647 Fix copyright year in MacOSXBundleInfo.plist.in
    for 2019
  - desktop#1651 Fix macOS GUI (Qt 5.12)
  - desktop#1664 Windows: Workaround for storing &gt;= 4k (4096 bit)
    client-cert SSL keys</changelog>
  <changelog author="ecsos@opensuse.org" date="1581940800">- Update to 2.6.3
  - desktop#1782 Add UserInfo class and fetch quota via API instead
    of PropfindJob
  - desktop#1770 l10n: Changed grammar and triple dots to ellipsis
  - desktop#1767 l10n: Changed spelling of user name to username
  - desktop#1765 Start the client in background if activated
    by D-Bus
  - desktop#1764 Do not install files related to cloud providers
    under Xenial
  - desktop#1763 Make sure that the libcloudprovider integration is
    using a valid D-Bus path
  - desktop#1762 Changed product name to Nextcloud
  - desktop#1760 Update autoupdate.rst
  - desktop#1745 Use system proxy by default if no config file is
    present
  - desktop#1729 Install libcloudproviders files by default on
    debian
  - desktop#1727 Windows 7 is out of support
  - desktop#1721 BugFix: Handle broken shared file error gracefully
  - desktop#1720 Fix Explorer integration on Windows and the crash
    on other systems
  - desktop#1718 Welcome to 2020
  - desktop#1707 Updated year in legalnotice.cpp
  - desktop#1699 apply http2 qt resend patch from owncloud
- Run spec-cleaner.</changelog>
  <changelog author="ecsos@opensuse.org" date="1583323200">- Update to 2.6.4
  * Fix Explorer pinning: Add fallbacks for Shell commands
    (gh#nextcloud/desktop#1599).
  * WebFlowCredentials: Make username comparison case-insensitive
    (gh#nextcloud/desktop#1741).
  * ActivityListModel: Show full date and time as a Tooltip only.
  * Disable HTTP/2 for now due to a Qt bug, allow enabling it via
    an environment variable.
  * Fix Explorer integration re-save and hide option.
  * l10n: Changes to improve source strings.
  * Updater: Add query-parameter "updatesegment" to the update
    check.</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1583668800">- Rename nextcloud-client to nextcloud-desktop following upstream.
- Stop redundantly recommending the -lang package.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1591617600">- Fix build error in Tumbleweed.
  - Add nextcloud-desktop-qt_5.15.patch to fix build error with
    Qt 5.15.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1594296000">- Update to 2.6.5
  - #1449 Linux/Wayland: Updated .desktop file naming scheme
  - #1834 Use print() function in both Python 2 and Python 3
  - #1835 Added build for Focal
  - #1838 Allow sharing to circles
  - #1839 Added Focal-specific files
  - #1841 Allow sharing to circles
  - #1843 Enhance Version info display (minimal info, hide details)
  - #1847 Updater: Enhance UI, make build optional
  - #1848 WebView: Add missing Q_OBJECT macros
  - #1851 Enhance Version info display (minimal info, hide details)
  - #1853 Updater: Fix Tests build (failed with BUILD_UPDATER=NO)
  - #1854 Updater: Fix Tests build (failed with BUILD_UPDATER=NO)
  - #1855 WebView: Add missing Q_OBJECT macros
  - #1859 Provide specific install file for Debian oldstable
  - #1879 Add desktop-entry hint to notifications
  - #1880 Remove timeout parameter from showMessage
  - #1881 Use qEnvironmentVariableIsEmpty
  - #1882 Fix container detaching
  - #1883 [dolphin] Add icon to context menu
  - #1886 Move the proxyfiles to libsync where they make more sense
  - #1909 Fix build with Qt 5.15
  - #1931 Fix container detaching
  - #1932 [dolphin] Add icon to context menu
  - #1933 Fix build of Dolphin integration
  - #1934 Fix build of Dolphin integration
  - #1954 Fix typos.
  - #1956 Update ChangeLog with 2.6 series.
  - #1958 Resolve symlinks when checking for registered paths.
  - #1972 Fix leak in FileUtil::IsChildFile
  - #1973 Fix leak in FileUtil::IsChildFile
  - #1974 Don't silently kill debug messages
  - #1975 Don't silently kill debug messages
  - #1986 Properly handle denormalized href
  - #1987 Fix a few leaks
  - #1988 Use nullptr when appropriate
  - #1989 Remove useless virtual, better use override only
  - #1991 Improve sanitizer support
  - #1992 Update github links to desktop repository
  - #1996 Properly handle denormalized href
  - #1997 Use nullptr when appropriate
  - #1998 Update github links to desktop repository
  - #1999 Remove useless virtual, better use override only
  - #2000 Don't use int literals for bools
  - #2001 Use default member initialization
  - #2005 Use default member initialization
  - #2006 Improve URL input field in Wizard
  - #2007 Improve URL input field in Wizard
  - #2017 Remove redundant initializer
  - #2018 Use using instead of typedef
  - #2019 Remove redundant void argument list
  - #2020 Use make_unique when appropriate
  - #2021 Use = default for trivial ctors and dtors
  - #2023 Use the return braced init list pattern
  - #2024 Use raw string literals when appropriate
  - #2025 Remove redundant initializer
  - #2026 Use using instead of typedef
  - #2027 Remove redundant void argument list
  - #2028 Use make_unique when appropriate
  - #2029 Use = default for trivial ctors and dtors
  - #2032 TestLaunchOnStartup shouldn't fail on dev setup
  - #2033 Use the return braced init list pattern
  - #2034 testLaunchOnStartup shouldn't fail on dev setup
  - #2051 Remove Submodule binary (old upstream binaries)
  - #2052 Remove Submodule binary (old upstream binaries)
  - #2061 Improve command line version info and help display (gui &amp; cmd)
  - #2062 Improve command line version info and help display (gui &amp; cmd)
  - #2063 MacOS: Opt In to Dark Mode for building against older macOS SDKs &lt; 10.14
  - #2064 macOS: Opt In to Dark Mode for building against older macOS SDKs &lt; 10.14
  - #2065 Use APPLICATION_ICON_NAME for autostart icon
  - #2068 Don't show a message box if the entered url returned an error
  - #2069 Use APPLICATION_ICON_NAME for autostart icon
  - #2071 Linux/Wayland: Updated .desktop file naming scheme
  - #2072 AppImage: Upgrade to Qt 5.12.8
  - #2078 Replace NULL by nullptr in all C++ files
  - #2083 Simplify nullptr comparisons where appropriate
  - #2084 macOS: Use macdeployqt instead of the old admin/osx/macdeployqt.py
  - #2093 Add photothumb.db to sync-exclude.lst
  - #2106 Fix libsync exports for proxy changes in #1886
  - #2109 Default system proxy not working with Account Wizard (fixes #2108)
  - #2127 ConfigFile security: Migrate Proxy password to keychain
  - #2147 Repair and improve logging
  - #2152 Don't display quota information when the user has no quota.
  - #2162 ConfigFile security: Migrate Proxy password to keychain
  - #2168 Display the correct default permissions when creating a share.
  - #2170 [stable 2.6] Asemmar/issue 2137
  - #2177 Share link display the correct permissions for files and folders.
  - #2179 Display the correct default permissions when creating a share.
- Drop nextcloud-desktop-qt_5.15.patch because now in upstream.</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1598011200">- Update to 3.0.0
  - #1886 Move the proxyfiles to libsync where they make more sense
  - #1939 Major multi monitor improvements and rewrite of tray window positioning
  - #2093 Add photothumb.db to sync-exclude.lst
  - #2099 Ease access to main dialog
  - #2106 Fix libsync exports for proxy changes in #1886
  - #2110 Darken menu border color
  - #2119 Fix SEGV (due to circular ownership) at exit
  - #2126 Slightly simplify code for Systray positioning
  - #2127 ConfigFile security: Migrate Proxy password to keychain
  - #2128 Fix subfolder encryption scheme
  - #2139 Fix e2ee folder sync connection
  - #2144 Fix e2ee upload lock starvation
  - #2145 Repair and improve logging
  - #2150 Fix e2e moves handling
  - #2159 Reach out to the contentItem inside of the ListView to find the width
  - #2167 Fix url decoding for folder encryption status
  - #2168 Display the correct default permissions when creating a share.
  - #2177 Share link display the correct permissions for files and folders.
  - #2183 Prevent empty FileMap in local csync to be processed if folder not empty
  - #2188 Move existing syncjournal db files from client ver &lt;2.7
  - #2201 Disable parallelism for e2e remote mkdir jobs
  - #2209 Fix pause sync states
  - #2211 Logo update for 2.7
  - #2213 Drone: Upload AppImage to GitHub using nextcloud-desktop-bot
  - #2215 Change ownCloud reference to Nextcloud
  - #2224 Update CI for Qt 5.12.9
  - #2227 Support png for branded clients systray
  - #2245 Fix #2243
  - #2248 There won't be a 2.7, this is called 3.0 instead
  - #2257 [stable-3.0] Restore E2EE old key storage format compatibility
  - #2259 [stable-3.0] Keep the E2EE info message around to allow displaying mnemonic</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1598616000">- Update to 3.0.1
  - desktop#2300 Support client builds on VS2019 (QLinkedList is deprecated)
  - desktop#2302 Do not build for Eoan
  - desktop#2288 Windows shell extensions: Use custom GUIDs via CMake and prepare MSI reg
  - desktop#2292 Present sharing of E2EE files from the main dialog too
  - desktop#2292 Disable context menu actions for E2EE files and folders
  - desktop#2281 Show the "Display mnemonic" button only when we know e2e is supported
  - desktop#2278 Make sure we don't assert when calling fileStatus
- Enable libcloudprovider again.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600948800">- Update to 3.0.2
  - desktop#2346 [stable-3.0] Use httpd/unix-directory mimetype for E2EE folders
  - desktop#2388 [stable-3.0] Update copyright date and version displayed in the page title.
  - desktop#2415 [stable-3.0] syncjournaldb: index e2eMangledName column in metadata
  - desktop#2421 [stable-3.0] Use QGuiApplication::primaryScreen() as fallback for Systray::currentScreen()
  - desktop#2422 [stable-3.0] Fix menu popup in main dialog
  - desktop#2426 [stable-3.0] Include list info in tooltip
  - desktop#2428 [stable-3.0] Try to enable the CI on stable branches as well
  - desktop#2429 [stable-3.0] Improve drone config
  - desktop#2430 [stable-3.0] Fix clang tidy errors in csync tests
  - desktop#2434 [stable-3.0] Windows: Fix NSIS language encoding (use UTF-8)
  - desktop#2436 [stable-3.0] Fix incomplete journal upgrade from 2.x to 3.x
  - desktop#2448 [stable-3.0] If there's no description just say nothing
  - desktop#2455 [stable-3.0] Remove "This includes" due to tooltip order
  - desktop#2456 [stable-3.0] Fix missing subdirectory discovery on move operations in macOS
  - desktop#2458 [stable-3.0] Windows: MSI support &amp; Win32 migration tools
  - desktop#2463 [stable-3.0] Use native text rendering for qml windows
  - desktop#2465 [stable-3.0] Allow server URL to be pre-defined without enforcing it
  - desktop#2471 [stable-3.0] Force tooltip wrap mode because it's not enabled in Qt 5.12...</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600948801">- Update to 3.0.2
  - desktop#2346 Use httpd/unix-directory mimetype for E2EE folders
  - desktop#2388 Update copyright date and version displayed in the page title.
  - desktop#2415 syncjournaldb: index e2eMangledName column in metadata
  - desktop#2421 Use QGuiApplication::primaryScreen() as fallback for Systray::currentScreen()
  - desktop#2422 Fix menu popup in main dialog
  - desktop#2426 Include list info in tooltip
  - desktop#2428 Try to enable the CI on stable branches as well
  - desktop#2429 Improve drone config
  - desktop#2430 Fix clang tidy errors in csync tests
  - desktop#2434 Windows: Fix NSIS language encoding (use UTF-8)
  - desktop#2436 Fix incomplete journal upgrade from 2.x to 3.x
  - desktop#2448 If there's no description just say nothing
  - desktop#2455 Remove "This includes" due to tooltip order
  - desktop#2456 Fix missing subdirectory discovery on move operations in macOS
  - desktop#2458 Windows: MSI support &amp; Win32 migration tools
  - desktop#2463 Use native text rendering for qml windows
  - desktop#2465 Allow server URL to be pre-defined without enforcing it
  - desktop#2471 Force tooltip wrap mode because it's not enabled in Qt 5.12...</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1603800000">- Add missing dependencies (boo#1178209)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1604145600">- Update to 3.0.3
  - desktop#2479 [stable-3.0] Free IconJob after use
  - desktop#2491 [stable-3.0] Connect signal guiLog to slot to display systray message.
  - desktop#2498 [stable-3.0] Update propagateupload.cpp
  - desktop#2502 [stable-3.0] macOS: Fix memory leak in FolderWatcherPrivate::startWatching
  - desktop#2511 [stable-3.0] Windows MSI: Update Docs &amp; add SKIPAUTOUPDATE property
  - desktop#2513 [stable-3.0] Handle redirects when downloading updates
  - desktop#2524 [stable-3.0] Handle ask for optional password capability
  - desktop#2533 [stable-3.0] Repair the Windows build
  - desktop#2567 [stable-3.0] Fix share dialog animation for enforced password policy
  - desktop#2570 [stable-3.0] Fix crash when clicking on folder with status 403 in
    the main dialog.
  - desktop#2576 [stable-3.0] Avoid depth infinity propfind for e2ee
  - desktop#2577 [stable-3.0] Expose branding values to qtquick
  - desktop#2592 [stable-3.0] Also output the event flags in the debug logs</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1607947200">- Update to 3.1.0
  - desktop#2221 Make QML code more declarative by using properties
  - desktop#2497 MacOS: Fix memory leak in FolderWatcherPrivate::startWatching
  - desktop#2500 Windows MSI: Update Docs &amp; add SKIPAUTOUPDATE property
  - desktop#2512 Handle redirects when downloading updates
  - desktop#2514 Make it easier for user to provide debug information
  - desktop#2520 Handle ask for optional password capability
  - desktop#2521 Use friendly user agent during authentication
  - desktop#2527 Improve conflict handling gui
  - desktop#2530 Repair the Windows build
  - desktop#2531 Bring back the "Pause sync" action in the systray context menu
  - desktop#2534 Connection wizard improvements
  - desktop#2540 Add last / to exclude list file path.
  - desktop#2541 Don't use nullptr for QFlags
  - desktop#2542 Avoid string translation puzzle
  - desktop#2543 Update bookmarks location
  - desktop#2551 Fix share dialog animation for enforced password policy
  - desktop#2568 Fix crash when clicking on folder with status 403 in the main dialog.
  - desktop#2572 Avoid depth infinity propfind for e2ee
  - desktop#2575 Expose branding values to qtquick
  - desktop#2580 Delay initialization of SettingsDialog
  - desktop#2581 Ensure we quickly show/hide the systray window on startup
  - desktop#2582 Also output the event flags in the debug logs
  - desktop#2586 L10n: Add a space in generalsettings.ui
  - desktop#2587 Triple dot to ellipsis
  - desktop#2589 Misc fixes for Windows 7
  - desktop#2591 Remove last left over of the "remote" wording
  - desktop#2603 Get rid of FindQt5Keychain.cmake
  - desktop#2615 Fetch apps when we get connected only
  - desktop#2616 Move journaldb files back to sync folders
  - desktop#2620 Make sure the settings dialog exist before hiding it
  - desktop#2621 [documentation] upload chunks config
  - desktop#2630 Master is now 3.0.81
  - desktop#2647 Cherry pick updater fixes and improvements
  - desktop#2648 Issue a warning for Debian pipeline failures but don't fail the CI
  - desktop#2652 Handle the case when the release version differs from that in VERSION.cmake
  - desktop#2655 Use dynamic path for account online/offline state icon.
    Refresh GUI on connection state change.
  - desktop#2658 Enable the QML debugger on debug builds
  - desktop#2660 FolderWatcher: fixes and improvements
  - desktop#2662 Fix QML debugging by removing incorrect dependency
  - desktop#2663 Fix Windows compilation broken after QML debugging fix.
  - desktop#2665 Sparkle build fixes
  - desktop#2666 Notification action buttons and context menu
  - desktop#2667 Master is now 3.0.82.
  - desktop#2675 Fix AppImage build
  - desktop#2677 Fix macOS bug where tray window causes spaces to switch
  - desktop#2682 Add debug log to check which folders are being skipped during syncing.
  - desktop#2685 Fixed slow sharee search in the share dialog
  - desktop#2686 Added sharing via email.
  - desktop#2690 Update documentation on how to generate debug logs.
  - desktop#2696 Bump master version to 3.1.0</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1607947201">- Update to 3.1.0
  - desktop#2221 Make QML code more declarative by using properties
  - desktop#2497 MacOS: Fix memory leak in FolderWatcherPrivate::startWatching
  - desktop#2500 Windows MSI: Update Docs &amp; add SKIPAUTOUPDATE property
  - desktop#2512 Handle redirects when downloading updates
  - desktop#2514 Make it easier for user to provide debug information
  - desktop#2520 Handle ask for optional password capability
  - desktop#2521 Use friendly user agent during authentication
  - desktop#2527 Improve conflict handling gui
  - desktop#2530 Repair the Windows build
  - desktop#2531 Bring back the "Pause sync" action in the systray context menu
  - desktop#2534 Connection wizard improvements
  - desktop#2540 Add last / to exclude list file path.
  - desktop#2541 Don't use nullptr for QFlags
  - desktop#2542 Avoid string translation puzzle
  - desktop#2543 Update bookmarks location
  - desktop#2551 Fix share dialog animation for enforced password policy
  - desktop#2568 Fix crash when clicking on folder with status 403 in the main dialog.
  - desktop#2572 Avoid depth infinity propfind for e2ee
  - desktop#2575 Expose branding values to qtquick
  - desktop#2580 Delay initialization of SettingsDialog
  - desktop#2581 Ensure we quickly show/hide the systray window on startup
  - desktop#2582 Also output the event flags in the debug logs
  - desktop#2586 L10n: Add a space in generalsettings.ui
  - desktop#2587 Triple dot to ellipsis
  - desktop#2589 Misc fixes for Windows 7
  - desktop#2591 Remove last left over of the "remote" wording
  - desktop#2603 Get rid of FindQt5Keychain.cmake
  - desktop#2615 Fetch apps when we get connected only
  - desktop#2616 Move journaldb files back to sync folders
  - desktop#2620 Make sure the settings dialog exist before hiding it
  - desktop#2621 [documentation] upload chunks config
  - desktop#2630 Master is now 3.0.81
  - desktop#2647 Cherry pick updater fixes and improvements
  - desktop#2648 Issue a warning for Debian pipeline failures but don't fail the CI
  - desktop#2652 Handle the case when the release version differs from that in VERSION.cmake
  - desktop#2655 Use dynamic path for account online/offline state icon.
    Refresh GUI on connection state change.
  - desktop#2658 Enable the QML debugger on debug builds
  - desktop#2660 FolderWatcher: fixes and improvements
  - desktop#2662 Fix QML debugging by removing incorrect dependency
  - desktop#2663 Fix Windows compilation broken after QML debugging fix.
  - desktop#2665 Sparkle build fixes
  - desktop#2666 Notification action buttons and context menu
  - desktop#2667 Master is now 3.0.82.
  - desktop#2675 Fix AppImage build
  - desktop#2677 Fix macOS bug where tray window causes spaces to switch
  - desktop#2682 Add debug log to check which folders are being skipped during syncing.
  - desktop#2685 Fixed slow sharee search in the share dialog
  - desktop#2686 Added sharing via email.
  - desktop#2690 Update documentation on how to generate debug logs.
  - desktop#2696 Bump master version to 3.1.0
- Rebase nextcloud-desktop-fix-rpath.patch.</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1608724800">- Update to 3.1.1
  - desktop#2709 [stable-3.1] Have the new account wizard open again
  - desktop#2715 [stable-3.1] UserModel: check indices are inside the user list
  - desktop#2716 [stable-3.1] Use the icon color property to color the icons in the tray window header.
  - desktop#2717 [stable-3.1] Ensure a sync happens after a conflict resolution
  - desktop#2730 [stable-3.1] Make monochrome icons the default on Linux and Mac OS.
  - desktop#2753 [stable-3.1] Fixed the autostart for AppImages. See #2504.
  - desktop#2761 Bump release to 3.1.1</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1611835200">- Update to 3.1.2
  - desktop#2846 [stable-3.1] Handle SVG branded clients
  - desktop#2849 [stable-3.1] Default to colored systray on linux
  - desktop#2866 [stable-3.1] Add push notifications for file changes
  - desktop#2871 [stable-3.1] Start file conflict resolve dialog asynchronous
  - desktop#2878 [stable-3.1] Use push notifications for Tray activities/notifications fetch trigger.
  - desktop#2880 Bump release to 3.1.2</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613822400">- Update to 3.1.3:
  - desktop#2884 [stable-3.1] Add support for Hirsute
  - desktop#2920 [stable-3.1] Validate sensitive URLs to onle allow http(s) schemes.
  - desktop#2926 [stable-3.1] Validate the providers ssl certificate
  - desktop#2939 Bump release to 3.1.3
- This also fix security issues:
  - (boo#1184770, CVE-2021-22879, NC-SA-2021-008 , CWE-99)
    Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource
    injection by way of missing validation of URLs, allowing a
    malicious server to execute remote commands.
    User interaction is needed for exploitation.</changelog>
</package>
<package pkgid="5619ea6f0934e4b471ea81374e61a0ae989eb5f4712766bf8abb822d2301cd5b" name="cargo" arch="i586">
  <version epoch="0" ver="1.43.1" rel="lp152.3.5.1"/>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-61206-assume-tarball-llvm-is-fresh.patch - Upstream fix to make
  LLVM not be rebuilt during the installation phase.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="da9062a3ddf0fc4410f10ac4fa2c2502cbd399a33dc170feb145511544d246e0" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.43.1" rel="lp152.3.5.1"/>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-61206-assume-tarball-llvm-is-fresh.patch - Upstream fix to make
  LLVM not be rebuilt during the installation phase.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="fef329d3bb6c0299342a89a092e7461f34b75e108cdf43f3c06c2c49ecbae778" name="cargo" arch="i586">
  <version epoch="0" ver="1.43.1" rel="lp152.3.8.2"/>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="03fd948b8369d7a0a87c39c0cca85ae93b9a0a452faeca894b966617d8690d19" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.43.1" rel="lp152.3.8.2"/>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="4dc0754228aa24d2626383bfc24c28c544122c0e81fcb9b8cef5e34aaeec3007" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.53.0" rel="lp152.3.11.1"/>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.
- Check upstream signatures for binaries
- Add rust.keyring</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1627387200">- Needed for Firefox91 (bsc#1188891)
- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)
  + Fix-big-endian-miscompile-of-bitcast-zex.patch dropped
- Add support for riscv64
- Make all shared libraries in %{common_libdir} executable; otherwise
  fdupes will not find any duplicates in %{rustlibdir}.
- rust-rpmlintrc: Reflect updated LLVM name in the filter.
- &lt;https://github.com/rust-lang/rust/issues/74976&gt;: Add "--stage 1"
  to the "./x.py doc" call to ensure the newly built compiler gets
  used.
- Resolve issue in constraints to select aarch64 builders in OBS that
  have correctly functioning CPU's.
- Resolve issue with zlib selection and buildrequires.
- Correct build issues with esoteric cpu architectures, by removing
  developer facing tools in some cases.
- Updates to spec file and legacy cleanups during build processes
- Correct issues with incorrect tuning of codegen units that caused
  builders to OOM
- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].
- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`
- Update to version 1.50:
  * This fixes build on armv7 - boo#1181643
  + Language
  - You can now use const values for x in [x; N] array expressions.
    This has been technically possible since 1.38.0, as it was
    unintentionally stabilized.
  - Assignments to ManuallyDrop&lt;T&gt; union fields are now considered safe.
  + Compiler
  - Added tier 3* support for the armv5te-unknown-linux-uclibceabi
    target.
  - Added tier 3 support for the aarch64-apple-ios-macabi target.
  - The x86_64-unknown-freebsd is now built with the full toolset.
  - Dropped support for all cloudabi targets.
  * Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - proc_macro::Punct now implements PartialEq&lt;char&gt;.
  - ops::{Index, IndexMut} are now implemented for fixed sized
    arrays of any length.
  - On Unix platforms, the std::fs::File type now has a "niche" of -1.
    This value cannot be a valid file descriptor, and now means Option&lt;File&gt;
    takes up the same amount of space as File.
  + Stabilized APIs
    bool::then
    btree_map::Entry::or_insert_with_key
    f32::clamp
    f64::clamp
    hash_map::Entry::or_insert_with_key
    Ord::clamp
    RefCell::take
    slice::fill
    UnsafeCell::get_mut
  - The following previously stable methods are now const.
    IpAddr::is_ipv4
    IpAddr::is_ipv6
    IpAddr::is_unspecified
    IpAddr::is_loopback
    IpAddr::is_multicast
    Ipv4Addr::octets
    Ipv4Addr::is_loopback
    Ipv4Addr::is_private
    Ipv4Addr::is_link_local
    Ipv4Addr::is_multicast
    Ipv4Addr::is_broadcast
    Ipv4Addr::is_documentation
    Ipv4Addr::to_ipv6_compatible
    Ipv4Addr::to_ipv6_mapped
    Ipv6Addr::segments
    Ipv6Addr::is_unspecified
    Ipv6Addr::is_loopback
    Ipv6Addr::is_multicast
    Ipv6Addr::to_ipv4
    Layout::size
    Layout::align
    Layout::from_size_align
    pow for all integer types.
    checked_pow for all integer types.
    saturating_pow for all integer types.
    wrapping_pow for all integer types.
    next_power_of_two for all unsigned integer types.
    checked_next_power_of_two for all unsigned integer types.
  + Cargo
  - Added the [build.rustc-workspace-wrapper] option. This option
    sets a wrapper to execute instead of rustc, for workspace members only.
  - cargo:rerun-if-changed will now, if provided a directory,
    scan the entire contents of that directory for changes.
  - Added the --workspace flag to the cargo update command.
  + Misc
  - The search results tab and the help button are focusable
    with keyboard in rustdoc.
  - Running tests will now print the total time taken to execute.
  + Compatibility Notes
  - The compare_and_swap method on atomics has been deprecated.
    It's recommended to use the compare_exchange and
    compare_exchange_weak methods instead.
  - Changes in how TokenStreams are checked have fixed some cases
    where you could write unhygenic macro_rules! macros.
  - #![test] as an inner attribute is now considered unstable
    like other inner macro attributes, and reports an error by
    default through the soft_unstable lint.
  - Overriding a forbid lint at the same level that it was set
    is now a hard error.
  - You can no longer intercept panic! calls by supplying your own
    macro. It's recommended to use the #[panic_handler] attribute
    to provide your own implementation.
  - Semi-colons after item statements (e.g. struct Foo {};)
    now produce a warning.
- Update to version 1.49.0
  + Language
  - Unions can now implement Drop, and you can now have a field in
    a union with ManuallyDrop&lt;T&gt;.
  - You can now cast uninhabited enums to integers.
  - You can now bind by reference and by move in patterns. This
    allows you to selectively borrow individual components of a type.
    E.g.
    [#][derive(Debug)]
    struct Person {
    name: String,
    age: u8,
    }
    let person = Person {
    name: String::from("Alice"),
    age: 20,
    };
    // `name` is moved out of person, but `age` is referenced.
    let Person { name, ref age } = person;
    println!("{} {}", name, age);
  + Compiler
  - Added tier 1* support for aarch64-unknown-linux-gnu.
  - Added tier 2 support for aarch64-apple-darwin.
  - Added tier 2 support for aarch64-pc-windows-msvc.
  - Added tier 3 support for mipsel-unknown-none.
  - Raised the minimum supported LLVM version to LLVM 9.
  - Output from threads spawned in tests is now captured.
  - Change os and vendor values to "none" and "unknown" for some targets
  * Refer to Rust's platform support page for more information on Rust's
    tiered platform support.
  + Libraries
  - RangeInclusive now checks for exhaustion when calling contains and
    indexing.
  - ToString::to_string now no longer shrinks the internal buffer in
    the default implementation.
  - ops::{Index, IndexMut} are now implemented for fixed sized arrays
    of any length.
  + Stabilized APIs
  - slice::select_nth_unstable
  - slice::select_nth_unstable_by
  - slice::select_nth_unstable_by_key
  The following previously stable methods are now const.
  - Poll::is_ready
  - Poll::is_pending
  + Cargo
  - Building a crate with cargo-package should now be independently
    reproducible.
  - cargo-tree now marks proc-macro crates.
  - Added CARGO_PRIMARY_PACKAGE build-time environment variable. This
    variable will be set if the crate being built is one the user
    selected to build, either with -p or through defaults.
  - You can now use glob patterns when specifying packages &amp; targets.
  + Compatibility Notes
  - Demoted i686-unknown-freebsd from host tier 2 to target tier 2
    support.
  - Macros that end with a semi-colon are now treated as statements
    even if they expand to nothing.
  - Rustc will now check for the validity of some built-in attributes
    on enum variants. Previously such invalid or unused attributes
    could be ignored.
  - Leading whitespace is stripped more uniformly in documentation
    comments, which may change behavior. You read this post about
    the changes for more details.
  - Trait bounds are no longer inferred for associated types.
  + Internal Only
  These changes provide no direct user facing benefits, but
  represent significant improvements to the internals and overall
  performance of rustc and related tools.
  - rustc's internal crates are now compiled using the initial-exec
    Thread Local Storage model.
  - Calculate visibilities once in resolve.
  - Added system to the llvm-libunwind bootstrap config option.
  - Added --color for configuring terminal color support to bootstrap.
- Update to version 1.48.0
  + Language
  - The `unsafe` keyword is now syntactically permitted on modules.
    This is still rejected semantically, but can now be parsed by procedural
    macros.
  + Compiler
  - Stabilised the `-C link-self-contained=&lt;yes|no&gt;` compiler flag.
    This tells `rustc` whether to link its own C runtime and libraries or to
    rely on a external linker to find them. (Supported only on `windows-gnu`,
    `linux-musl`, and `wasi` platforms.)
  - You can now use `-C target-feature=+crt-static` on `linux-gnu` targets.
    Note: If you're using cargo you must explicitly pass the `--target` flag.
  - Added tier 2* support for aarch64-unknown-linux-musl.
  * Refer to Rust's platform support page for more information on Rust's
    tiered platform support.
  + Libraries
  - io::Write is now implemented for &amp;ChildStdin &amp;Sink, &amp;Stdout, and &amp;Stderr.
  - All arrays of any length now implement TryFrom&lt;Vec&lt;T&gt;&gt;.
  - The matches! macro now supports having a trailing comma.
  - Vec&lt;A&gt; now implements PartialEq&lt;[B]&gt; where A: PartialEq&lt;B&gt;.
  - The RefCell::{replace, replace_with, clone} methods now all use #[track_caller].
  + Stabilized APIs
  - slice::as_ptr_range
  - slice::as_mut_ptr_range
  - VecDeque::make_contiguous
  - future::pending
  - future::ready
  The following previously stable methods are now `const fn's`:
  - Option::is_some
  - Option::is_none
  - Option::as_ref
  - Result::is_ok
  - Result::is_err
  - Result::as_ref
  - Ordering::reverse
  - Ordering::then
  + Cargo
  + Rustdoc
  - You can now link to items in rustdoc using the intra-doc link syntax.
    E.g. /// Uses [`std::future`] will automatically generate a link to
    std::future's documentation. See "Linking to items by name" for more
    information.
  - You can now specify #[doc(alias = "&lt;alias&gt;")] on items to add search
    aliases when searching through rustdoc's UI.
  + Compatibility Notes
  - Promotion of references to 'static lifetime inside const fn now
    follows the same rules as inside a fn body. In particular, &amp;foo()
    will not be promoted to 'static lifetime any more inside const fns.
  - Associated type bindings on trait objects are now verified to meet
    the bounds declared on the trait when checking that they implement
    the trait.
  - When trait bounds on associated types or opaque types are ambiguous,
    the compiler no longer makes an arbitrary choice on which bound to use.
  - Fixed recursive nonterminals not being expanded in macros during
    pretty-print/reparse check. This may cause errors if your macro
    wasn't correctly handling recursive nonterminal tokens.
  - &amp;mut references to non zero-sized types are no longer promoted.
  - rustc will now warn if you use attributes like #[link_name] or
    [#][cold] in places where they have no effect.
  - Updated _mm256_extract_epi8 and _mm256_extract_epi16 signatures
    in arch::{x86, x86_64} to return i32 to match the vendor signatures.
  - mem::uninitialized will now panic if any inner types inside a struct
    or enum disallow zero-initialization.
  - #[target_feature] will now error if used in a place where it has no effect.
  - Foreign exceptions are now caught by catch_unwind and will cause an
    abort. Note: This behaviour is not guaranteed and is still considered
    undefined behaviour, see the catch_unwind documentation for further
    information.
  + Internal Only
    These changes provide no direct user facing benefits, but represent
    significant improvements to the internals and overall performance of
    rustc and related tools.
  - Building rustc from source now uses ninja by default over make.
    You can continue building with make by setting ninja=false in
    your config.toml.
  - cg_llvm: fewer_names in uncached_llvm_type
  - Made ensure_sufficient_stack() non-generic
- Update to version 1.47.0
  + Language
  - [Closures will now warn when not used.][74869]
  + Compiler
  - [Stabilized the `-C control-flow-guard` codegen option][73893], which enables
    [Control Flow Guard][1.47.0-cfg] for Windows platforms, and is ignored on other
    platforms.
  - [Upgraded to LLVM 11.][73526]
  - [Added tier 3\* support for the `thumbv4t-none-eabi` target.][74419]
  - [Upgrade the FreeBSD toolchain to version 11.4][75204]
  - [`RUST_BACKTRACE`'s output is now more compact.][75048]
  \* Refer to Rust's [platform support page][forge-platform-support] for more
  information on Rust's tiered platform support.
  + Libraries
  - [`CStr` now implements `Index&lt;RangeFrom&lt;usize&gt;&gt;`.][74021]
  - [Traits in `std`/`core` are now implemented for arrays of any length, not just
    those of length less than 33.][74060]
  - [`ops::RangeFull` and `ops::Range` now implement Default.][73197]
  - [`panic::Location` now implements `Copy`, `Clone`, `Eq`, `Hash`, `Ord`,
    `PartialEq`, and `PartialOrd`.][73583]
  + Stabilized APIs
  - [`Ident::new_raw`]
  - [`Range::is_empty`]
  - [`RangeInclusive::is_empty`]
  - [`Result::as_deref`]
  - [`Result::as_deref_mut`]
  - [`Vec::leak`]
  - [`pointer::offset_from`]
  - [`f32::TAU`]
  - [`f64::TAU`]
  The following previously stable APIs have now been made const.
  - [The `new` method for all `NonZero` integers.][73858]
  - [The `checked_add`,`checked_sub`,`checked_mul`,`checked_neg`, `checked_shl`,
    `checked_shr`, `saturating_add`, `saturating_sub`, and `saturating_mul`
    methods for all integers.][73858]
  - [The `checked_abs`, `saturating_abs`, `saturating_neg`, and `signum`  for all
    signed integers.][73858]
  - [The `is_ascii_alphabetic`, `is_ascii_uppercase`, `is_ascii_lowercase`,
    `is_ascii_alphanumeric`, `is_ascii_digit`, `is_ascii_hexdigit`,
    `is_ascii_punctuation`, `is_ascii_graphic`, `is_ascii_whitespace`, and
    `is_ascii_control` methods for `char` and `u8`.][73858]
  + Cargo
  - [`build-dependencies` are now built with opt-level 0 by default.][cargo/8500]
    You can override this by setting the following in your `Cargo.toml`.
    ```toml
    [profile.release.build-override]
    opt-level = 3
    ```
  - [`cargo-help` will now display man pages for commands rather just the
    `--help` text.][cargo/8456]
  - [`cargo-metadata` now emits a `test` field indicating if a target has
    tests enabled.][cargo/8478]
  - [`workspace.default-members` now respects `workspace.exclude`.][cargo/8485]
  - [`cargo-publish` will now use an alternative registry by default if it's the
    only registry specified in `package.publish`.][cargo/8571]
  + Misc
  - [Added a help button beside Rustdoc's searchbar that explains rustdoc's
    type based search.][75366]
  - [Added the Ayu theme to rustdoc.][71237]
- Update to version 1.46.0
  + Language
  - [`if`, `match`, and `loop` expressions can now be used in const functions.][72437]
  - [Additionally you are now also able to coerce and cast to slices (`&amp;[T]`) in
    const functions.][73862]
  - [The `#[track_caller]` attribute can now be added to functions to use the
    function's caller's location information for panic messages.][72445]
  - [Recursively indexing into tuples no longer needs parentheses.][71322] E.g.
    `x.0.0` over `(x.0).0`.
  - [`mem::transmute` can now be used in statics and constants.][72920] **Note**
    You currently can't use `mem::transmute` in constant functions.
  + Compiler
  - [You can now use the `cdylib` target on Apple iOS and tvOS platforms.][73516]
  - [Enabled static "Position Independent Executables" by default
    for `x86_64-unknown-linux-musl`.][70740]
  + Libraries
  - [`mem::forget` is now a `const fn`.][73887]
  - [`String` now implements `From&lt;char&gt;`.][73466]
  - [The `leading_ones`, and `trailing_ones` methods have been stabilised for all
    integer types.][73032]
  - [`vec::IntoIter&lt;T&gt;` now implements `AsRef&lt;[T]&gt;`.][72583]
  - [All non-zero integer types (`NonZeroU8`) now implement `TryFrom` for their
    zero-able equivalent (e.g. `TryFrom&lt;u8&gt;`).][72717]
  - [`&amp;[T]` and `&amp;mut [T]` now implement `PartialEq&lt;Vec&lt;T&gt;&gt;`.][71660]
  - [`(String, u16)` now implements `ToSocketAddrs`.][73007]
  - [`vec::Drain&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`.][72584]
  + Stabilized APIs
  - [`Option::zip`]
  - [`vec::Drain::as_slice`]
  + Cargo
    Added a number of new environment variables that are now available when
    compiling your crate.
  - [`CARGO_BIN_NAME` and `CARGO_CRATE_NAME`][cargo/8270] Providing the name of
    the specific binary being compiled and the name of the crate.
  - [`CARGO_PKG_LICENSE`][cargo/8325] The license from the manifest of the package.
  - [`CARGO_PKG_LICENSE_FILE`][cargo/8387] The path to the license file.
- Update to version 1.44.1
  * rustfmt accepts rustfmt_skip in cfg_attr again.
  * Don't hash executable filenames on apple platforms, fixing backtraces.
  * Fix crashes when finding backtrace on macOS.
  * Clippy applies lint levels into different files.
- Update to version 1.44.0
  + Language
  - You can now use `async/.await` with `#[no_std]` enabled.
  - Added the `unused_braces` lint.
  - Expansion-driven outline module parsing
  + Compiler
  - Rustc now respects the `-C codegen-units` flag in incremental mode.
    Additionally when in incremental mode rustc defaults to 256 codegen units.
  - Refactored `catch_unwind` to have zero-cost, unless unwinding is enabled and
    a panic is thrown.
  - Added tier 3\* support for the `aarch64-unknown-none` and
    `aarch64-unknown-none-softfloat` targets.
  - Added tier 3 support for `arm64-apple-tvos` and
    `x86_64-apple-tvos` targets.
  + Libraries
  - Special cased `vec![]` to map directly to `Vec::new()`. This allows
    `vec![]` to be able to be used in `const` contexts.
  - `convert::Infallible` now implements `Hash`.
  - `OsString` now implements `DerefMut` and `IndexMut` returning
    a `&amp;mut OsStr`.
  - Unicode 13 is now supported.
  - `String` now implements `From&lt;&amp;mut str&gt;`.
  - `IoSlice` now implements `Copy`.
  - `Vec&lt;T&gt;` now implements `From&lt;[T; N]&gt;`. Where `N` is at most 32.
  - `proc_macro::LexError` now implements `fmt::Display` and `Error`.
  - `from_le_bytes`, `to_le_bytes`, `from_be_bytes`, `to_be_bytes`,
    `from_ne_bytes`, and `to_ne_bytes` methods are now `const` for all
    integer types.
  + Stabilizd APIs
  - [`PathBuf::with_capacity`]
  - [`PathBuf::capacity`]
  - [`PathBuf::clear`]
  - [`PathBuf::reserve`]
  - [`PathBuf::reserve_exact`]
  - [`PathBuf::shrink_to_fit`]
  - [`f32::to_int_unchecked`]
  - [`f64::to_int_unchecked`]
  - [`Layout::align_to`]
  - [`Layout::pad_to_align`]
  - [`Layout::array`]
  - [`Layout::extend`]
  + Cargo
  - Added the `cargo tree` command which will print a tree graph of
    your dependencies
  + Misc
  - Rustdoc now allows you to specify `--crate-version` to have rustdoc include
    the version in the sidebar.
  + Compatibility Notes
  - Rustc now correctly generates static libraries on Windows GNU targets with
    the `.a` extension, rather than the previous `.lib`.
  - Removed the `-C no_integrated_as` flag from rustc.
  - The `file_name` property in JSON output of macro errors now points the actual
    source file rather than the previous format of `&lt;NAME macros&gt;`.
  * *Note:** this may not point to a file that actually exists on the user's system.
  - The minimum required external LLVM version has been bumped to LLVM 8.
  - `mem::{zeroed, uninitialised}` will now panic when used with types that do
    not allow zero initialization such as `NonZeroU8`. This was
    previously a warning.
  - In 1.45.0 (the next release) converting a `f64` to `u32` using the `as`
    operator has been defined as a saturating operation. This was previously
    undefined behaviour, but you can use the `{f64, f32}::to_int_unchecked` methods to
    continue using the current behaviour, which may be desirable in rare performance
    sensitive situations.</changelog>
</package>
<package pkgid="9eaab6791be612cab49fcc04c7f5f91b8895eb426444eafb21d37b536722391e" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.43.1" rel="lp152.3.5.1"/>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-61206-assume-tarball-llvm-is-fresh.patch - Upstream fix to make
  LLVM not be rebuilt during the installation phase.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="5164c48b7011f834bb3426caa546d8dcf2ae0838c70409a459841aae12d19407" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.43.1" rel="lp152.3.8.2"/>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="1272c5ed4c50157262d9587b989de3b91d5f5978e745ea3d7502b79f1678e540" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.53.0" rel="lp152.3.11.1"/>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.
- Check upstream signatures for binaries
- Add rust.keyring</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1627387200">- Needed for Firefox91 (bsc#1188891)
- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)
  + Fix-big-endian-miscompile-of-bitcast-zex.patch dropped
- Add support for riscv64
- Make all shared libraries in %{common_libdir} executable; otherwise
  fdupes will not find any duplicates in %{rustlibdir}.
- rust-rpmlintrc: Reflect updated LLVM name in the filter.
- &lt;https://github.com/rust-lang/rust/issues/74976&gt;: Add "--stage 1"
  to the "./x.py doc" call to ensure the newly built compiler gets
  used.
- Resolve issue in constraints to select aarch64 builders in OBS that
  have correctly functioning CPU's.
- Resolve issue with zlib selection and buildrequires.
- Correct build issues with esoteric cpu architectures, by removing
  developer facing tools in some cases.
- Updates to spec file and legacy cleanups during build processes
- Correct issues with incorrect tuning of codegen units that caused
  builders to OOM
- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].
- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`
- Update to version 1.50:
  * This fixes build on armv7 - boo#1181643
  + Language
  - You can now use const values for x in [x; N] array expressions.
    This has been technically possible since 1.38.0, as it was
    unintentionally stabilized.
  - Assignments to ManuallyDrop&lt;T&gt; union fields are now considered safe.
  + Compiler
  - Added tier 3* support for the armv5te-unknown-linux-uclibceabi
    target.
  - Added tier 3 support for the aarch64-apple-ios-macabi target.
  - The x86_64-unknown-freebsd is now built with the full toolset.
  - Dropped support for all cloudabi targets.
  * Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - proc_macro::Punct now implements PartialEq&lt;char&gt;.
  - ops::{Index, IndexMut} are now implemented for fixed sized
    arrays of any length.
  - On Unix platforms, the std::fs::File type now has a "niche" of -1.
    This value cannot be a valid file descriptor, and now means Option&lt;File&gt;
    takes up the same amount of space as File.
  + Stabilized APIs
    bool::then
    btree_map::Entry::or_insert_with_key
    f32::clamp
    f64::clamp
    hash_map::Entry::or_insert_with_key
    Ord::clamp
    RefCell::take
    slice::fill
    UnsafeCell::get_mut
  - The following previously stable methods are now const.
    IpAddr::is_ipv4
    IpAddr::is_ipv6
    IpAddr::is_unspecified
    IpAddr::is_loopback
    IpAddr::is_multicast
    Ipv4Addr::octets
    Ipv4Addr::is_loopback
    Ipv4Addr::is_private
    Ipv4Addr::is_link_local
    Ipv4Addr::is_multicast
    Ipv4Addr::is_broadcast
    Ipv4Addr::is_documentation
    Ipv4Addr::to_ipv6_compatible
    Ipv4Addr::to_ipv6_mapped
    Ipv6Addr::segments
    Ipv6Addr::is_unspecified
    Ipv6Addr::is_loopback
    Ipv6Addr::is_multicast
    Ipv6Addr::to_ipv4
    Layout::size
    Layout::align
    Layout::from_size_align
    pow for all integer types.
    checked_pow for all integer types.
    saturating_pow for all integer types.
    wrapping_pow for all integer types.
    next_power_of_two for all unsigned integer types.
    checked_next_power_of_two for all unsigned integer types.
  + Cargo
  - Added the [build.rustc-workspace-wrapper] option. This option
    sets a wrapper to execute instead of rustc, for workspace members only.
  - cargo:rerun-if-changed will now, if provided a directory,
    scan the entire contents of that directory for changes.
  - Added the --workspace flag to the cargo update command.
  + Misc
  - The search results tab and the help button are focusable
    with keyboard in rustdoc.
  - Running tests will now print the total time taken to execute.
  + Compatibility Notes
  - The compare_and_swap method on atomics has been deprecated.
    It's recommended to use the compare_exchange and
    compare_exchange_weak methods instead.
  - Changes in how TokenStreams are checked have fixed some cases
    where you could write unhygenic macro_rules! macros.
  - #![test] as an inner attribute is now considered unstable
    like other inner macro attributes, and reports an error by
    default through the soft_unstable lint.
  - Overriding a forbid lint at the same level that it was set
    is now a hard error.
  - You can no longer intercept panic! calls by supplying your own
    macro. It's recommended to use the #[panic_handler] attribute
    to provide your own implementation.
  - Semi-colons after item statements (e.g. struct Foo {};)
    now produce a warning.
- Update to version 1.49.0
  + Language
  - Unions can now implement Drop, and you can now have a field in
    a union with ManuallyDrop&lt;T&gt;.
  - You can now cast uninhabited enums to integers.
  - You can now bind by reference and by move in patterns. This
    allows you to selectively borrow individual components of a type.
    E.g.
    [#][derive(Debug)]
    struct Person {
    name: String,
    age: u8,
    }
    let person = Person {
    name: String::from("Alice"),
    age: 20,
    };
    // `name` is moved out of person, but `age` is referenced.
    let Person { name, ref age } = person;
    println!("{} {}", name, age);
  + Compiler
  - Added tier 1* support for aarch64-unknown-linux-gnu.
  - Added tier 2 support for aarch64-apple-darwin.
  - Added tier 2 support for aarch64-pc-windows-msvc.
  - Added tier 3 support for mipsel-unknown-none.
  - Raised the minimum supported LLVM version to LLVM 9.
  - Output from threads spawned in tests is now captured.
  - Change os and vendor values to "none" and "unknown" for some targets
  * Refer to Rust's platform support page for more information on Rust's
    tiered platform support.
  + Libraries
  - RangeInclusive now checks for exhaustion when calling contains and
    indexing.
  - ToString::to_string now no longer shrinks the internal buffer in
    the default implementation.
  - ops::{Index, IndexMut} are now implemented for fixed sized arrays
    of any length.
  + Stabilized APIs
  - slice::select_nth_unstable
  - slice::select_nth_unstable_by
  - slice::select_nth_unstable_by_key
  The following previously stable methods are now const.
  - Poll::is_ready
  - Poll::is_pending
  + Cargo
  - Building a crate with cargo-package should now be independently
    reproducible.
  - cargo-tree now marks proc-macro crates.
  - Added CARGO_PRIMARY_PACKAGE build-time environment variable. This
    variable will be set if the crate being built is one the user
    selected to build, either with -p or through defaults.
  - You can now use glob patterns when specifying packages &amp; targets.
  + Compatibility Notes
  - Demoted i686-unknown-freebsd from host tier 2 to target tier 2
    support.
  - Macros that end with a semi-colon are now treated as statements
    even if they expand to nothing.
  - Rustc will now check for the validity of some built-in attributes
    on enum variants. Previously such invalid or unused attributes
    could be ignored.
  - Leading whitespace is stripped more uniformly in documentation
    comments, which may change behavior. You read this post about
    the changes for more details.
  - Trait bounds are no longer inferred for associated types.
  + Internal Only
  These changes provide no direct user facing benefits, but
  represent significant improvements to the internals and overall
  performance of rustc and related tools.
  - rustc's internal crates are now compiled using the initial-exec
    Thread Local Storage model.
  - Calculate visibilities once in resolve.
  - Added system to the llvm-libunwind bootstrap config option.
  - Added --color for configuring terminal color support to bootstrap.
- Update to version 1.48.0
  + Language
  - The `unsafe` keyword is now syntactically permitted on modules.
    This is still rejected semantically, but can now be parsed by procedural
    macros.
  + Compiler
  - Stabilised the `-C link-self-contained=&lt;yes|no&gt;` compiler flag.
    This tells `rustc` whether to link its own C runtime and libraries or to
    rely on a external linker to find them. (Supported only on `windows-gnu`,
    `linux-musl`, and `wasi` platforms.)
  - You can now use `-C target-feature=+crt-static` on `linux-gnu` targets.
    Note: If you're using cargo you must explicitly pass the `--target` flag.
  - Added tier 2* support for aarch64-unknown-linux-musl.
  * Refer to Rust's platform support page for more information on Rust's
    tiered platform support.
  + Libraries
  - io::Write is now implemented for &amp;ChildStdin &amp;Sink, &amp;Stdout, and &amp;Stderr.
  - All arrays of any length now implement TryFrom&lt;Vec&lt;T&gt;&gt;.
  - The matches! macro now supports having a trailing comma.
  - Vec&lt;A&gt; now implements PartialEq&lt;[B]&gt; where A: PartialEq&lt;B&gt;.
  - The RefCell::{replace, replace_with, clone} methods now all use #[track_caller].
  + Stabilized APIs
  - slice::as_ptr_range
  - slice::as_mut_ptr_range
  - VecDeque::make_contiguous
  - future::pending
  - future::ready
  The following previously stable methods are now `const fn's`:
  - Option::is_some
  - Option::is_none
  - Option::as_ref
  - Result::is_ok
  - Result::is_err
  - Result::as_ref
  - Ordering::reverse
  - Ordering::then
  + Cargo
  + Rustdoc
  - You can now link to items in rustdoc using the intra-doc link syntax.
    E.g. /// Uses [`std::future`] will automatically generate a link to
    std::future's documentation. See "Linking to items by name" for more
    information.
  - You can now specify #[doc(alias = "&lt;alias&gt;")] on items to add search
    aliases when searching through rustdoc's UI.
  + Compatibility Notes
  - Promotion of references to 'static lifetime inside const fn now
    follows the same rules as inside a fn body. In particular, &amp;foo()
    will not be promoted to 'static lifetime any more inside const fns.
  - Associated type bindings on trait objects are now verified to meet
    the bounds declared on the trait when checking that they implement
    the trait.
  - When trait bounds on associated types or opaque types are ambiguous,
    the compiler no longer makes an arbitrary choice on which bound to use.
  - Fixed recursive nonterminals not being expanded in macros during
    pretty-print/reparse check. This may cause errors if your macro
    wasn't correctly handling recursive nonterminal tokens.
  - &amp;mut references to non zero-sized types are no longer promoted.
  - rustc will now warn if you use attributes like #[link_name] or
    [#][cold] in places where they have no effect.
  - Updated _mm256_extract_epi8 and _mm256_extract_epi16 signatures
    in arch::{x86, x86_64} to return i32 to match the vendor signatures.
  - mem::uninitialized will now panic if any inner types inside a struct
    or enum disallow zero-initialization.
  - #[target_feature] will now error if used in a place where it has no effect.
  - Foreign exceptions are now caught by catch_unwind and will cause an
    abort. Note: This behaviour is not guaranteed and is still considered
    undefined behaviour, see the catch_unwind documentation for further
    information.
  + Internal Only
    These changes provide no direct user facing benefits, but represent
    significant improvements to the internals and overall performance of
    rustc and related tools.
  - Building rustc from source now uses ninja by default over make.
    You can continue building with make by setting ninja=false in
    your config.toml.
  - cg_llvm: fewer_names in uncached_llvm_type
  - Made ensure_sufficient_stack() non-generic
- Update to version 1.47.0
  + Language
  - [Closures will now warn when not used.][74869]
  + Compiler
  - [Stabilized the `-C control-flow-guard` codegen option][73893], which enables
    [Control Flow Guard][1.47.0-cfg] for Windows platforms, and is ignored on other
    platforms.
  - [Upgraded to LLVM 11.][73526]
  - [Added tier 3\* support for the `thumbv4t-none-eabi` target.][74419]
  - [Upgrade the FreeBSD toolchain to version 11.4][75204]
  - [`RUST_BACKTRACE`'s output is now more compact.][75048]
  \* Refer to Rust's [platform support page][forge-platform-support] for more
  information on Rust's tiered platform support.
  + Libraries
  - [`CStr` now implements `Index&lt;RangeFrom&lt;usize&gt;&gt;`.][74021]
  - [Traits in `std`/`core` are now implemented for arrays of any length, not just
    those of length less than 33.][74060]
  - [`ops::RangeFull` and `ops::Range` now implement Default.][73197]
  - [`panic::Location` now implements `Copy`, `Clone`, `Eq`, `Hash`, `Ord`,
    `PartialEq`, and `PartialOrd`.][73583]
  + Stabilized APIs
  - [`Ident::new_raw`]
  - [`Range::is_empty`]
  - [`RangeInclusive::is_empty`]
  - [`Result::as_deref`]
  - [`Result::as_deref_mut`]
  - [`Vec::leak`]
  - [`pointer::offset_from`]
  - [`f32::TAU`]
  - [`f64::TAU`]
  The following previously stable APIs have now been made const.
  - [The `new` method for all `NonZero` integers.][73858]
  - [The `checked_add`,`checked_sub`,`checked_mul`,`checked_neg`, `checked_shl`,
    `checked_shr`, `saturating_add`, `saturating_sub`, and `saturating_mul`
    methods for all integers.][73858]
  - [The `checked_abs`, `saturating_abs`, `saturating_neg`, and `signum`  for all
    signed integers.][73858]
  - [The `is_ascii_alphabetic`, `is_ascii_uppercase`, `is_ascii_lowercase`,
    `is_ascii_alphanumeric`, `is_ascii_digit`, `is_ascii_hexdigit`,
    `is_ascii_punctuation`, `is_ascii_graphic`, `is_ascii_whitespace`, and
    `is_ascii_control` methods for `char` and `u8`.][73858]
  + Cargo
  - [`build-dependencies` are now built with opt-level 0 by default.][cargo/8500]
    You can override this by setting the following in your `Cargo.toml`.
    ```toml
    [profile.release.build-override]
    opt-level = 3
    ```
  - [`cargo-help` will now display man pages for commands rather just the
    `--help` text.][cargo/8456]
  - [`cargo-metadata` now emits a `test` field indicating if a target has
    tests enabled.][cargo/8478]
  - [`workspace.default-members` now respects `workspace.exclude`.][cargo/8485]
  - [`cargo-publish` will now use an alternative registry by default if it's the
    only registry specified in `package.publish`.][cargo/8571]
  + Misc
  - [Added a help button beside Rustdoc's searchbar that explains rustdoc's
    type based search.][75366]
  - [Added the Ayu theme to rustdoc.][71237]
- Update to version 1.46.0
  + Language
  - [`if`, `match`, and `loop` expressions can now be used in const functions.][72437]
  - [Additionally you are now also able to coerce and cast to slices (`&amp;[T]`) in
    const functions.][73862]
  - [The `#[track_caller]` attribute can now be added to functions to use the
    function's caller's location information for panic messages.][72445]
  - [Recursively indexing into tuples no longer needs parentheses.][71322] E.g.
    `x.0.0` over `(x.0).0`.
  - [`mem::transmute` can now be used in statics and constants.][72920] **Note**
    You currently can't use `mem::transmute` in constant functions.
  + Compiler
  - [You can now use the `cdylib` target on Apple iOS and tvOS platforms.][73516]
  - [Enabled static "Position Independent Executables" by default
    for `x86_64-unknown-linux-musl`.][70740]
  + Libraries
  - [`mem::forget` is now a `const fn`.][73887]
  - [`String` now implements `From&lt;char&gt;`.][73466]
  - [The `leading_ones`, and `trailing_ones` methods have been stabilised for all
    integer types.][73032]
  - [`vec::IntoIter&lt;T&gt;` now implements `AsRef&lt;[T]&gt;`.][72583]
  - [All non-zero integer types (`NonZeroU8`) now implement `TryFrom` for their
    zero-able equivalent (e.g. `TryFrom&lt;u8&gt;`).][72717]
  - [`&amp;[T]` and `&amp;mut [T]` now implement `PartialEq&lt;Vec&lt;T&gt;&gt;`.][71660]
  - [`(String, u16)` now implements `ToSocketAddrs`.][73007]
  - [`vec::Drain&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`.][72584]
  + Stabilized APIs
  - [`Option::zip`]
  - [`vec::Drain::as_slice`]
  + Cargo
    Added a number of new environment variables that are now available when
    compiling your crate.
  - [`CARGO_BIN_NAME` and `CARGO_CRATE_NAME`][cargo/8270] Providing the name of
    the specific binary being compiled and the name of the crate.
  - [`CARGO_PKG_LICENSE`][cargo/8325] The license from the manifest of the package.
  - [`CARGO_PKG_LICENSE_FILE`][cargo/8387] The path to the license file.
- Update to version 1.44.1
  * rustfmt accepts rustfmt_skip in cfg_attr again.
  * Don't hash executable filenames on apple platforms, fixing backtraces.
  * Fix crashes when finding backtrace on macOS.
  * Clippy applies lint levels into different files.
- Update to version 1.44.0
  + Language
  - You can now use `async/.await` with `#[no_std]` enabled.
  - Added the `unused_braces` lint.
  - Expansion-driven outline module parsing
  + Compiler
  - Rustc now respects the `-C codegen-units` flag in incremental mode.
    Additionally when in incremental mode rustc defaults to 256 codegen units.
  - Refactored `catch_unwind` to have zero-cost, unless unwinding is enabled and
    a panic is thrown.
  - Added tier 3\* support for the `aarch64-unknown-none` and
    `aarch64-unknown-none-softfloat` targets.
  - Added tier 3 support for `arm64-apple-tvos` and
    `x86_64-apple-tvos` targets.
  + Libraries
  - Special cased `vec![]` to map directly to `Vec::new()`. This allows
    `vec![]` to be able to be used in `const` contexts.
  - `convert::Infallible` now implements `Hash`.
  - `OsString` now implements `DerefMut` and `IndexMut` returning
    a `&amp;mut OsStr`.
  - Unicode 13 is now supported.
  - `String` now implements `From&lt;&amp;mut str&gt;`.
  - `IoSlice` now implements `Copy`.
  - `Vec&lt;T&gt;` now implements `From&lt;[T; N]&gt;`. Where `N` is at most 32.
  - `proc_macro::LexError` now implements `fmt::Display` and `Error`.
  - `from_le_bytes`, `to_le_bytes`, `from_be_bytes`, `to_be_bytes`,
    `from_ne_bytes`, and `to_ne_bytes` methods are now `const` for all
    integer types.
  + Stabilizd APIs
  - [`PathBuf::with_capacity`]
  - [`PathBuf::capacity`]
  - [`PathBuf::clear`]
  - [`PathBuf::reserve`]
  - [`PathBuf::reserve_exact`]
  - [`PathBuf::shrink_to_fit`]
  - [`f32::to_int_unchecked`]
  - [`f64::to_int_unchecked`]
  - [`Layout::align_to`]
  - [`Layout::pad_to_align`]
  - [`Layout::array`]
  - [`Layout::extend`]
  + Cargo
  - Added the `cargo tree` command which will print a tree graph of
    your dependencies
  + Misc
  - Rustdoc now allows you to specify `--crate-version` to have rustdoc include
    the version in the sidebar.
  + Compatibility Notes
  - Rustc now correctly generates static libraries on Windows GNU targets with
    the `.a` extension, rather than the previous `.lib`.
  - Removed the `-C no_integrated_as` flag from rustc.
  - The `file_name` property in JSON output of macro errors now points the actual
    source file rather than the previous format of `&lt;NAME macros&gt;`.
  * *Note:** this may not point to a file that actually exists on the user's system.
  - The minimum required external LLVM version has been bumped to LLVM 8.
  - `mem::{zeroed, uninitialised}` will now panic when used with types that do
    not allow zero initialization such as `NonZeroU8`. This was
    previously a warning.
  - In 1.45.0 (the next release) converting a `f64` to `u32` using the `as`
    operator has been defined as a saturating operation. This was previously
    undefined behaviour, but you can use the `{f64, f32}::to_int_unchecked` methods to
    continue using the current behaviour, which may be desirable in rare performance
    sensitive situations.</changelog>
</package>
<package pkgid="545a6dcad310865ee3cc27f6664c49ed152fc91377b79f4909839642e10bd90d" name="caribou" arch="src">
  <version epoch="0" ver="0.4.21" rel="lp152.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1384862400">- Update to version 0.4.13:
  + bgo#698746: Accessibility: "slow keys" breaks "screen keyboard"
    feature.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1394798400">- Move caribou schema and keyboard layout files to a caribou-common
  package. They are required by libcaribou, which is used by
  gnome-shell if the on-screen keyboard is enabled. (bnc#861360)</changelog>
  <changelog author="dimstar@opensuse.org" date="1410177600">- Update to version 0.4.14:
  + bgo#720653: some string in daemon.vala is not available for
    translation.
  + bgo#722355: #!/usr/bin/python in tools/fix_gir.py.
  + bgo#735504: Fails to build with latest vala.
  + bgo#683712: Invocation of on screen keyboard.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1410868800">- Update to version 0.4.15:
  + Fix race condition when invoking OSK through D-Bus
    (bgo#683712).</changelog>
  <changelog author="zaitor@opensuse.org" date="1416830400">- Update to version 0.4.16:
  + Stop using deprecated accessibility events ("focus:*").
  + bgo#739837: Allow label overwrite in keyboard layout.
  + bgo#739716: Add more keys to label_map.
  + bgo#739711: Escape key does not work in us layout.
  + bgo#739526: Some buttons do not have a label.
  + bgo#722634: [regression] build failure: ImportError: No module
    named 'caribou_settings'.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 0.4.17:
  + Bundle tools to generate and manipulate keyboard layout files.
  + bgo#691811: Add support for azerty layout as seen in french.
  + bgo#743267: Caribou does 100-130 syscalls for each keypress.
  + bgo#743880: String that is hard to understand.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1426852800">- Update to version 0.4.18:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 0.4.18.1:
  + bgo#747273: display-adapter: Allow setting an external default
    adapter instance.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 0.4.19:
  + xadapter: Avoid a crash when Xkl doesn't know the real xkb
    groups (bgo#756194).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 0.4.20:
  + bgo#758490: Please make caribou compatible with python3.
  + bgo#759896: German (qwertz) fullscale layout.
  + bgo#760470: Proposing a new fullscale keyboard layout.
  + bgo#756623: No Polish diacritic letters.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
</package>
<package pkgid="29212b49bf6767f0fd86cb0d8a4662d24450cccae5dbb8bb8367be9ca84039b0" name="caribou" arch="x86_64">
  <version epoch="0" ver="0.4.21" rel="lp152.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1416830400">- Update to version 0.4.16:
  + Stop using deprecated accessibility events ("focus:*").
  + bgo#739837: Allow label overwrite in keyboard layout.
  + bgo#739716: Add more keys to label_map.
  + bgo#739711: Escape key does not work in us layout.
  + bgo#739526: Some buttons do not have a label.
  + bgo#722634: [regression] build failure: ImportError: No module
    named 'caribou_settings'.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 0.4.17:
  + Bundle tools to generate and manipulate keyboard layout files.
  + bgo#691811: Add support for azerty layout as seen in french.
  + bgo#743267: Caribou does 100-130 syscalls for each keypress.
  + bgo#743880: String that is hard to understand.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1426852800">- Update to version 0.4.18:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 0.4.18.1:
  + bgo#747273: display-adapter: Allow setting an external default
    adapter instance.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 0.4.19:
  + xadapter: Avoid a crash when Xkl doesn't know the real xkb
    groups (bgo#756194).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 0.4.20:
  + bgo#758490: Please make caribou compatible with python3.
  + bgo#759896: German (qwertz) fullscale layout.
  + bgo#760470: Proposing a new fullscale keyboard layout.
  + bgo#756623: No Polish diacritic letters.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
</package>
<package pkgid="79272d09d7cb4285d4a1c6f0794d2e9622f0a086baf2137c3dd8dafd609080be" name="caribou-common" arch="x86_64">
  <version epoch="0" ver="0.4.21" rel="lp152.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1416830400">- Update to version 0.4.16:
  + Stop using deprecated accessibility events ("focus:*").
  + bgo#739837: Allow label overwrite in keyboard layout.
  + bgo#739716: Add more keys to label_map.
  + bgo#739711: Escape key does not work in us layout.
  + bgo#739526: Some buttons do not have a label.
  + bgo#722634: [regression] build failure: ImportError: No module
    named 'caribou_settings'.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 0.4.17:
  + Bundle tools to generate and manipulate keyboard layout files.
  + bgo#691811: Add support for azerty layout as seen in french.
  + bgo#743267: Caribou does 100-130 syscalls for each keypress.
  + bgo#743880: String that is hard to understand.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1426852800">- Update to version 0.4.18:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 0.4.18.1:
  + bgo#747273: display-adapter: Allow setting an external default
    adapter instance.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 0.4.19:
  + xadapter: Avoid a crash when Xkl doesn't know the real xkb
    groups (bgo#756194).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 0.4.20:
  + bgo#758490: Please make caribou compatible with python3.
  + bgo#759896: German (qwertz) fullscale layout.
  + bgo#760470: Proposing a new fullscale keyboard layout.
  + bgo#756623: No Polish diacritic letters.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
</package>
<package pkgid="5cfec254580d4be50c722369ffd6f8aba2d614d5ba8ceaa45b2bffb8ae3dcfa6" name="caribou-devel" arch="x86_64">
  <version epoch="0" ver="0.4.21" rel="lp152.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1416830400">- Update to version 0.4.16:
  + Stop using deprecated accessibility events ("focus:*").
  + bgo#739837: Allow label overwrite in keyboard layout.
  + bgo#739716: Add more keys to label_map.
  + bgo#739711: Escape key does not work in us layout.
  + bgo#739526: Some buttons do not have a label.
  + bgo#722634: [regression] build failure: ImportError: No module
    named 'caribou_settings'.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 0.4.17:
  + Bundle tools to generate and manipulate keyboard layout files.
  + bgo#691811: Add support for azerty layout as seen in french.
  + bgo#743267: Caribou does 100-130 syscalls for each keypress.
  + bgo#743880: String that is hard to understand.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1426852800">- Update to version 0.4.18:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 0.4.18.1:
  + bgo#747273: display-adapter: Allow setting an external default
    adapter instance.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 0.4.19:
  + xadapter: Avoid a crash when Xkl doesn't know the real xkb
    groups (bgo#756194).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 0.4.20:
  + bgo#758490: Please make caribou compatible with python3.
  + bgo#759896: German (qwertz) fullscale layout.
  + bgo#760470: Proposing a new fullscale keyboard layout.
  + bgo#756623: No Polish diacritic letters.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
</package>
<package pkgid="1efb03e66169e1c66fcc0e7dabff9fc17b52b260368e909f36e36603ce9f0a78" name="caribou-gtk-module-common" arch="x86_64">
  <version epoch="0" ver="0.4.21" rel="lp152.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1416830400">- Update to version 0.4.16:
  + Stop using deprecated accessibility events ("focus:*").
  + bgo#739837: Allow label overwrite in keyboard layout.
  + bgo#739716: Add more keys to label_map.
  + bgo#739711: Escape key does not work in us layout.
  + bgo#739526: Some buttons do not have a label.
  + bgo#722634: [regression] build failure: ImportError: No module
    named 'caribou_settings'.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 0.4.17:
  + Bundle tools to generate and manipulate keyboard layout files.
  + bgo#691811: Add support for azerty layout as seen in french.
  + bgo#743267: Caribou does 100-130 syscalls for each keypress.
  + bgo#743880: String that is hard to understand.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1426852800">- Update to version 0.4.18:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 0.4.18.1:
  + bgo#747273: display-adapter: Allow setting an external default
    adapter instance.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 0.4.19:
  + xadapter: Avoid a crash when Xkl doesn't know the real xkb
    groups (bgo#756194).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 0.4.20:
  + bgo#758490: Please make caribou compatible with python3.
  + bgo#759896: German (qwertz) fullscale layout.
  + bgo#760470: Proposing a new fullscale keyboard layout.
  + bgo#756623: No Polish diacritic letters.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
</package>
<package pkgid="0fcaefd9ce6dce5100987ed8e7b771c7bab1db3b7e365892ad39776ba48dba79" name="caribou-gtk2-module" arch="x86_64">
  <version epoch="0" ver="0.4.21" rel="lp152.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1416830400">- Update to version 0.4.16:
  + Stop using deprecated accessibility events ("focus:*").
  + bgo#739837: Allow label overwrite in keyboard layout.
  + bgo#739716: Add more keys to label_map.
  + bgo#739711: Escape key does not work in us layout.
  + bgo#739526: Some buttons do not have a label.
  + bgo#722634: [regression] build failure: ImportError: No module
    named 'caribou_settings'.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 0.4.17:
  + Bundle tools to generate and manipulate keyboard layout files.
  + bgo#691811: Add support for azerty layout as seen in french.
  + bgo#743267: Caribou does 100-130 syscalls for each keypress.
  + bgo#743880: String that is hard to understand.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1426852800">- Update to version 0.4.18:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 0.4.18.1:
  + bgo#747273: display-adapter: Allow setting an external default
    adapter instance.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 0.4.19:
  + xadapter: Avoid a crash when Xkl doesn't know the real xkb
    groups (bgo#756194).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 0.4.20:
  + bgo#758490: Please make caribou compatible with python3.
  + bgo#759896: German (qwertz) fullscale layout.
  + bgo#760470: Proposing a new fullscale keyboard layout.
  + bgo#756623: No Polish diacritic letters.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
</package>
<package pkgid="d69e96466054a1537895abcf86a22c1a3538aa0d62ce5d1d8b609a512837e7d3" name="caribou-gtk3-module" arch="x86_64">
  <version epoch="0" ver="0.4.21" rel="lp152.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1416830400">- Update to version 0.4.16:
  + Stop using deprecated accessibility events ("focus:*").
  + bgo#739837: Allow label overwrite in keyboard layout.
  + bgo#739716: Add more keys to label_map.
  + bgo#739711: Escape key does not work in us layout.
  + bgo#739526: Some buttons do not have a label.
  + bgo#722634: [regression] build failure: ImportError: No module
    named 'caribou_settings'.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 0.4.17:
  + Bundle tools to generate and manipulate keyboard layout files.
  + bgo#691811: Add support for azerty layout as seen in french.
  + bgo#743267: Caribou does 100-130 syscalls for each keypress.
  + bgo#743880: String that is hard to understand.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1426852800">- Update to version 0.4.18:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 0.4.18.1:
  + bgo#747273: display-adapter: Allow setting an external default
    adapter instance.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 0.4.19:
  + xadapter: Avoid a crash when Xkl doesn't know the real xkb
    groups (bgo#756194).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 0.4.20:
  + bgo#758490: Please make caribou compatible with python3.
  + bgo#759896: German (qwertz) fullscale layout.
  + bgo#760470: Proposing a new fullscale keyboard layout.
  + bgo#756623: No Polish diacritic letters.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
</package>
<package pkgid="a6ba4beb9b36336212abd9c6aa0ca6fdcf33e73352f5a2c70cba6de5b0cc0aa0" name="caribou-lang" arch="noarch">
  <version epoch="0" ver="0.4.21" rel="lp152.7.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1416830400">- Update to version 0.4.16:
  + Stop using deprecated accessibility events ("focus:*").
  + bgo#739837: Allow label overwrite in keyboard layout.
  + bgo#739716: Add more keys to label_map.
  + bgo#739711: Escape key does not work in us layout.
  + bgo#739526: Some buttons do not have a label.
  + bgo#722634: [regression] build failure: ImportError: No module
    named 'caribou_settings'.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 0.4.17:
  + Bundle tools to generate and manipulate keyboard layout files.
  + bgo#691811: Add support for azerty layout as seen in french.
  + bgo#743267: Caribou does 100-130 syscalls for each keypress.
  + bgo#743880: String that is hard to understand.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1426852800">- Update to version 0.4.18:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 0.4.18.1:
  + bgo#747273: display-adapter: Allow setting an external default
    adapter instance.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 0.4.19:
  + xadapter: Avoid a crash when Xkl doesn't know the real xkb
    groups (bgo#756194).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 0.4.20:
  + bgo#758490: Please make caribou compatible with python3.
  + bgo#759896: German (qwertz) fullscale layout.
  + bgo#760470: Proposing a new fullscale keyboard layout.
  + bgo#756623: No Polish diacritic letters.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1469448000">- Update to version 0.4.21:
  + bgo#768104: Initialize Clutter explicitly in antler code.
  + bgo#768105: Fix theme parsing error for antler keyboard
    style.css.
  + bgo#767664: Add missing python3 compatibility.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1510315200">- Switch build to python3.
- Remove glib2_gsettings_schema macros calls in post/postun, not
  needed anymore with filetriggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Drop %py_requires: this is a python2 dependency, but the package
  was already migrated to python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1581336000">- Add python3-gobject BuildRequires: We eliminated an auto-pull-in
  of the python stack for consumers of the C-headers. Caribou uses
  both.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1622635200">- Add caribou-vala-build-fix.patch: fix build with newer valac
  versions (boo#1186617).
- Add caribou-CVE-2021-3567.patch: fix segfault when attempting to
  use shifted characters (boo#1186617 CVE-2021-3567).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1625054400">- Add caribou-css-fix.patch: fix failure to start in GNOME
  flashback (boo#1187112).</changelog>
</package>
<package pkgid="200788006a5e72b2fcd581eaa9dcaad3b12375da46d9ccf110d8e4c82a4d5e7e" name="catatonit" arch="src">
  <version epoch="0" ver="0.1.5" rel="lp152.4.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="52b52e406f4ec7c9777fdcda6d950a87458663d1b8db3b766344465b0fd87cf7" name="catatonit" arch="x86_64">
  <version epoch="0" ver="0.1.5" rel="lp152.4.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="b3a7ba131fd076e4cb0e9735e83d08169d6485e0dc82b823680c0b8ee0b2c925" name="cdda2wav" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="524efab897b6687153171c6581aa121ad539c06a3b44e229438e99f27d1980fe" name="cdda2wav" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="073fcb50231b3b4adc1b23791266219fb11601da27d15994a6bf30174afe7f6d" name="cdrecord" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="34139a769ebd607b7dec57d98ca3a334f2f0eeff7c94af2f1b70823789ac3e77" name="cdrecord" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="e205056a175a7ef2ef7e5b68eb92a5acfac63db069609c3f0136265467c17326" name="cdrtools" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="4be693bb12b2b7d11d2744692f3de8d2bac85a622c0a9e2fc67f5e80586d9df1" name="cdrtools" arch="src">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="496a2686fd7c9ced1cc4222d3a0d334e571ff0f42cc5be7e2dbf52a79254773a" name="cdrtools" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="4dd634b7254a7fb16188e277be46eaf0d32b1eda17a32ba87a8c63940f23f6dd" name="ceph" arch="src">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="873a1d9ae187d364566f9ec560df570b6344833414bd86c77eecb256408333d1" name="ceph" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="dd8f5cf20fa4780d89cc9eac1ba4f788b6da8150bd1f4052063542c8c75c7727" name="ceph" arch="src">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="aa0b3036b4add3367ad3854f8946f6b4ab57502f00e3d6e427ee71bc26144ae5" name="ceph" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4a7c2c2d9cf07ad130853457fc54bff1c8fba554cba9e9be92bd3752fa8ce9a6" name="ceph" arch="src">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="24cbc4490a0abb16768a08120c30cd22ebd9f171fd562b1851a94c3f3ccd5d01" name="ceph" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="e0ef8134ec80a2718aea28741815d02f68ceb3a219114ade4820f634d046015a" name="ceph" arch="src">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="a586ac97de04937c8f7ceaf98f52a6e783c0a06dbd85d1abf50024fa0e57df46" name="ceph" arch="x86_64">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="4b6b390523f4c783cfe6ae17eabc3aa26d7793a0b21fee3c3372120a47276c53" name="ceph" arch="src">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="3b9a7ef384af40ddfe730b173fdb375c6d5a16880cbbdc5b0ab6b72e3a029c93" name="ceph" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="31b7bc06bcbbe7c6b747f03206757d15448fbd586eed8e79ffa54e7837bfb936" name="ceph" arch="src">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="aec44b53f5378984f37bb71ae98d2b2ded23f42de30d531585d9f3dd7b09c1b7" name="ceph" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="9f12e58695bbf8ac87615a67893b4de7a781de4ddaceafd92d1ac0265c807e51" name="ceph" arch="src">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="8b5e4fa965e5ba85d3ff85db5364b208570f5c26e0b63013bf7d61def03b0d8f" name="ceph" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="99ff567f13e90bb2ad6118437879dada14347eab8ada2998c2c51120c02d7e0e" name="ceph" arch="src">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="d52dd05358434172bcc2ed84bd8012306b6d28331be1e3e19e7cf9588d0425a5" name="ceph" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="16cd59fab51ec1b1085d22f48fdc5bf3b022639e971ef4de95b95810fdd229a6" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="f3a39b29b5f564a36a83f0c9ac5652c9fda027058c18cfdfde2f952ae01c98f5" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3ef51d0854753a4d6fdb1d6d77c41e4ad5635c0a9bbf298d73e008fd0fe7dbaf" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="f5ed03b89101d846d1878dc4937e96c0542b23bda5695917c47d72d426aa8a58" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="8b3f3ee2c8c326ea54deb386055296fcb5d4ca24c9b787c1dca10d05981c1cb2" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="221d231ad32c791ab5e8c7b26c036b69d7a94533aba4e7da4b346c88fadbc008" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="ca9139a7f46bce2c80138fbeec49f1cf19286177cb895e51df02361961de6b48" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="aca11db1f031086b70445a1fb8baa1e5bb27400d2e9d2e54d18b54866cc5cb79" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="c23f5ad72bcfda1884c312bb2fb238651b4f65c1a7876135c14ab95ebc796ae1" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="835a646d7fb3230ec21e05b69f51b003bb9765c8417ca90ca861fb53b2c1ea1c" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="735f4a76a397700eef9aa427352d68bae17e43f3e3040de06f0846ada0cf45eb" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="b11602faaafcce535b6eae79dd0970385f4c79ed7e2b599be5e4c4e59a2c544b" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="40cf149d1e52da26976ab4401cb45650ce74e45837895e3e4dca7bdba89d6914" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="5971ab06c4345c3c5d4af54f15f680bf66b5368e8859f993dacd12ff6581edfc" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="94d4e5d877e3642b9a058479cc42e2a59634b06bff7bab3b1fc99dc8ee0dff39" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="49685afb6b615c877f2232fe9fe1c99571509c231dd8ddc281e9553abe8c136b" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="3b7f15e1feb65569c4e4cd54ea7f98d8e45795b1192f5cd817cec78646be9984" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="ebeb7b86531e1cb5b664607b0d009fa8397962e2f246824e0bbb1e2dcda84289" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3aa10543779113ed83bf5dd7ab1089801f47d1c78ecaf0d125f4477a302bcde5" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="46b00837c041c5c0bcb3bbaf2812c1b50be276509adfa237bbce5b47fb69d80e" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="07b786d83793e7e92088af915aeb047153c421d75f40e212a432cfb51debd670" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="f6a9aa550d1f2478b47a4d6717ce8718bb91418a88692b7364d25a30969bf8b2" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="780a09a9da9ecb90e2db344a0e9a1bf3ccf7c9b01472d7723a429ed8a646eb05" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="416d260c5d9668497177751ff0010e9b13f49122aca887275c444ea6b58e4265" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="ff0a7ad49c87dba39892052bdd7782e6d563054445f71946abe56f2e21aaff48" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="021ce668ad894bb97d19f3cd12af22223afb4c37bd57badd2128ee8b14bb4595" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="15ee2509804263ad75cc925318a61b26c7da6ca33e328121fe8f5c2f00973128" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="469bb8a9c2f0288d54f96cb5c09f824749eaf2925c1ab3f899b6be5b06575814" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="68219b9b6343aac7aa710f5e0f03fbb8508567acd73925673b038ad40a6b171c" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="82ae075e84ca2b82f0fd6239128693d8af9725c35b473e0ae087bb4bbc2db985" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="8e51e3512f9c6b03aa8a506bdce16bd664034bdbdff26e03ca37cb65b86e7c6f" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="929df747480952f0f42f248d93588facff11d38553a49f3436d24a202bf1d4e9" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="22200dc65534d8040dfe3c36e4b35fc69f95f691f9b8805aacaecf8c9d692bcd" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="253c61fd8d04e7dcfe7e0a9d8adf6964b9fb6ff660111599cba9b8472bcc18a4" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="cfa69b1fe562bf9194097be1cff4f19d254b34ea18d8343a44726310d23c3137" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="aab1397610bda96f8c63fadbd95d8759d41514020c7dddd01c4bc4a9089b7066" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="be2f86491cb510f1a29050dc5b9beee781b1586776d668a3806c3d2705bb47a1" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="b111393a281e6e42516455f12af41367d49db0e72ce47b08418c5ff4120bad56" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="f61e79a05da63b0211a86819d320e458be014935959dd36e7333332c5f23ba8d" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="b5b945fe2ec56c5b15ef0d1bfbcb89925b8628dd27c44a6afe2a9f8d64537822" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="9a2f80dcb6302ae0226bbc32b23f8dd53d17d17adeed317260f8454758e1f577" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="940a39dd5e14f3ca3b556b982b93c66ca6934233db83dbbf5578bcb0c7d449c3" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="dbc3a86cdf69550442fac8953cbeb8899ece394945ac58c42bfc40b3f78f077d" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="37963bcbc93cbc6c3dbac50320822f5b3e90252202ea4b35dbf2b74293befb07" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="19232f443ce7eeb293b5cc9cb3c4b975e113f047240d8ed9a265f0aad3c70e9e" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="545c73c1ba75cc8b310de539a5d357a4879d557d29deaab3a7f42360383a0561" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="72e05267194477ae0e575ac452785fa469f9750265010ba2fe9d4c32611eecac" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="1242a181e85a6d6f56d937b475b0361e6c61c721b41dc0c735897b3a0930769c" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="0cb76d0d62b1106d8c1c205f05577c6ca7d3a7ef42fea590f0aa5666a62eddde" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="4f75a4711b2d50a91a907f473fa7ca7511c0cf438bc1b22c83117da237ef87a2" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fc7ec076282413d3047eeed86d56b4f5715123a5fdd320abad3e64b9b99705d4" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="702e7a7d6e50204a3cb719999df6509a294b25a8d6c454cdb856e4388db5fd69" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="ad106ffac7197050a2e98b0e089aaf9d788c09044b9691913a8075fab6af96aa" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="5e0995cdc3fde8a84d5181872ae9feda2b6ba4118888e2bfda27f8d7c4ec2fbe" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="55c5787c977c9812cd56a1465d8134b5ed1081ba6f55803e0a9e593452ce3731" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="67a9ee5860b06b5d6f0e7b01d9f28f7b262b421b9b6b81357b1c849066eb6976" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="e69136ef2d8891f28568a6764100d7cc85e33952ac4c6a89e95dc08473a429fe" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="5c5da74ffc03bf31155fbb9624c3562c99a9e595261332da31a9eeb0a1fde340" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0203bfe78361a549639406eaf006bc3cda8b568248a8a4f53f87974de41374e4" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="7a1562361b8c45d759bae084a42c493d24c5f1cd226d132a372718ad31421673" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="d56fc4247b0dd848cabcf8cb55d7126d76af525a9b65e7a62001ecca0e3fe13c" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="1cb1e2bba7829b9940085c496924718b3bf1b5471d9295325c4c9578b970068e" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="d6ef00ea39fb88950ec38d464b75c9e045194252dc48bc0ee98fa2a0f5c402a8" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="410701559fc8a6eb7af849353dbe6c7f987cc80943335293b0f44cb55132f792" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="ac3193a83d993eae0086c563412713bf6422560dd0ffcb89f54ef2688438d0d8" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="12410f58033162c1d2298418559173e3b2bc2c6a3b179c2875c87b081896e104" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="936af1cae885e61cbc5582e9397e2232dbc8ff4a62d781cbd3bebc4d85c245b9" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="ae5595d6b09ac242fa7468e65226351039bf1f70d0ce13e3a1e97a6a6cd2f9b5" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="1381149cf915ca0abd30fc30b8af8426bf491d17e60e74efc317b4770e100815" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="707584e91bae03b6f899361c4467b19ae1c1cfc515d80cfe63cddd25a03b7fde" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="10575d8fa1ae880d6a95ebbe662cde87ee48ec7d1330c5b60bc80846ddd8da3c" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="db034aa9cc4b6bda296b0ad3161f43db1001c8dbc8825db2c403b0756cf506d2" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="a7b1908ded4a1efce7fdb02e4a1f5a9fc8f89581c4c14d171381a207e5363df2" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="508e88903b9359c110671a95846eb01d7eeae59532c37c2dacad7143403bad40" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="242d8e9109bf26ffc56fce0ece58fdb041c8a3e8c508e9b698432e992b97810b" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="5aa42e83a890a72cd1240600ab07220392b4a8f1af3b572599d2326225ca4263" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="73cdee318bb537c9508b47f835b881837a31ca854fd25d13324d1258d2c4f7b2" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="305a64cf71f5f9ec964505b3fee8fb7a4be8137736e81a2e26d726e8fd49b089" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="78d98ddb4bf88fd3490c526b6deeaf41df03ca423255566a0953f1757aa11705" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="7595aa0413f058415fc37ef52bdab3068d7bcf11440f79579e7f76d77c1a131f" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="e0683a2e57db4461f7e547ec986dd8263718a63f7c5bc93d28c6658d7c1f1bdd" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="d6b583c153f0fb2fb5ada4d62807c36ca4570328ececbeaeb696af94fe11942f" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="789b91b530ddc5e643476cac3d7f1beed636af45e832ab30940e3d97efb848ef" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="850046435802aec53ef494d376432a549b9d6b42166c2763a610beb8aa4d2e23" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="3f34ee3fdba941e704b4169ad78054bf99764765371790f169e7e4d275258732" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="64fd520870108d4bcc837a0fac9de1ec6156b0eab19bcea99b5c7346a8e0e8a1" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="ae56f291e96f7b402b5b3cd65935610fb26bad938799c033e2c61f320deae3e4" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="0228d277b7a3ae05a3df88c773fe97db8d277319b4d09053920f66643cd1dee7" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="f8315d3851240fd61b02bf73def607bdfcecc3fd30c3af6f7c45c7ae3d7c9b86" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="5f204e94f5be481ee021060440e197b80245e3044980713bda22afaed6f926c0" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4b466bc02a8ce5b901dccc94c46393659d06c5fc5f0cf2dbcebb3863a28cf82f" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="6f555e7af909bc823a84e8cc603d73d2445912c5714e2a93e4fec6bf76eeb2b7" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="3013729641749b310c3f2cc8c448b0be089027e169e2d8a626cf04d456214b7e" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="f9fcd07f177cc6fb65c4607d67df52d07cb20feca28da7b892a0b178387def60" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="71b109d7cafd00a458b83414f3f7f78dc5acd7fb10f47d1cb2e6327a61611fcb" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="3654d42a82bdd1cac12c95939e842175c17cf00c176768dda7799c8c3a070600" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="bfb6efbebfe5089d49ee9bc664f96e065fd0af57756886eec67af9eef669187b" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="3bb2762509e2b93b286a646821d2167b6247617068f602de6b7e8d35eaacd4d4" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4f7cb838d4dce5572d7f29e2da43d25cb3564242d37282623cd80d2f9c38ae0b" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="7109c9551764b6ead3a6a19ba919204b417321617d8a3dff3e1c7458b9730dee" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="1d9a817ef87245f8a856add3881ba988f0c850772bc961d59852079fbe4f3ccb" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="7993ee50647ecfa5c2e5cc659c1558b87563d470b5c9e488528a390e61ea6dd2" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="196e64c43c8a7cec12fd4e545a2c2af73f9f2633a139a251e40c0661152f5961" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="4e4e60f01c7965ce1898fbe83fba2951bd7b907046d52ecbeedc78ed1781a60b" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="b854315f218df980fd7092857c3b97537985a18bf24aaf1a2f9f74fdfffd8a3d" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="abead5905d00c1a9da0c6138ed0d05b57daabba2084ff1ffc7c1d8db868ead60" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0d0bf4735d349e82d0cb2bc40fc7792a76cdf1a35e3888df157f6e35f3ab60db" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="13ff03dc029d190354c57d7b55c0c4d3fb5ab71f4a3accfc064b21e09fa3a90b" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="2eae1c5578d0eac21976cdb169765c46ea070db94d9557bf65ec247f50d2c2df" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="8aa5c3c18c29bb03b212fb7c03750701a2fc5d964a8715820223ed83c964974f" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="71e60507a977c8cfe8b9f8b0aac99663c5d60bb34dbfa9147b2de6d626aa5dbf" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="1eacbd4e810c0773981dbc4a4ce2dc5b8fb97157cb5ec5b29fb655e6b17998a3" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="ccb7f7d40298660334ba1f973aa52b2ceb08a893fc805a137f1548f3f92b942c" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="d34787ca939ccfcf1e560d62566514ec377d4b6c1addd34e99c794b39bac6eef" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6ebe20fbe39fdd5374b872203cb556147f56307d9ca7e8720f258d4847a99c38" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="d874c6ea2b2373b38250098409a39c694edcd60734c19235d202ff87a076bbdc" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="685f11f17beba07dfe0c4d483ff8b3bec4478ef0f1d74bbcaae5b8228af91c97" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="c108af43a9bf7899282e4d2b26e056ca9e7d8261ea2143e1e3ab82a00ecf51da" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="adc2791b77681e91652b74680c837c785b684e61149321c4ae4ba87c18ac52a2" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="0bd7b144614740f5e89e4280695d097ce780bdb02cfca040ec8bb7584ab63438" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="c10dd027d1ae85f93a39e936654a7363e9b73175da655f2ccabab2110e53d34b" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="6990edda81c17eae282fb57eaf6f846c9238cdd7d39a629d6e823291aaa295f6" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="82de56dc1ab326e7556fb5ff1d52f44e26924f4db6abce35eea1bf9ab3deccba" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="a33e1cbed6d6405b35793b3802b1cdfd21e2ea14a6d97388d8fc139ec510ec1a" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="bf7673e53944531cd5583132066f76188afb7ab8cc0344d830d40174d2c47483" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="3b1e094f4c3257b2f4db7300e3f26bdbd298922e234b9ed9c79075d12434ced6" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="9147a3790e3071b684e19f3eee056437be831b3294a2af61e4d04655dcc68151" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="fb3020e2f81247a1caf324ec43fed70b3a07b4a4604e18bf8fc3050e7e2a1257" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="6ea8589d750636c523ea6200f006075bf3410219221ae0d19a8201a50e39fd5a" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="6c7cb6193d21e94d4e9537ec6075e78b2d9e478f798debf005023ead3947fd8c" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3f9ae0fb977fe4df93d9f344ca0bea0109f0177c6d88e75011a84d244c8a725f" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="3a09e69702ca803108d0d135ecac52fabe328dcf906bf363e58ea8e1cd74d4f1" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="0a0c8842843f0c76ce3bc063383a4c2d8480911b35613bc05178332dd07f033a" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="417bcd976961a3aef3ae951876d10c1f1592000e92fbc89369c040d1bb96d793" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="9ff58298cd5df55c1ab7fa605983577b3063cb89168a47e7f405f9ab40213fe5" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="53deefbfad54cc39c365afb5105a3913952babadcaad1a31686ca4612b35fc51" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="940acf0953e9a1ca7ac5f6d7c2ee62db03f013f4a383e2bf003da51cade34a7f" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="7c117d198d2cfd71dfb8890abdb95900aaa87d00fede7e48c31a9317a09dc1a1" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8854863c52f220d8421da2056b7aff6509d44c2eebfbf8813482a3dd05ac7d6b" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="95303cb24a480517245c80938ada00bc17087021efd79f10df956262be00be97" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="25664dc76268bdf2aacab8e3b3123e7d792d8e1a59e0a376f7fcceb97d5f7e07" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="90c3d184142e3fa7163e56aa9689e88acb960c852c9673658df98be5802a7dcb" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="1f185fd1915d94733a1a7fdebaf6d141c5f9263755fa3d63c00a7ef8a9c302fa" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="5e56715f093b637806db4d924b5b9a6df01664afa2e75c3b32b98e62f1421b57" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="a07e1d37cc93c086030f5dc6ff05cf5ff41cf3356385a656832d405b55a1dec9" name="ceph-test" arch="src">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="3dabf68fa0689c7c6ffdc4ab7eaca65d3de449019996a11097e573254313a64c" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="fd45eabee718ca4d9829709128f052655b39b2cf67e163a521b0549c4c618d66" name="ceph-test" arch="src">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="286a3c3910f57a950a385bc578b50db8e4f11952b8f7a036b5447fd2910e469d" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="022320e9a2b797ff8fe7f8c75379463ae2cdad363f42b01234835d7051225bb0" name="ceph-test" arch="src">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="9f5a8f9f452f620c30f187d5bb3db2c92b6fcee97bd35d7b02152fc7ba6809c3" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="c4b004718b6fb2529b6ae2411dfd91cf9c50bcb2a9079300d882607fbde9d898" name="ceph-test" arch="src">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="c44b6c25b4fb141e6213d29b1b3a0036c88f071423255fd7e8ab3851fdadf71c" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="741d9c9193d582473ea12d9a035f0ccdebad050ad6ab658ca9316353aa946a35" name="ceph-test" arch="src">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="70fe02b664c26dd59babed351434c3cd120d80ad49f706f7b7dee8fbc9b2d197" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="162bf998be5ac4299b25279bdb0783eabca7c50d4c36141d0d8c253271ef0a93" name="ceph-test" arch="src">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="17665d8d099e6e61862f469d38b2cfaa5435719de8cb621af9d6c53e49e9ca86" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="e2f43306dbd15c32ea2f8d73b5e682ed60b408a912381cbb03e1d4ef0207ebc1" name="ceph-test" arch="src">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="40eb6ce20842c7bc28b90d0e2acd1394668b5401e56ce791a3428026e6085999" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="0dd21db324faeb719a3f474bde9638db30d37af53e773f5de0d9b19efa1a7a67" name="ceph-test" arch="src">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="61de6d867e40bda352176dfc4160e51c507394d86f37ef8718055f52d78ac8a4" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="c3df20c9b0c64a11bda976d482c713c5408ae258dd719e394668cb51dc3b492d" name="cephadm" arch="noarch">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="2963114eb4710dd64951aafeb8b6127ec3434a30e28f4ae495cd4b50ad96576a" name="cephadm" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="327b40ec4a5adaa7f7d0c018f33f2d5f7141d6ad8292436855992d3569e5f0e1" name="cephadm" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="f5bc67a65fafe7784c5fd9a5f1cc9a68daa1f88e463dcb594ad6f16c1c10dc71" name="cephadm" arch="noarch">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="504b000f2845d041ba2b812a786a59ef3fdfd8148df5f08b066b89c497cfa17f" name="cephadm" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="554a55c0c86da9f48411dab8558b174d7681288e707e1ed6f4371f03968d05c2" name="cephadm" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="c8698749e0b464a0b459e0f99f2088910d30bf8954b83588563061309bec5907" name="cephadm" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="c51c5aa2a6d397b737f114fe26177f42b8012b5e9427647aeb442c07f49186d7" name="cephadm" arch="noarch">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="eb82ed1af66a28c09f4cca48af63ba2be29ab4be4d56dbe9adfcd40158171732" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="07a02fc4218bd4a7894154754d205edb248d0b14c55c8e92bf986ccfa4d05e2e" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="lp152.2.18.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="70f10235c4dbd1948501ff914c0c5315278ccdbd28631527003cb632163212e6" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="lp152.2.21.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="a5900680909270ed012778f5885b8ce01cff34b64d355e00783ec79f68533469" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="15.2.14.84+gb6e5642e260" rel="lp152.2.24.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
</package>
<package pkgid="bd02c47b1a39d841a03c91815a37e663717668bdc558004fd025ef7d0fe2c15b" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="03e925a68a6a7d192639f35eca2ab5447a5232c88463ae4cc45c76b8585837bb" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="00e5335a47f42bf5510d3903997cd1093813ff0c09f07146f489a07a953a472b" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="83e3ee2d6fef98c4eade43bfdb8e41c31ff82b495f3bf5adb14645349ead9944" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="9ce27a769bc1f76fd9f27ce293d96f194621ffe54620d6aaac153f84d36d16a6" name="charliecloud" arch="src">
  <version epoch="0" ver="0.18" rel="lp152.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements
  - Full changelog at https://groups.io/g/charliecloud/message/97</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1573128000">- Update to version 0.12:
  - ch-docker2squash renamed to dh-builder2squash
  - new binary ch-test, not shipped in the package for now
  - Full changelog at https://groups.io/g/charliecloud/message/98
- Add recommends on buildah</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579608000">- Switch to python3-Sphinx for building the documentation</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1583323200">- Update to version 0.14
  - the build system was rewritten and the layout of the source code
    and installed files were changed significantly
  - new binary ch-tug, to pull images from a remote repository
  - miscellaneous bug fixes and improvements
- Patch the usage of /usr/libexec to use /usr/lib because upstream
  have harcoded the first path in its code.
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1586952000">- Update to version 0.15
  - shell and Python libraries moved from libexec to lib
  - Full changelog at https://groups.io/g/charliecloud/message/102
- Remove patch, paths are not longer hardcoded:
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1593172800">- Update to version 0.16
  - ch-grow and ch-tug: updates to work with external repositories
  - ch-grow: COPY semantics now match Docker
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/103</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1598011200">- Update to version 0.18
  - Fixes an important symlink handling bug in ch-tug and ch-grow.
    Prior to version 0.18, if a pulled image contained a symlink in one
    layer and then a regular file at the same path in a subsequent layer,
    the *target* of the symlink would be overwritten even if it was
    not within the image; i.e., unpacking inappropriately followed
    the symlink. This allows a crafted image to overwrite any file
    writeable by the invoking user.
    Because Charliecloud is unprivileged, other files on the system,
    e.g. system files, are unaffected.
  - ch-grow: --version and --help work w/o dependencies installed
    new switch --list to list images
    now gives diagnostics for syntax errors and unsupported instructions
    WORKDIR now supports relative paths (#786)
    no longer crashes if input doesn?t end in newline (#474)
  - miscellaneous bug fixes and improvements
  - Full changelogs at https://groups.io/g/charliecloud/message/104
    and https://groups.io/g/charliecloud/message/105
- Replace python2-base with python3-base.
- Update recommends used by ch-grow/ch-build
- Readd patch for hardcoded paths:
  * Replace-hardcode-path.patch</changelog>
</package>
<package pkgid="e248ed108a991d4b397446cfe30a676488ffb6511e63f9cd23c877658f455545" name="charliecloud" arch="x86_64">
  <version epoch="0" ver="0.18" rel="lp152.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements
  - Full changelog at https://groups.io/g/charliecloud/message/97</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1573128000">- Update to version 0.12:
  - ch-docker2squash renamed to dh-builder2squash
  - new binary ch-test, not shipped in the package for now
  - Full changelog at https://groups.io/g/charliecloud/message/98
- Add recommends on buildah</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579608000">- Switch to python3-Sphinx for building the documentation</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1583323200">- Update to version 0.14
  - the build system was rewritten and the layout of the source code
    and installed files were changed significantly
  - new binary ch-tug, to pull images from a remote repository
  - miscellaneous bug fixes and improvements
- Patch the usage of /usr/libexec to use /usr/lib because upstream
  have harcoded the first path in its code.
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1586952000">- Update to version 0.15
  - shell and Python libraries moved from libexec to lib
  - Full changelog at https://groups.io/g/charliecloud/message/102
- Remove patch, paths are not longer hardcoded:
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1593172800">- Update to version 0.16
  - ch-grow and ch-tug: updates to work with external repositories
  - ch-grow: COPY semantics now match Docker
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/103</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1598011200">- Update to version 0.18
  - Fixes an important symlink handling bug in ch-tug and ch-grow.
    Prior to version 0.18, if a pulled image contained a symlink in one
    layer and then a regular file at the same path in a subsequent layer,
    the *target* of the symlink would be overwritten even if it was
    not within the image; i.e., unpacking inappropriately followed
    the symlink. This allows a crafted image to overwrite any file
    writeable by the invoking user.
    Because Charliecloud is unprivileged, other files on the system,
    e.g. system files, are unaffected.
  - ch-grow: --version and --help work w/o dependencies installed
    new switch --list to list images
    now gives diagnostics for syntax errors and unsupported instructions
    WORKDIR now supports relative paths (#786)
    no longer crashes if input doesn?t end in newline (#474)
  - miscellaneous bug fixes and improvements
  - Full changelogs at https://groups.io/g/charliecloud/message/104
    and https://groups.io/g/charliecloud/message/105
- Replace python2-base with python3-base.
- Update recommends used by ch-grow/ch-build
- Readd patch for hardcoded paths:
  * Replace-hardcode-path.patch</changelog>
</package>
<package pkgid="8a7763044c837bfc77959707304c4346ed631494a1a044de0af4b6bd7b507c9e" name="charliecloud" arch="src">
  <version epoch="0" ver="0.22" rel="lp152.2.6.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements
  - Full changelog at https://groups.io/g/charliecloud/message/97</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1573128000">- Update to version 0.12:
  - ch-docker2squash renamed to dh-builder2squash
  - new binary ch-test, not shipped in the package for now
  - Full changelog at https://groups.io/g/charliecloud/message/98
- Add recommends on buildah</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579608000">- Switch to python3-Sphinx for building the documentation</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1583323200">- Update to version 0.14
  - the build system was rewritten and the layout of the source code
    and installed files were changed significantly
  - new binary ch-tug, to pull images from a remote repository
  - miscellaneous bug fixes and improvements
- Patch the usage of /usr/libexec to use /usr/lib because upstream
  have harcoded the first path in its code.
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1586952000">- Update to version 0.15
  - shell and Python libraries moved from libexec to lib
  - Full changelog at https://groups.io/g/charliecloud/message/102
- Remove patch, paths are not longer hardcoded:
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1593172800">- Update to version 0.16
  - ch-grow and ch-tug: updates to work with external repositories
  - ch-grow: COPY semantics now match Docker
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/103</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1598011200">- Update to version 0.18
  - Fixes an important symlink handling bug in ch-tug and ch-grow.
    Prior to version 0.18, if a pulled image contained a symlink in one
    layer and then a regular file at the same path in a subsequent layer,
    the *target* of the symlink would be overwritten even if it was
    not within the image; i.e., unpacking inappropriately followed
    the symlink. This allows a crafted image to overwrite any file
    writeable by the invoking user.
    Because Charliecloud is unprivileged, other files on the system,
    e.g. system files, are unaffected.
  - ch-grow: --version and --help work w/o dependencies installed
    new switch --list to list images
    now gives diagnostics for syntax errors and unsupported instructions
    WORKDIR now supports relative paths (#786)
    no longer crashes if input doesn?t end in newline (#474)
  - miscellaneous bug fixes and improvements
  - Full changelogs at https://groups.io/g/charliecloud/message/104
    and https://groups.io/g/charliecloud/message/105
- Replace python2-base with python3-base.
- Update recommends used by ch-grow/ch-build
- Readd patch for hardcoded paths:
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1600776000">- Update to version 0.19. Two particularly notable changes:
  - ch-grow now supports multi-stage build (#768), which as always
    is fully unprivileged. This represents a big step forward in
    functionality.
  - ch-grow now has subcommands; what used to be plain ch-grow
    is now ch-grow build, and ch-tug has become ch-grow pull.
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/106
- Update patch
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1603281600">- Update to version 0.20.
  - improvement for unprivileged image build using fakeroot
    This feature can be turned off with ?ch-grow build --no-fakeroot?
    Further details are in the ch-grow man page
  - miscellaneous bug fixes and improvements
  - Full changelot at https://groups.io/g/charliecloud/message/107
- Add requirements on fakeroot</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1608552000">- Update to version 0.21.
  - renamed the internal builder ch-grow to ch-image to reflect
    its broader functionality. ch-grow still works but will be
    deprecated in 0.23
  - ch-image unprivileged build workarounds using fakeroot
    now default to off and must be requested with --force;
    the option --no-fakeroot has been removed. ch-image will
    by default print a warning if it thinks --force might fix
    a build failure.
  - ch-image pull now works with registries that use HTTP basic auth
    and with images that use manifest schema version 1.
  - ch-image build has a new option --bind to bind-mount directories
    during build and COPY: improve symlink and directory handling
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/108
- Update patch
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1613995200">- Update to version 0.22.
  - ?ch-image? can now push images to a registry, with the ?push? subcommand
  - As a reminder, ?ch-grow? has been renamed to ?ch-image?.
    The old name still works but will be removed in 0.23.
  - ch-image: new subcommand ?delete?
  - ch-image pull:
  * now keeps some metadata from pulled image
  * now works with public images in nVidia NGC registry
  * setuid/setgid bits in pulled image now cleared
  * performance improvements for images with many whiteouts
  - ch-image build:
  * environment variables now kept from base image
  * SHELL instruction now supported
  - several scripts now work correctly if image name contains slash
  - ?sudo make install? now works correctly with restrictive umasks
  - miscellaneous bug fixes and improvements</changelog>
</package>
<package pkgid="d4a9bc1ba56bcd0c4d201002cc8b6dfb372433d740a23789ac0282985c489abe" name="charliecloud" arch="x86_64">
  <version epoch="0" ver="0.22" rel="lp152.2.6.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements
  - Full changelog at https://groups.io/g/charliecloud/message/97</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1573128000">- Update to version 0.12:
  - ch-docker2squash renamed to dh-builder2squash
  - new binary ch-test, not shipped in the package for now
  - Full changelog at https://groups.io/g/charliecloud/message/98
- Add recommends on buildah</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579608000">- Switch to python3-Sphinx for building the documentation</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1583323200">- Update to version 0.14
  - the build system was rewritten and the layout of the source code
    and installed files were changed significantly
  - new binary ch-tug, to pull images from a remote repository
  - miscellaneous bug fixes and improvements
- Patch the usage of /usr/libexec to use /usr/lib because upstream
  have harcoded the first path in its code.
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1586952000">- Update to version 0.15
  - shell and Python libraries moved from libexec to lib
  - Full changelog at https://groups.io/g/charliecloud/message/102
- Remove patch, paths are not longer hardcoded:
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1593172800">- Update to version 0.16
  - ch-grow and ch-tug: updates to work with external repositories
  - ch-grow: COPY semantics now match Docker
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/103</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1598011200">- Update to version 0.18
  - Fixes an important symlink handling bug in ch-tug and ch-grow.
    Prior to version 0.18, if a pulled image contained a symlink in one
    layer and then a regular file at the same path in a subsequent layer,
    the *target* of the symlink would be overwritten even if it was
    not within the image; i.e., unpacking inappropriately followed
    the symlink. This allows a crafted image to overwrite any file
    writeable by the invoking user.
    Because Charliecloud is unprivileged, other files on the system,
    e.g. system files, are unaffected.
  - ch-grow: --version and --help work w/o dependencies installed
    new switch --list to list images
    now gives diagnostics for syntax errors and unsupported instructions
    WORKDIR now supports relative paths (#786)
    no longer crashes if input doesn?t end in newline (#474)
  - miscellaneous bug fixes and improvements
  - Full changelogs at https://groups.io/g/charliecloud/message/104
    and https://groups.io/g/charliecloud/message/105
- Replace python2-base with python3-base.
- Update recommends used by ch-grow/ch-build
- Readd patch for hardcoded paths:
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1600776000">- Update to version 0.19. Two particularly notable changes:
  - ch-grow now supports multi-stage build (#768), which as always
    is fully unprivileged. This represents a big step forward in
    functionality.
  - ch-grow now has subcommands; what used to be plain ch-grow
    is now ch-grow build, and ch-tug has become ch-grow pull.
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/106
- Update patch
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1603281600">- Update to version 0.20.
  - improvement for unprivileged image build using fakeroot
    This feature can be turned off with ?ch-grow build --no-fakeroot?
    Further details are in the ch-grow man page
  - miscellaneous bug fixes and improvements
  - Full changelot at https://groups.io/g/charliecloud/message/107
- Add requirements on fakeroot</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1608552000">- Update to version 0.21.
  - renamed the internal builder ch-grow to ch-image to reflect
    its broader functionality. ch-grow still works but will be
    deprecated in 0.23
  - ch-image unprivileged build workarounds using fakeroot
    now default to off and must be requested with --force;
    the option --no-fakeroot has been removed. ch-image will
    by default print a warning if it thinks --force might fix
    a build failure.
  - ch-image pull now works with registries that use HTTP basic auth
    and with images that use manifest schema version 1.
  - ch-image build has a new option --bind to bind-mount directories
    during build and COPY: improve symlink and directory handling
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/108
- Update patch
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1613995200">- Update to version 0.22.
  - ?ch-image? can now push images to a registry, with the ?push? subcommand
  - As a reminder, ?ch-grow? has been renamed to ?ch-image?.
    The old name still works but will be removed in 0.23.
  - ch-image: new subcommand ?delete?
  - ch-image pull:
  * now keeps some metadata from pulled image
  * now works with public images in nVidia NGC registry
  * setuid/setgid bits in pulled image now cleared
  * performance improvements for images with many whiteouts
  - ch-image build:
  * environment variables now kept from base image
  * SHELL instruction now supported
  - several scripts now work correctly if image name contains slash
  - ?sudo make install? now works correctly with restrictive umasks
  - miscellaneous bug fixes and improvements</changelog>
</package>
<package pkgid="cbe0b2684b5582b73cd18616277270ccc0b0ddb9f01a0b6dc4b25ca2a33005de" name="charliecloud-doc" arch="noarch">
  <version epoch="0" ver="0.18" rel="lp152.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements
  - Full changelog at https://groups.io/g/charliecloud/message/97</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1573128000">- Update to version 0.12:
  - ch-docker2squash renamed to dh-builder2squash
  - new binary ch-test, not shipped in the package for now
  - Full changelog at https://groups.io/g/charliecloud/message/98
- Add recommends on buildah</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579608000">- Switch to python3-Sphinx for building the documentation</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1583323200">- Update to version 0.14
  - the build system was rewritten and the layout of the source code
    and installed files were changed significantly
  - new binary ch-tug, to pull images from a remote repository
  - miscellaneous bug fixes and improvements
- Patch the usage of /usr/libexec to use /usr/lib because upstream
  have harcoded the first path in its code.
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1586952000">- Update to version 0.15
  - shell and Python libraries moved from libexec to lib
  - Full changelog at https://groups.io/g/charliecloud/message/102
- Remove patch, paths are not longer hardcoded:
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1593172800">- Update to version 0.16
  - ch-grow and ch-tug: updates to work with external repositories
  - ch-grow: COPY semantics now match Docker
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/103</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1598011200">- Update to version 0.18
  - Fixes an important symlink handling bug in ch-tug and ch-grow.
    Prior to version 0.18, if a pulled image contained a symlink in one
    layer and then a regular file at the same path in a subsequent layer,
    the *target* of the symlink would be overwritten even if it was
    not within the image; i.e., unpacking inappropriately followed
    the symlink. This allows a crafted image to overwrite any file
    writeable by the invoking user.
    Because Charliecloud is unprivileged, other files on the system,
    e.g. system files, are unaffected.
  - ch-grow: --version and --help work w/o dependencies installed
    new switch --list to list images
    now gives diagnostics for syntax errors and unsupported instructions
    WORKDIR now supports relative paths (#786)
    no longer crashes if input doesn?t end in newline (#474)
  - miscellaneous bug fixes and improvements
  - Full changelogs at https://groups.io/g/charliecloud/message/104
    and https://groups.io/g/charliecloud/message/105
- Replace python2-base with python3-base.
- Update recommends used by ch-grow/ch-build
- Readd patch for hardcoded paths:
  * Replace-hardcode-path.patch</changelog>
</package>
<package pkgid="d6f255efed71308846ed9cb68b3e3580fd36ad4fc620c143678bee4f7cf8354f" name="charliecloud-doc" arch="noarch">
  <version epoch="0" ver="0.22" rel="lp152.2.6.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements
  - Full changelog at https://groups.io/g/charliecloud/message/97</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1573128000">- Update to version 0.12:
  - ch-docker2squash renamed to dh-builder2squash
  - new binary ch-test, not shipped in the package for now
  - Full changelog at https://groups.io/g/charliecloud/message/98
- Add recommends on buildah</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579608000">- Switch to python3-Sphinx for building the documentation</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1583323200">- Update to version 0.14
  - the build system was rewritten and the layout of the source code
    and installed files were changed significantly
  - new binary ch-tug, to pull images from a remote repository
  - miscellaneous bug fixes and improvements
- Patch the usage of /usr/libexec to use /usr/lib because upstream
  have harcoded the first path in its code.
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1586952000">- Update to version 0.15
  - shell and Python libraries moved from libexec to lib
  - Full changelog at https://groups.io/g/charliecloud/message/102
- Remove patch, paths are not longer hardcoded:
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1593172800">- Update to version 0.16
  - ch-grow and ch-tug: updates to work with external repositories
  - ch-grow: COPY semantics now match Docker
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/103</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1598011200">- Update to version 0.18
  - Fixes an important symlink handling bug in ch-tug and ch-grow.
    Prior to version 0.18, if a pulled image contained a symlink in one
    layer and then a regular file at the same path in a subsequent layer,
    the *target* of the symlink would be overwritten even if it was
    not within the image; i.e., unpacking inappropriately followed
    the symlink. This allows a crafted image to overwrite any file
    writeable by the invoking user.
    Because Charliecloud is unprivileged, other files on the system,
    e.g. system files, are unaffected.
  - ch-grow: --version and --help work w/o dependencies installed
    new switch --list to list images
    now gives diagnostics for syntax errors and unsupported instructions
    WORKDIR now supports relative paths (#786)
    no longer crashes if input doesn?t end in newline (#474)
  - miscellaneous bug fixes and improvements
  - Full changelogs at https://groups.io/g/charliecloud/message/104
    and https://groups.io/g/charliecloud/message/105
- Replace python2-base with python3-base.
- Update recommends used by ch-grow/ch-build
- Readd patch for hardcoded paths:
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1600776000">- Update to version 0.19. Two particularly notable changes:
  - ch-grow now supports multi-stage build (#768), which as always
    is fully unprivileged. This represents a big step forward in
    functionality.
  - ch-grow now has subcommands; what used to be plain ch-grow
    is now ch-grow build, and ch-tug has become ch-grow pull.
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/106
- Update patch
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1603281600">- Update to version 0.20.
  - improvement for unprivileged image build using fakeroot
    This feature can be turned off with ?ch-grow build --no-fakeroot?
    Further details are in the ch-grow man page
  - miscellaneous bug fixes and improvements
  - Full changelot at https://groups.io/g/charliecloud/message/107
- Add requirements on fakeroot</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1608552000">- Update to version 0.21.
  - renamed the internal builder ch-grow to ch-image to reflect
    its broader functionality. ch-grow still works but will be
    deprecated in 0.23
  - ch-image unprivileged build workarounds using fakeroot
    now default to off and must be requested with --force;
    the option --no-fakeroot has been removed. ch-image will
    by default print a warning if it thinks --force might fix
    a build failure.
  - ch-image pull now works with registries that use HTTP basic auth
    and with images that use manifest schema version 1.
  - ch-image build has a new option --bind to bind-mount directories
    during build and COPY: improve symlink and directory handling
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/108
- Update patch
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1613995200">- Update to version 0.22.
  - ?ch-image? can now push images to a registry, with the ?push? subcommand
  - As a reminder, ?ch-grow? has been renamed to ?ch-image?.
    The old name still works but will be removed in 0.23.
  - ch-image: new subcommand ?delete?
  - ch-image pull:
  * now keeps some metadata from pulled image
  * now works with public images in nVidia NGC registry
  * setuid/setgid bits in pulled image now cleared
  * performance improvements for images with many whiteouts
  - ch-image build:
  * environment variables now kept from base image
  * SHELL instruction now supported
  - several scripts now work correctly if image name contains slash
  - ?sudo make install? now works correctly with restrictive umasks
  - miscellaneous bug fixes and improvements</changelog>
</package>
<package pkgid="7f434d36885ae0da7af977296323e7ec57672ccba3d224860c291fc1351d369e" name="charliecloud-examples" arch="noarch">
  <version epoch="0" ver="0.18" rel="lp152.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements
  - Full changelog at https://groups.io/g/charliecloud/message/97</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1573128000">- Update to version 0.12:
  - ch-docker2squash renamed to dh-builder2squash
  - new binary ch-test, not shipped in the package for now
  - Full changelog at https://groups.io/g/charliecloud/message/98
- Add recommends on buildah</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579608000">- Switch to python3-Sphinx for building the documentation</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1583323200">- Update to version 0.14
  - the build system was rewritten and the layout of the source code
    and installed files were changed significantly
  - new binary ch-tug, to pull images from a remote repository
  - miscellaneous bug fixes and improvements
- Patch the usage of /usr/libexec to use /usr/lib because upstream
  have harcoded the first path in its code.
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1586952000">- Update to version 0.15
  - shell and Python libraries moved from libexec to lib
  - Full changelog at https://groups.io/g/charliecloud/message/102
- Remove patch, paths are not longer hardcoded:
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1593172800">- Update to version 0.16
  - ch-grow and ch-tug: updates to work with external repositories
  - ch-grow: COPY semantics now match Docker
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/103</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1598011200">- Update to version 0.18
  - Fixes an important symlink handling bug in ch-tug and ch-grow.
    Prior to version 0.18, if a pulled image contained a symlink in one
    layer and then a regular file at the same path in a subsequent layer,
    the *target* of the symlink would be overwritten even if it was
    not within the image; i.e., unpacking inappropriately followed
    the symlink. This allows a crafted image to overwrite any file
    writeable by the invoking user.
    Because Charliecloud is unprivileged, other files on the system,
    e.g. system files, are unaffected.
  - ch-grow: --version and --help work w/o dependencies installed
    new switch --list to list images
    now gives diagnostics for syntax errors and unsupported instructions
    WORKDIR now supports relative paths (#786)
    no longer crashes if input doesn?t end in newline (#474)
  - miscellaneous bug fixes and improvements
  - Full changelogs at https://groups.io/g/charliecloud/message/104
    and https://groups.io/g/charliecloud/message/105
- Replace python2-base with python3-base.
- Update recommends used by ch-grow/ch-build
- Readd patch for hardcoded paths:
  * Replace-hardcode-path.patch</changelog>
</package>
<package pkgid="60afd7aaa336e9a730f54dc8fead078996bcc74ba8c7c249516bc4a970f68e67" name="charliecloud-examples" arch="noarch">
  <version epoch="0" ver="0.22" rel="lp152.2.6.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements
  - Full changelog at https://groups.io/g/charliecloud/message/97</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1573128000">- Update to version 0.12:
  - ch-docker2squash renamed to dh-builder2squash
  - new binary ch-test, not shipped in the package for now
  - Full changelog at https://groups.io/g/charliecloud/message/98
- Add recommends on buildah</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579608000">- Switch to python3-Sphinx for building the documentation</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1583323200">- Update to version 0.14
  - the build system was rewritten and the layout of the source code
    and installed files were changed significantly
  - new binary ch-tug, to pull images from a remote repository
  - miscellaneous bug fixes and improvements
- Patch the usage of /usr/libexec to use /usr/lib because upstream
  have harcoded the first path in its code.
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1586952000">- Update to version 0.15
  - shell and Python libraries moved from libexec to lib
  - Full changelog at https://groups.io/g/charliecloud/message/102
- Remove patch, paths are not longer hardcoded:
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1593172800">- Update to version 0.16
  - ch-grow and ch-tug: updates to work with external repositories
  - ch-grow: COPY semantics now match Docker
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/103</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1598011200">- Update to version 0.18
  - Fixes an important symlink handling bug in ch-tug and ch-grow.
    Prior to version 0.18, if a pulled image contained a symlink in one
    layer and then a regular file at the same path in a subsequent layer,
    the *target* of the symlink would be overwritten even if it was
    not within the image; i.e., unpacking inappropriately followed
    the symlink. This allows a crafted image to overwrite any file
    writeable by the invoking user.
    Because Charliecloud is unprivileged, other files on the system,
    e.g. system files, are unaffected.
  - ch-grow: --version and --help work w/o dependencies installed
    new switch --list to list images
    now gives diagnostics for syntax errors and unsupported instructions
    WORKDIR now supports relative paths (#786)
    no longer crashes if input doesn?t end in newline (#474)
  - miscellaneous bug fixes and improvements
  - Full changelogs at https://groups.io/g/charliecloud/message/104
    and https://groups.io/g/charliecloud/message/105
- Replace python2-base with python3-base.
- Update recommends used by ch-grow/ch-build
- Readd patch for hardcoded paths:
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1600776000">- Update to version 0.19. Two particularly notable changes:
  - ch-grow now supports multi-stage build (#768), which as always
    is fully unprivileged. This represents a big step forward in
    functionality.
  - ch-grow now has subcommands; what used to be plain ch-grow
    is now ch-grow build, and ch-tug has become ch-grow pull.
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/106
- Update patch
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1603281600">- Update to version 0.20.
  - improvement for unprivileged image build using fakeroot
    This feature can be turned off with ?ch-grow build --no-fakeroot?
    Further details are in the ch-grow man page
  - miscellaneous bug fixes and improvements
  - Full changelot at https://groups.io/g/charliecloud/message/107
- Add requirements on fakeroot</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1608552000">- Update to version 0.21.
  - renamed the internal builder ch-grow to ch-image to reflect
    its broader functionality. ch-grow still works but will be
    deprecated in 0.23
  - ch-image unprivileged build workarounds using fakeroot
    now default to off and must be requested with --force;
    the option --no-fakeroot has been removed. ch-image will
    by default print a warning if it thinks --force might fix
    a build failure.
  - ch-image pull now works with registries that use HTTP basic auth
    and with images that use manifest schema version 1.
  - ch-image build has a new option --bind to bind-mount directories
    during build and COPY: improve symlink and directory handling
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/108
- Update patch
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1613995200">- Update to version 0.22.
  - ?ch-image? can now push images to a registry, with the ?push? subcommand
  - As a reminder, ?ch-grow? has been renamed to ?ch-image?.
    The old name still works but will be removed in 0.23.
  - ch-image: new subcommand ?delete?
  - ch-image pull:
  * now keeps some metadata from pulled image
  * now works with public images in nVidia NGC registry
  * setuid/setgid bits in pulled image now cleared
  * performance improvements for images with many whiteouts
  - ch-image build:
  * environment variables now kept from base image
  * SHELL instruction now supported
  - several scripts now work correctly if image name contains slash
  - ?sudo make install? now works correctly with restrictive umasks
  - miscellaneous bug fixes and improvements</changelog>
</package>
<package pkgid="3fb24a767a33ec5a7071debf7b2902c5b47c4ba62559281b1d7e6666d726491e" name="checkbashisms" arch="noarch">
  <version epoch="0" ver="2.19.5" rel="lp152.4.3.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5 bsc#1174163:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="375a2cf15ce00809bcafa9ce745d05e08c8aeeb79c9aabeb285e1f69965b6352" name="chocolate-doom" arch="src">
  <version epoch="0" ver="3.0.1" rel="lp152.4.3.1"/>
  <changelog author="jengelh@medozas.de" date="1307534400">- Initial package (version 1.6.0) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1339416000">- Update to new upstream release 1.7.0
  * Running servers now re-resolve the address of the master server
  occasionally, to adapt to DNS address changes.
  * A workaround for SDL mouse lag is now only used on Windows
  (where it is needed)
  * UTF-8 usernames are supported, and Windows usernames with
  non-ASCII characters are now supported
  * Palette accuracy is reduced to 6 bits per channel, to more
  accurately emulate the PC VGA hardware</changelog>
  <changelog author="jengelh@inai.de" date="1367496000">- Search /usr/share/doom for IWADs as well (bnc#818102)
  + Added chdoom-iwaddir.diff
- Remove unnecessary INSTALL file</changelog>
  <changelog author="jengelh@inai.de" date="1386676800">- Update to new upstream release 2.0
  * Support for three other Doom engine-based games: Heretic, Hexen,
  and Strife.</changelog>
  <changelog author="jengelh@inai.de" date="1399809600">- Add python to BuildRequires - it is used for manpage generation
  (was previously implicitly included)</changelog>
  <changelog author="jengelh@inai.de" date="1427544000">- Update to new upstream release 2.1
  * Chocolate Doom now supports high-quality substitute music packs
  that are used in place of the original MIDI music tracks.
  * Support for joysticks and gamepads has been significantly
  improved in this version.
  * OPL MIDI playback has been significantly improved. Multi-track
  MIDI files now play back properly.
  * The "no fog on spawn west" Vanilla bug is now correctly
  emulated.
  * Behavior of older versions of Doom back to v1.666 can now be
  emulated.
- Add chdoom-nonvoid.diff, chdoom-prng.diff to quench compiler
  warnings. Add chdoom-date.diff to kill __DATE__ instances.</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 2.2.1
  * The Hexen four level demo IWAD is now supported.
  * The Doom reload hack has been added back.
  * OPL music playback has been improved in a number of ways to
  match the behavior of Vanilla Doom's DMX library much more
  closely. OPL3 playback is also now supported.
- Drop chdoom-nonvoid.diff (included upstream),
  drop chdoom-prng.diff (PRNG impl. was switched)</changelog>
  <changelog author="jengelh@inai.de" date="1479297600">- Add chdoom-sdlsound.diff to resolve build error with new
  libsamplerate</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Update to new upstream release 2.3.0 (2016-12-29)
  * Pitch-shifting from early versions of Doom, Heretic, and Hexen
    is now supported.
  * Aspect ratio-corrected 1600×1200 PNGs are now written.
  * OPL emulation is more accurate.
  * DMX bugs with GUS cards are now better emulated.
  * Checksum calculations are fixed on big endian systems, allowing
    multiplayer games to be played in mixed little/big-endian
    environments.
  * The vanilla limit of 4046 lumps per WAD is now enforced.
  * Solidsegs overflow is emulated like in vanilla.
  * It is now possible to start multiplayer Chex Quest games.
  * Versions 1.666, 1.7, and 1.8 are emulated.
  * An issue was fixed where the game crashed while killing the
    Wraithverge in 64-bit builds.
- Drop chdoom-date.diff (no longer needed), drop
  chdoom-sdlsound.diff (merged upstream).</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Update to new upstream release 3.0.0 (2017-12-30)
  * Update to SDL2. All scaling is now done in hardware.
  * It is possible to toggle fullscreen with Alt-Enter.
  * On multimonitor setups, the game will remember the used screen.
  * A new parameter, -savedir allows users to specify a directory
    from which to load and save games.
  * The GOG install of Doom 3: BFG Edition is now detected.
  * The CD audio option for music playback has been removed; the CD
    playback API has been removed from SDL 2.0.
  * Strife's voices.wad is now correctly loaded before PWADs.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542196800">- Update description.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591444800">- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1593604800">- Update to release 3.0.1
  * Fixed a bug where a client in a networked game can
    cause a stack-based buffer overflow on the server
    [CVE-2020-14983, boo#1173595]</changelog>
</package>
<package pkgid="f4f63db36d105335a7494508763c804dc1cbbb303cfe4ef89261f53ffc1ac362" name="chocolate-doom" arch="x86_64">
  <version epoch="0" ver="3.0.1" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1386676800">- Update to new upstream release 2.0
  * Support for three other Doom engine-based games: Heretic, Hexen,
  and Strife.</changelog>
  <changelog author="jengelh@inai.de" date="1399809600">- Add python to BuildRequires - it is used for manpage generation
  (was previously implicitly included)</changelog>
  <changelog author="jengelh@inai.de" date="1427544000">- Update to new upstream release 2.1
  * Chocolate Doom now supports high-quality substitute music packs
  that are used in place of the original MIDI music tracks.
  * Support for joysticks and gamepads has been significantly
  improved in this version.
  * OPL MIDI playback has been significantly improved. Multi-track
  MIDI files now play back properly.
  * The "no fog on spawn west" Vanilla bug is now correctly
  emulated.
  * Behavior of older versions of Doom back to v1.666 can now be
  emulated.
- Add chdoom-nonvoid.diff, chdoom-prng.diff to quench compiler
  warnings. Add chdoom-date.diff to kill __DATE__ instances.</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 2.2.1
  * The Hexen four level demo IWAD is now supported.
  * The Doom reload hack has been added back.
  * OPL music playback has been improved in a number of ways to
  match the behavior of Vanilla Doom's DMX library much more
  closely. OPL3 playback is also now supported.
- Drop chdoom-nonvoid.diff (included upstream),
  drop chdoom-prng.diff (PRNG impl. was switched)</changelog>
  <changelog author="jengelh@inai.de" date="1479297600">- Add chdoom-sdlsound.diff to resolve build error with new
  libsamplerate</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Update to new upstream release 2.3.0 (2016-12-29)
  * Pitch-shifting from early versions of Doom, Heretic, and Hexen
    is now supported.
  * Aspect ratio-corrected 1600×1200 PNGs are now written.
  * OPL emulation is more accurate.
  * DMX bugs with GUS cards are now better emulated.
  * Checksum calculations are fixed on big endian systems, allowing
    multiplayer games to be played in mixed little/big-endian
    environments.
  * The vanilla limit of 4046 lumps per WAD is now enforced.
  * Solidsegs overflow is emulated like in vanilla.
  * It is now possible to start multiplayer Chex Quest games.
  * Versions 1.666, 1.7, and 1.8 are emulated.
  * An issue was fixed where the game crashed while killing the
    Wraithverge in 64-bit builds.
- Drop chdoom-date.diff (no longer needed), drop
  chdoom-sdlsound.diff (merged upstream).</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Update to new upstream release 3.0.0 (2017-12-30)
  * Update to SDL2. All scaling is now done in hardware.
  * It is possible to toggle fullscreen with Alt-Enter.
  * On multimonitor setups, the game will remember the used screen.
  * A new parameter, -savedir allows users to specify a directory
    from which to load and save games.
  * The GOG install of Doom 3: BFG Edition is now detected.
  * The CD audio option for music playback has been removed; the CD
    playback API has been removed from SDL 2.0.
  * Strife's voices.wad is now correctly loaded before PWADs.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542196800">- Update description.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591444800">- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1593604800">- Update to release 3.0.1
  * Fixed a bug where a client in a networked game can
    cause a stack-based buffer overflow on the server
    [CVE-2020-14983, boo#1173595]</changelog>
</package>
<package pkgid="1c16d80bc28efe95ba043c53f49cbb7135523df2f108ef8d7281d78c08ebda8e" name="chocolate-doom-bash-completion" arch="noarch">
  <version epoch="0" ver="3.0.1" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1386676800">- Update to new upstream release 2.0
  * Support for three other Doom engine-based games: Heretic, Hexen,
  and Strife.</changelog>
  <changelog author="jengelh@inai.de" date="1399809600">- Add python to BuildRequires - it is used for manpage generation
  (was previously implicitly included)</changelog>
  <changelog author="jengelh@inai.de" date="1427544000">- Update to new upstream release 2.1
  * Chocolate Doom now supports high-quality substitute music packs
  that are used in place of the original MIDI music tracks.
  * Support for joysticks and gamepads has been significantly
  improved in this version.
  * OPL MIDI playback has been significantly improved. Multi-track
  MIDI files now play back properly.
  * The "no fog on spawn west" Vanilla bug is now correctly
  emulated.
  * Behavior of older versions of Doom back to v1.666 can now be
  emulated.
- Add chdoom-nonvoid.diff, chdoom-prng.diff to quench compiler
  warnings. Add chdoom-date.diff to kill __DATE__ instances.</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 2.2.1
  * The Hexen four level demo IWAD is now supported.
  * The Doom reload hack has been added back.
  * OPL music playback has been improved in a number of ways to
  match the behavior of Vanilla Doom's DMX library much more
  closely. OPL3 playback is also now supported.
- Drop chdoom-nonvoid.diff (included upstream),
  drop chdoom-prng.diff (PRNG impl. was switched)</changelog>
  <changelog author="jengelh@inai.de" date="1479297600">- Add chdoom-sdlsound.diff to resolve build error with new
  libsamplerate</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Update to new upstream release 2.3.0 (2016-12-29)
  * Pitch-shifting from early versions of Doom, Heretic, and Hexen
    is now supported.
  * Aspect ratio-corrected 1600×1200 PNGs are now written.
  * OPL emulation is more accurate.
  * DMX bugs with GUS cards are now better emulated.
  * Checksum calculations are fixed on big endian systems, allowing
    multiplayer games to be played in mixed little/big-endian
    environments.
  * The vanilla limit of 4046 lumps per WAD is now enforced.
  * Solidsegs overflow is emulated like in vanilla.
  * It is now possible to start multiplayer Chex Quest games.
  * Versions 1.666, 1.7, and 1.8 are emulated.
  * An issue was fixed where the game crashed while killing the
    Wraithverge in 64-bit builds.
- Drop chdoom-date.diff (no longer needed), drop
  chdoom-sdlsound.diff (merged upstream).</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Update to new upstream release 3.0.0 (2017-12-30)
  * Update to SDL2. All scaling is now done in hardware.
  * It is possible to toggle fullscreen with Alt-Enter.
  * On multimonitor setups, the game will remember the used screen.
  * A new parameter, -savedir allows users to specify a directory
    from which to load and save games.
  * The GOG install of Doom 3: BFG Edition is now detected.
  * The CD audio option for music playback has been removed; the CD
    playback API has been removed from SDL 2.0.
  * Strife's voices.wad is now correctly loaded before PWADs.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542196800">- Update description.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591444800">- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1593604800">- Update to release 3.0.1
  * Fixed a bug where a client in a networked game can
    cause a stack-based buffer overflow on the server
    [CVE-2020-14983, boo#1173595]</changelog>
</package>
<package pkgid="da7d2e37a26c89c901f232c485ebc290eb80534882c81446f7de1b89fd6dd18e" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="83.0.4103.116" rel="lp152.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
</package>
<package pkgid="cf09f95b9b7557155940ef1e64ba8cc4ec852dd55d6beb258ec99cb09d58be96" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="84.0.4147.105" rel="lp152.2.9.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
</package>
<package pkgid="d2f17485d33b05c7c7c9aa19d1bab315f76c3666570ffdf75cecc1aca0ec2a95" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="84.0.4147.125" rel="lp152.2.12.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="6ebc6e31c26f09cd0d1cafd79c138e5cedee3ef373bb4ce261316873241d42ce" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="84.0.4147.135" rel="lp152.2.17.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597838400">- Use new _constraint memoryperjob.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
</package>
<package pkgid="0e59ee175127fd58ffc8cba38bbdc9488a3818517c7d329fa94dd4014c69ccb2" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="84.0.4147.89" rel="lp152.2.6.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667200">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
</package>
<package pkgid="6628816af2443c725848865490c535947cfcc0002b30c90b3176da00840a20b5" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="85.0.4183.102" rel="lp152.2.30.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
</package>
<package pkgid="cccce70bc8d0234658e96c238e13756bef34ada810efc0d7ee76273b6f2a1c37" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="85.0.4183.121" rel="lp152.2.33.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
</package>
<package pkgid="87aa99101f970535e4134ae5c34f520f6df774128fb6f25ef66329b39f605a58" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="85.0.4183.69" rel="lp152.2.20.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
</package>
<package pkgid="7457babc15d9b4d6f8215bd5651d699131243e55bbf5569453ff74641640614b" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="86.0.4240.111" rel="lp152.2.42.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060800">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
</package>
<package pkgid="35a3a57785638d45988054b274916ff915297bb3d859c512776a61fcf062fbf5" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="86.0.4240.183" rel="lp152.2.45.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
</package>
<package pkgid="d0b7521dd9e3fa78d3747374c5d0aefa00612bc0f4e876623fcb3e0c57aaf8d1" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="86.0.4240.198" rel="lp152.2.48.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
</package>
<package pkgid="7f201b8af3a35be7fbd44fa547d310ae1d14ad4b16995fa8a919e32691973f54" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="86.0.4240.75" rel="lp152.2.39.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
</package>
<package pkgid="fe06e0236fd5d5d2b2b313859be5ea7a0bb3d80da116be3f55f5b394143bda33" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="87.0.4280.141" rel="lp152.2.60.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
</package>
<package pkgid="048438227105a98c968ec66d760691379f4d170157e6c1647bac29c80eb556ef" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="87.0.4280.141" rel="lp152.2.63.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
</package>
<package pkgid="91209b377eaee79b8ffd7021eae49cba1c23b9d541e52f767245b7f394ca6525" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="87.0.4280.66" rel="lp152.2.51.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
</package>
<package pkgid="08895d15511479496dfd9971139b7636b1b9dbf38aeaf9ce09de9f1989a25cf5" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="87.0.4280.66" rel="lp152.2.54.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
</package>
<package pkgid="9bd5a7a2bec733a434baf963fa19f79ea27dd3983305ae7a724d7f805eeda4d8" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="87.0.4280.88" rel="lp152.2.57.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
</package>
<package pkgid="592285eadaa89a66cdcbf3ab1c636866ba609ba8f0c54d0ddeb588fdd014878d" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="88.0.4324.146" rel="lp152.2.69.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
</package>
<package pkgid="b215e2f85916d4752a0b1b9847486905152e3b8f56bdb6288ad4f05de2d44b30" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="88.0.4324.150" rel="lp152.2.72.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
</package>
<package pkgid="1aa3c04ff8c3f516b02a794a0894338b3b5b2fec24d34c106dbd659b97d3b09a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="88.0.4324.96" rel="lp152.2.66.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
</package>
<package pkgid="9caae589af4b9b9b016a787112169b6bb4a4316b6f5b02b8073bb0427c182e72" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="89.0.4389.114" rel="lp152.2.83.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
</package>
<package pkgid="f0bdbe4a7d607e5882ac11819f646db0ff6a2bb15e31c029a910218533bcd0e5" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="89.0.4389.128" rel="lp152.2.86.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
</package>
<package pkgid="beef9ca372bed768b04d3b789707c0db6f9144908d214de8ab0ef5691f7d7ae0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="89.0.4389.72" rel="lp152.2.77.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
</package>
<package pkgid="820f9333c5566da659c956a383d7e372459992e0d5f7d279d6a9b773b0bf80f1" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="89.0.4389.90" rel="lp152.2.80.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
</package>
<package pkgid="c868ca18b5552f21bfdee40ac8e364fead551505b33d8d0573d7d9843065fe69" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="90.0.4430.212" rel="lp152.2.92.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
</package>
<package pkgid="c6c280b9d99b86fcdf048b232a78ad1aa7d4761878902adf8ba9d3cdab22b666" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="90.0.4430.212" rel="lp152.2.95.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
</package>
<package pkgid="f47b8f2a020eecd8fa6a59e3683ee08dfd38d5543b2c7153be6896b01e3690fa" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="90.0.4430.93" rel="lp152.2.89.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
</package>
<package pkgid="eb6a746d354a731e7bab0677ef4c10352ead4f7f96c57194616513edc85a88d6" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="91.0.4472.101" rel="lp152.2.104.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="5d4223d1f92473c992fe5ae0e1767c3a3f3565ce0b504a88e71a9fbededf9bdf" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="91.0.4472.114" rel="lp152.2.107.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
</package>
<package pkgid="448407cf8f6e42a3e2c5c5a9342ed6553a66e9208433adffd3018762a0829aa8" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="91.0.4472.114" rel="lp152.2.110.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
</package>
<package pkgid="20aed48214a873244aac2ca82594ecdfbda8b8f956c9f30703b9bebb6030f9ed" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="91.0.4472.164" rel="lp152.2.113.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="3f4241a8ce0dd853d5e906c3d5c9896595ac5bbe43b13bb483261983f409f2ad" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="91.0.4472.77" rel="lp152.2.101.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
</package>
<package pkgid="5d68cb9b41c6d9ffaf7bbe1b77f01db88aaafe2c3fd3bc8d542af036158b2adb" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="91.0.4472.77" rel="lp152.2.98.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
</package>
<package pkgid="27836b692d3d27de2301c74b65b6c509c3c2d75f2662de0c92f5fd7fe4cc53f3" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="92.0.4515.131" rel="lp152.2.116.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
</package>
<package pkgid="51011fcdf8a00fd3e6fb60461adb76f418cc4acdfe432f692ed0164919f66cd0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="92.0.4515.131" rel="lp152.2.119.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
</package>
<package pkgid="dba3a1625865cd2a9deeacdb7118a620a111909daf2e3eaa266afa514ee04a84" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="92.0.4515.159" rel="lp152.2.122.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="1c4c6f8a8c06dc23dcb4ffbbb865f751b4b5ba8608116cb3f4c75ea3aec39b3d" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="93.0.4577.82" rel="lp152.2.125.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630238400">- Updated chromium-glibc-2.34.patch: Fix PTHREAD_STACK_MIN errors
  with glibc 2.34</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631707200">- Chromium 93.0.4577.63 (boo#1190096):
  * CVE-2021-30606: Use after free in Blink
  * CVE-2021-30607: Use after free in Permissions
  * CVE-2021-30608: Use after free in Web Share
  * CVE-2021-30609: Use after free in Sign-In
  * CVE-2021-30610: Use after free in Extensions API
  * CVE-2021-30611: Use after free in WebRTC
  * CVE-2021-30612: Use after free in WebRTC
  * CVE-2021-30613: Use after free in Base internals
  * CVE-2021-30614: Heap buffer overflow in TabStrip
  * CVE-2021-30615: Cross-origin data leak in Navigation
  * CVE-2021-30616: Use after free in Media
  * CVE-2021-30617: Policy bypass in Blink
  * CVE-2021-30618: Inappropriate implementation in DevTools
  * CVE-2021-30619: UI Spoofing in Autofill
  * CVE-2021-30620: Insufficient policy enforcement in Blink
  * CVE-2021-30621: UI Spoofing in Autofill
  * CVE-2021-30622: Use after free in WebApp Installs
  * CVE-2021-30623: Use after free in Bookmarks
  * CVE-2021-30624: Use after free in Autofill
- Chromium 93.0.4577.82 (boo#1190476):
  * CVE-2021-30625: Use after free in Selection API
  * CVE-2021-30626: Out of bounds memory access in ANGLE
  * CVE-2021-30627: Type Confusion in Blink layout
  * CVE-2021-30628: Stack buffer overflow in ANGLE
  * CVE-2021-30629: Use after free in Permissions
  * CVE-2021-30630: Inappropriate implementation in Blink
  * CVE-2021-30631: Type Confusion in Blink layout
  * CVE-2021-30632: Out of bounds write in V8
  * CVE-2021-30633: Use after free in Indexed DB API
- Removed patches:
  * chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
  * chromium-92-v8-constexpr.patch
  * chromium-no-writeprotection.patch
  * chromium-92-EnumTable-crash.patch
- Added patches:
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-93-ffmpeg-4.4.patch
  * chromium-93-EnumTable-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631966400">- Add patch to fix Leap 15.2 build:
  * chromium-ffmpeg-lp152.patch
- Change system-libdrm.patch: add to unbundle instead of changing
  header path</changelog>
</package>
<package pkgid="d0130fb713982e65057ee8375b5f75488a96366549f94212c593fdb286072415" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="94.0.4606.81" rel="lp152.2.132.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630238400">- Updated chromium-glibc-2.34.patch: Fix PTHREAD_STACK_MIN errors
  with glibc 2.34</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631707200">- Chromium 93.0.4577.63 (boo#1190096):
  * CVE-2021-30606: Use after free in Blink
  * CVE-2021-30607: Use after free in Permissions
  * CVE-2021-30608: Use after free in Web Share
  * CVE-2021-30609: Use after free in Sign-In
  * CVE-2021-30610: Use after free in Extensions API
  * CVE-2021-30611: Use after free in WebRTC
  * CVE-2021-30612: Use after free in WebRTC
  * CVE-2021-30613: Use after free in Base internals
  * CVE-2021-30614: Heap buffer overflow in TabStrip
  * CVE-2021-30615: Cross-origin data leak in Navigation
  * CVE-2021-30616: Use after free in Media
  * CVE-2021-30617: Policy bypass in Blink
  * CVE-2021-30618: Inappropriate implementation in DevTools
  * CVE-2021-30619: UI Spoofing in Autofill
  * CVE-2021-30620: Insufficient policy enforcement in Blink
  * CVE-2021-30621: UI Spoofing in Autofill
  * CVE-2021-30622: Use after free in WebApp Installs
  * CVE-2021-30623: Use after free in Bookmarks
  * CVE-2021-30624: Use after free in Autofill
- Chromium 93.0.4577.82 (boo#1190476):
  * CVE-2021-30625: Use after free in Selection API
  * CVE-2021-30626: Out of bounds memory access in ANGLE
  * CVE-2021-30627: Type Confusion in Blink layout
  * CVE-2021-30628: Stack buffer overflow in ANGLE
  * CVE-2021-30629: Use after free in Permissions
  * CVE-2021-30630: Inappropriate implementation in Blink
  * CVE-2021-30631: Type Confusion in Blink layout
  * CVE-2021-30632: Out of bounds write in V8
  * CVE-2021-30633: Use after free in Indexed DB API
- Removed patches:
  * chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
  * chromium-92-v8-constexpr.patch
  * chromium-no-writeprotection.patch
  * chromium-92-EnumTable-crash.patch
- Added patches:
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-93-ffmpeg-4.4.patch
  * chromium-93-EnumTable-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631966400">- Add patch to fix Leap 15.2 build:
  * chromium-ffmpeg-lp152.patch
- Change system-libdrm.patch: add to unbundle instead of changing
  header path</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633262400">- Chromium 94.0.4606.54 (boo#1190765):
  * CVE-2021-37956: Use after free in Offline use
  * CVE-2021-37957: Use after free in WebGPU
  * CVE-2021-37958: Inappropriate implementation in Navigation
  * CVE-2021-37959: Use after free in Task Manager
  * CVE-2021-37960: Inappropriate implementation in Blink graphics
  * CVE-2021-37961: Use after free in Tab Strip
  * CVE-2021-37962: Use after free in Performance Manager
  * CVE-2021-37963: Side-channel information leakage in DevTools
  * CVE-2021-37964: Inappropriate implementation in ChromeOS Networking
  * CVE-2021-37965: Inappropriate implementation in Background Fetch API
  * CVE-2021-37966: Inappropriate implementation in Compositing
  * CVE-2021-37967: Inappropriate implementation in Background Fetch API
  * CVE-2021-37968: Inappropriate implementation in Background Fetch API
  * CVE-2021-37969: Inappropriate implementation in Google Updater
  * CVE-2021-37970: Use after free in File System API
  * CVE-2021-37971: Incorrect security UI in Web Browser UI
  * CVE-2021-37972: Out of bounds read in libjpeg-turbo
- Chromium 94.0.4606.61 (boo#1191166):
  * CVE-2021-37973: Use after free in Portals
- Chromium 94.0.4606.71 (boo#1191204):
  * CVE-2021-37974 : Use after free in Safe Browsing
  * CVE-2021-37975 : Use after free in V8
  * CVE-2021-37976 : Information leak in core
- Added patches:
  * chromium-94-CustomSpaces-include.patch
  * chromium-94-sql-no-assert.patch
  * chromium-older-harfbuzz.patch
  * chromium-94-ffmpeg-roll.patch
  * chromium-94-compiler.patch
- Removed patches:
  * chromium-freetype-2.11.patch
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-91-compiler.patch
  * chromium-glibc-2.33.patch
  * chromium-shim_headers.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633694400">- Chromium 94.0.4606.81 (boo#1191463):
  * CVE-2021-37977: Use after free in Garbage Collection
  * CVE-2021-37978: Heap buffer overflow in Blink
  * CVE-2021-37979: Heap buffer overflow in WebRTC
  * CVE-2021-37980: Inappropriate implementation in Sandbox
- Re-add after accidental deletion:
  * chromium-93-InkDropHost-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780800">- Add pipewire-do-not-typecheck-the-portal-session_handle.patch:
  fix WebRTC with xdg-desktop-portal 1.10</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780801">- Disable DCHECK(): that's for debug only</changelog>
</package>
<package pkgid="5820ca00fe98b6f8042d6a0b065d72d6b8463b375a7b5b7e3c60033cc364f3ee" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="95.0.4638.54" rel="lp152.2.135.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630238400">- Updated chromium-glibc-2.34.patch: Fix PTHREAD_STACK_MIN errors
  with glibc 2.34</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631707200">- Chromium 93.0.4577.63 (boo#1190096):
  * CVE-2021-30606: Use after free in Blink
  * CVE-2021-30607: Use after free in Permissions
  * CVE-2021-30608: Use after free in Web Share
  * CVE-2021-30609: Use after free in Sign-In
  * CVE-2021-30610: Use after free in Extensions API
  * CVE-2021-30611: Use after free in WebRTC
  * CVE-2021-30612: Use after free in WebRTC
  * CVE-2021-30613: Use after free in Base internals
  * CVE-2021-30614: Heap buffer overflow in TabStrip
  * CVE-2021-30615: Cross-origin data leak in Navigation
  * CVE-2021-30616: Use after free in Media
  * CVE-2021-30617: Policy bypass in Blink
  * CVE-2021-30618: Inappropriate implementation in DevTools
  * CVE-2021-30619: UI Spoofing in Autofill
  * CVE-2021-30620: Insufficient policy enforcement in Blink
  * CVE-2021-30621: UI Spoofing in Autofill
  * CVE-2021-30622: Use after free in WebApp Installs
  * CVE-2021-30623: Use after free in Bookmarks
  * CVE-2021-30624: Use after free in Autofill
- Chromium 93.0.4577.82 (boo#1190476):
  * CVE-2021-30625: Use after free in Selection API
  * CVE-2021-30626: Out of bounds memory access in ANGLE
  * CVE-2021-30627: Type Confusion in Blink layout
  * CVE-2021-30628: Stack buffer overflow in ANGLE
  * CVE-2021-30629: Use after free in Permissions
  * CVE-2021-30630: Inappropriate implementation in Blink
  * CVE-2021-30631: Type Confusion in Blink layout
  * CVE-2021-30632: Out of bounds write in V8
  * CVE-2021-30633: Use after free in Indexed DB API
- Removed patches:
  * chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
  * chromium-92-v8-constexpr.patch
  * chromium-no-writeprotection.patch
  * chromium-92-EnumTable-crash.patch
- Added patches:
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-93-ffmpeg-4.4.patch
  * chromium-93-EnumTable-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631966400">- Add patch to fix Leap 15.2 build:
  * chromium-ffmpeg-lp152.patch
- Change system-libdrm.patch: add to unbundle instead of changing
  header path</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633262400">- Chromium 94.0.4606.54 (boo#1190765):
  * CVE-2021-37956: Use after free in Offline use
  * CVE-2021-37957: Use after free in WebGPU
  * CVE-2021-37958: Inappropriate implementation in Navigation
  * CVE-2021-37959: Use after free in Task Manager
  * CVE-2021-37960: Inappropriate implementation in Blink graphics
  * CVE-2021-37961: Use after free in Tab Strip
  * CVE-2021-37962: Use after free in Performance Manager
  * CVE-2021-37963: Side-channel information leakage in DevTools
  * CVE-2021-37964: Inappropriate implementation in ChromeOS Networking
  * CVE-2021-37965: Inappropriate implementation in Background Fetch API
  * CVE-2021-37966: Inappropriate implementation in Compositing
  * CVE-2021-37967: Inappropriate implementation in Background Fetch API
  * CVE-2021-37968: Inappropriate implementation in Background Fetch API
  * CVE-2021-37969: Inappropriate implementation in Google Updater
  * CVE-2021-37970: Use after free in File System API
  * CVE-2021-37971: Incorrect security UI in Web Browser UI
  * CVE-2021-37972: Out of bounds read in libjpeg-turbo
- Chromium 94.0.4606.61 (boo#1191166):
  * CVE-2021-37973: Use after free in Portals
- Chromium 94.0.4606.71 (boo#1191204):
  * CVE-2021-37974 : Use after free in Safe Browsing
  * CVE-2021-37975 : Use after free in V8
  * CVE-2021-37976 : Information leak in core
- Added patches:
  * chromium-94-CustomSpaces-include.patch
  * chromium-94-sql-no-assert.patch
  * chromium-older-harfbuzz.patch
  * chromium-94-ffmpeg-roll.patch
  * chromium-94-compiler.patch
- Removed patches:
  * chromium-freetype-2.11.patch
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-91-compiler.patch
  * chromium-glibc-2.33.patch
  * chromium-shim_headers.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633694400">- Chromium 94.0.4606.81 (boo#1191463):
  * CVE-2021-37977: Use after free in Garbage Collection
  * CVE-2021-37978: Heap buffer overflow in Blink
  * CVE-2021-37979: Heap buffer overflow in WebRTC
  * CVE-2021-37980: Inappropriate implementation in Sandbox
- Re-add after accidental deletion:
  * chromium-93-InkDropHost-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780800">- Add pipewire-do-not-typecheck-the-portal-session_handle.patch:
  fix WebRTC with xdg-desktop-portal 1.10</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780801">- Disable DCHECK(): that's for debug only</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1634385600">- Remove Python 2 requirement</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1635076800">- Chromium 95.0.4638.54 (boo#1191844):
  * CVE-2021-37981: Heap buffer overflow in Skia
  * CVE-2021-37982: Use after free in Incognito
  * CVE-2021-37983: Use after free in Dev Tools
  * CVE-2021-37984: Heap buffer overflow in PDFium
  * CVE-2021-37985: Use after free in V8
  * CVE-2021-37986: Heap buffer overflow in Settings
  * CVE-2021-37987: Use after free in Network APIs
  * CVE-2021-37988: Use after free in Profiles
  * CVE-2021-37989: Inappropriate implementation in Blink
  * CVE-2021-37990: Inappropriate implementation in WebView
  * CVE-2021-37991: Race in V8
  * CVE-2021-37992: Out of bounds read in WebAudio
  * CVE-2021-37993: Use after free in PDF Accessibility
  * CVE-2021-37996: Insufficient validation of untrusted input in Downloads
  * CVE-2021-37994: Inappropriate implementation in iFrame Sandbox
  * CVE-2021-37995: Inappropriate implementation in WebApp Installer
- Added patches:
  * chromium-95-BitstreamReader-namespace.patch
  * chromium-95-compiler.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-quiche-include.patch
  * chromium-95-system-zlib.patch
- Removed patches:
  * chromium-94-compiler.patch
  * chromium-91-libyuv-aarch64.patch
  * chromium-90-ruy-include.patch
  * chromium-94-CustomSpaces-include.patch</changelog>
</package>
<package pkgid="748261a50e0b542a3b58c557088d03f2dff13f96b73793c4eac04dca88e88529" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="95.0.4638.69" rel="lp152.2.138.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630238400">- Updated chromium-glibc-2.34.patch: Fix PTHREAD_STACK_MIN errors
  with glibc 2.34</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631707200">- Chromium 93.0.4577.63 (boo#1190096):
  * CVE-2021-30606: Use after free in Blink
  * CVE-2021-30607: Use after free in Permissions
  * CVE-2021-30608: Use after free in Web Share
  * CVE-2021-30609: Use after free in Sign-In
  * CVE-2021-30610: Use after free in Extensions API
  * CVE-2021-30611: Use after free in WebRTC
  * CVE-2021-30612: Use after free in WebRTC
  * CVE-2021-30613: Use after free in Base internals
  * CVE-2021-30614: Heap buffer overflow in TabStrip
  * CVE-2021-30615: Cross-origin data leak in Navigation
  * CVE-2021-30616: Use after free in Media
  * CVE-2021-30617: Policy bypass in Blink
  * CVE-2021-30618: Inappropriate implementation in DevTools
  * CVE-2021-30619: UI Spoofing in Autofill
  * CVE-2021-30620: Insufficient policy enforcement in Blink
  * CVE-2021-30621: UI Spoofing in Autofill
  * CVE-2021-30622: Use after free in WebApp Installs
  * CVE-2021-30623: Use after free in Bookmarks
  * CVE-2021-30624: Use after free in Autofill
- Chromium 93.0.4577.82 (boo#1190476):
  * CVE-2021-30625: Use after free in Selection API
  * CVE-2021-30626: Out of bounds memory access in ANGLE
  * CVE-2021-30627: Type Confusion in Blink layout
  * CVE-2021-30628: Stack buffer overflow in ANGLE
  * CVE-2021-30629: Use after free in Permissions
  * CVE-2021-30630: Inappropriate implementation in Blink
  * CVE-2021-30631: Type Confusion in Blink layout
  * CVE-2021-30632: Out of bounds write in V8
  * CVE-2021-30633: Use after free in Indexed DB API
- Removed patches:
  * chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
  * chromium-92-v8-constexpr.patch
  * chromium-no-writeprotection.patch
  * chromium-92-EnumTable-crash.patch
- Added patches:
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-93-ffmpeg-4.4.patch
  * chromium-93-EnumTable-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631966400">- Add patch to fix Leap 15.2 build:
  * chromium-ffmpeg-lp152.patch
- Change system-libdrm.patch: add to unbundle instead of changing
  header path</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633262400">- Chromium 94.0.4606.54 (boo#1190765):
  * CVE-2021-37956: Use after free in Offline use
  * CVE-2021-37957: Use after free in WebGPU
  * CVE-2021-37958: Inappropriate implementation in Navigation
  * CVE-2021-37959: Use after free in Task Manager
  * CVE-2021-37960: Inappropriate implementation in Blink graphics
  * CVE-2021-37961: Use after free in Tab Strip
  * CVE-2021-37962: Use after free in Performance Manager
  * CVE-2021-37963: Side-channel information leakage in DevTools
  * CVE-2021-37964: Inappropriate implementation in ChromeOS Networking
  * CVE-2021-37965: Inappropriate implementation in Background Fetch API
  * CVE-2021-37966: Inappropriate implementation in Compositing
  * CVE-2021-37967: Inappropriate implementation in Background Fetch API
  * CVE-2021-37968: Inappropriate implementation in Background Fetch API
  * CVE-2021-37969: Inappropriate implementation in Google Updater
  * CVE-2021-37970: Use after free in File System API
  * CVE-2021-37971: Incorrect security UI in Web Browser UI
  * CVE-2021-37972: Out of bounds read in libjpeg-turbo
- Chromium 94.0.4606.61 (boo#1191166):
  * CVE-2021-37973: Use after free in Portals
- Chromium 94.0.4606.71 (boo#1191204):
  * CVE-2021-37974 : Use after free in Safe Browsing
  * CVE-2021-37975 : Use after free in V8
  * CVE-2021-37976 : Information leak in core
- Added patches:
  * chromium-94-CustomSpaces-include.patch
  * chromium-94-sql-no-assert.patch
  * chromium-older-harfbuzz.patch
  * chromium-94-ffmpeg-roll.patch
  * chromium-94-compiler.patch
- Removed patches:
  * chromium-freetype-2.11.patch
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-91-compiler.patch
  * chromium-glibc-2.33.patch
  * chromium-shim_headers.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633694400">- Chromium 94.0.4606.81 (boo#1191463):
  * CVE-2021-37977: Use after free in Garbage Collection
  * CVE-2021-37978: Heap buffer overflow in Blink
  * CVE-2021-37979: Heap buffer overflow in WebRTC
  * CVE-2021-37980: Inappropriate implementation in Sandbox
- Re-add after accidental deletion:
  * chromium-93-InkDropHost-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780800">- Add pipewire-do-not-typecheck-the-portal-session_handle.patch:
  fix WebRTC with xdg-desktop-portal 1.10</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780801">- Disable DCHECK(): that's for debug only</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1634385600">- Remove Python 2 requirement</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1635076800">- Chromium 95.0.4638.54 (boo#1191844):
  * CVE-2021-37981: Heap buffer overflow in Skia
  * CVE-2021-37982: Use after free in Incognito
  * CVE-2021-37983: Use after free in Dev Tools
  * CVE-2021-37984: Heap buffer overflow in PDFium
  * CVE-2021-37985: Use after free in V8
  * CVE-2021-37986: Heap buffer overflow in Settings
  * CVE-2021-37987: Use after free in Network APIs
  * CVE-2021-37988: Use after free in Profiles
  * CVE-2021-37989: Inappropriate implementation in Blink
  * CVE-2021-37990: Inappropriate implementation in WebView
  * CVE-2021-37991: Race in V8
  * CVE-2021-37992: Out of bounds read in WebAudio
  * CVE-2021-37993: Use after free in PDF Accessibility
  * CVE-2021-37996: Insufficient validation of untrusted input in Downloads
  * CVE-2021-37994: Inappropriate implementation in iFrame Sandbox
  * CVE-2021-37995: Inappropriate implementation in WebApp Installer
- Added patches:
  * chromium-95-BitstreamReader-namespace.patch
  * chromium-95-compiler.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-quiche-include.patch
  * chromium-95-system-zlib.patch
- Removed patches:
  * chromium-94-compiler.patch
  * chromium-91-libyuv-aarch64.patch
  * chromium-90-ruy-include.patch
  * chromium-94-CustomSpaces-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635681600">- Chromium 95.0.4638.69 (boo#1192184):
  * CVE-2021-37997: Use after free in Sign-In
  * CVE-2021-37998: Use after free in Garbage Collection
  * CVE-2021-37999: Insufficient data validation in New Tab Page
  * CVE-2021-38000: Insufficient validation of untrusted input in Intents
  * CVE-2021-38001: Type Confusion in V8
  * CVE-2021-38002: Use after free in Web Transport
  * CVE-2021-38003: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="2016159a5f145426652e9f1dbaa1857419d4f206943cf7da62af3e3d93f9db6e" name="chromium" arch="src">
  <version epoch="0" ver="83.0.4103.116" rel="lp152.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
</package>
<package pkgid="550a5845b05cf556997b112578d092f5cbe96347f9d28a228981cf6ef9e11777" name="chromium" arch="x86_64">
  <version epoch="0" ver="83.0.4103.116" rel="lp152.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
</package>
<package pkgid="053d8b490dc237d4a9863603f5711b7f65a389ad87ccb3250c9c2fa0dd3dd091" name="chromium" arch="src">
  <version epoch="0" ver="84.0.4147.105" rel="lp152.2.9.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
</package>
<package pkgid="ab03be79f2b57106b8db92c7e90b77bcf2a87fb785c2d3e9b258d54a4713be4c" name="chromium" arch="x86_64">
  <version epoch="0" ver="84.0.4147.105" rel="lp152.2.9.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
</package>
<package pkgid="13bd74e70431e65de5998dc0d7f25c6497c2e5fd356e4afcaf935984883ab541" name="chromium" arch="src">
  <version epoch="0" ver="84.0.4147.125" rel="lp152.2.12.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="57f0de82a660787a50a062ff86b0dc18a43a1d039b639cf459e7c1f69d1d6bfa" name="chromium" arch="x86_64">
  <version epoch="0" ver="84.0.4147.125" rel="lp152.2.12.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="f0f57b3092a38b5066ace649f29afc10ba0bd432b6de953a93ff768ba81aad5c" name="chromium" arch="src">
  <version epoch="0" ver="84.0.4147.135" rel="lp152.2.17.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597838400">- Use new _constraint memoryperjob.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
</package>
<package pkgid="1d493963d836b8a4a62129977b0525b4ee97eb9d4c7864b2dd1dd143961bcf8e" name="chromium" arch="x86_64">
  <version epoch="0" ver="84.0.4147.135" rel="lp152.2.17.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597838400">- Use new _constraint memoryperjob.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
</package>
<package pkgid="31c922c1039ffa797b3c6cde5f4bf3ee62ebe1e8e1a0382a7420a8e586c94ccb" name="chromium" arch="src">
  <version epoch="0" ver="84.0.4147.89" rel="lp152.2.6.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667200">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
</package>
<package pkgid="74a084ac21c5b2272e4e7b787fdc8f58a9c1c100fce5572c20714c54a1a165dd" name="chromium" arch="x86_64">
  <version epoch="0" ver="84.0.4147.89" rel="lp152.2.6.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667200">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
</package>
<package pkgid="8ba60e17a25757a2bebdfe3c4671a1ea886480cd8d97db6a98612e2321f75d0e" name="chromium" arch="src">
  <version epoch="0" ver="85.0.4183.102" rel="lp152.2.30.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
</package>
<package pkgid="95e0d506bc2ba5e81a6bcc87f4ceeafd25d35d8194e4b3353c7be3832ffe3561" name="chromium" arch="x86_64">
  <version epoch="0" ver="85.0.4183.102" rel="lp152.2.30.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
</package>
<package pkgid="7a05cf5a0d61040155c5ce52f32346df55e791543100e310c70c29ad9ba599e6" name="chromium" arch="src">
  <version epoch="0" ver="85.0.4183.121" rel="lp152.2.33.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
</package>
<package pkgid="e0d7f8e9ec5512fd0990d4fa494d40f728c9214c1b0a6ef8e84ceaad32a05615" name="chromium" arch="x86_64">
  <version epoch="0" ver="85.0.4183.121" rel="lp152.2.33.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
</package>
<package pkgid="d633b8787e0c15995d02bbd906689683e2db56a655a953340f7c3e55ff16b84a" name="chromium" arch="src">
  <version epoch="0" ver="85.0.4183.69" rel="lp152.2.20.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
</package>
<package pkgid="e9fb78393e4f93bb7577c1d142c7a598513b14bcabd4cdf1619754707af2cc68" name="chromium" arch="x86_64">
  <version epoch="0" ver="85.0.4183.69" rel="lp152.2.20.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
</package>
<package pkgid="40a5b6c61913a97cf2145473c3287da497ad45a48e9a494e15c9c6e22d46b8cd" name="chromium" arch="src">
  <version epoch="0" ver="86.0.4240.111" rel="lp152.2.42.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060800">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
</package>
<package pkgid="f39d5dffd5f961cfd9c91ca90572f51e4719da1d928fbd3ab697f7c63d7d3f02" name="chromium" arch="x86_64">
  <version epoch="0" ver="86.0.4240.111" rel="lp152.2.42.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060800">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
</package>
<package pkgid="fa98992df735b425330e6d4913bf3b69e012ef96c706580281c497747f740bd4" name="chromium" arch="src">
  <version epoch="0" ver="86.0.4240.183" rel="lp152.2.45.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
</package>
<package pkgid="d84768eee0ff2a8c6bc842db40132ceadd7a69d40b5fd3393ab2793787f4a980" name="chromium" arch="x86_64">
  <version epoch="0" ver="86.0.4240.183" rel="lp152.2.45.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
</package>
<package pkgid="f69925e459ba8611c3440c0cb8fca1e5986b74a17ac622092d4683573fe39dcf" name="chromium" arch="src">
  <version epoch="0" ver="86.0.4240.198" rel="lp152.2.48.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
</package>
<package pkgid="928da6e6001d4cc285903a58e74fca9e98e58756fa1595625e50df56a9123254" name="chromium" arch="x86_64">
  <version epoch="0" ver="86.0.4240.198" rel="lp152.2.48.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
</package>
<package pkgid="2b456b0fc6c1d8e3295a42253ae2b761c7bf2cfbd5f01afcd8d2571fa58d1863" name="chromium" arch="src">
  <version epoch="0" ver="86.0.4240.75" rel="lp152.2.39.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
</package>
<package pkgid="8584cb48154cf574eebb9f99501e29cd3afda749acbf9a4190b62829a0b50e39" name="chromium" arch="x86_64">
  <version epoch="0" ver="86.0.4240.75" rel="lp152.2.39.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
</package>
<package pkgid="4a8377a755bb803fa13b1de43b9e46807a262fb629f65b94c420a032461dc6a0" name="chromium" arch="src">
  <version epoch="0" ver="87.0.4280.141" rel="lp152.2.60.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
</package>
<package pkgid="53c90c0045da4556db5dd2a74d0fdaa9b271d861a7c6cdaa540906fb123a04b4" name="chromium" arch="x86_64">
  <version epoch="0" ver="87.0.4280.141" rel="lp152.2.60.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
</package>
<package pkgid="ab0ff800edfa613148da2609f335dad3ac12f92d294662aea99ed805b4cbe4c8" name="chromium" arch="src">
  <version epoch="0" ver="87.0.4280.141" rel="lp152.2.63.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
</package>
<package pkgid="224a8a1b4e1afb08568b2f5a6e9a69c6bab0b8ebef4544c718807c50855f196f" name="chromium" arch="x86_64">
  <version epoch="0" ver="87.0.4280.141" rel="lp152.2.63.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
</package>
<package pkgid="2a16b189314d237ebc9a5274dd60ae8faa7d9d48af25e627238a82ccf6e61012" name="chromium" arch="src">
  <version epoch="0" ver="87.0.4280.66" rel="lp152.2.51.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
</package>
<package pkgid="0dc13258f2a3d748612b82fea55837afac96ef88052b8b82f3643e04f18f9651" name="chromium" arch="x86_64">
  <version epoch="0" ver="87.0.4280.66" rel="lp152.2.51.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
</package>
<package pkgid="6f1698a165cea8c9711cbc90690e3bfed12fc6ef09206a5f9ffc0741a0460cea" name="chromium" arch="src">
  <version epoch="0" ver="87.0.4280.66" rel="lp152.2.54.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
</package>
<package pkgid="362f6f0779b83d867dcbee7f87077805b74ee77aaa20c9c2de1eb7c4315d3abd" name="chromium" arch="x86_64">
  <version epoch="0" ver="87.0.4280.66" rel="lp152.2.54.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
</package>
<package pkgid="cb2a5f3cb9762359acd59d458e90a93eb6582343e992744b57f09480f6b5053a" name="chromium" arch="src">
  <version epoch="0" ver="87.0.4280.88" rel="lp152.2.57.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
</package>
<package pkgid="0d7c09828494c8f820a9e97420b9416f66d1d3149bf6e4b314ce09c3c8eaf6cc" name="chromium" arch="x86_64">
  <version epoch="0" ver="87.0.4280.88" rel="lp152.2.57.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
</package>
<package pkgid="8d029008d5a4358178aa9bbcf3a8d8391ca12c1e40a8235140edf47529ea3ba7" name="chromium" arch="src">
  <version epoch="0" ver="88.0.4324.146" rel="lp152.2.69.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
</package>
<package pkgid="f2f386d1ef8f82257da8ae655fa0a9c01cb98a4485d696fed80546e34f8a4bd1" name="chromium" arch="x86_64">
  <version epoch="0" ver="88.0.4324.146" rel="lp152.2.69.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
</package>
<package pkgid="d2497b6ef90e92f86afd9943c302e54dd022e14b89548f049557b2010619a79b" name="chromium" arch="src">
  <version epoch="0" ver="88.0.4324.150" rel="lp152.2.72.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
</package>
<package pkgid="38756f4a29a08b8abf7fec875c13eacec38db9235c50b95f8374268fd85096a4" name="chromium" arch="x86_64">
  <version epoch="0" ver="88.0.4324.150" rel="lp152.2.72.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
</package>
<package pkgid="5a8f07d05014fff3afe5b5dc2a27bb69a4d31463b30d178b9b9445178877f369" name="chromium" arch="src">
  <version epoch="0" ver="88.0.4324.96" rel="lp152.2.66.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
</package>
<package pkgid="03cc259b95ee8d778f479b43cb776b19ffba9657deb1264499d7fcc076b74f2b" name="chromium" arch="x86_64">
  <version epoch="0" ver="88.0.4324.96" rel="lp152.2.66.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
</package>
<package pkgid="134ecf608d0da69dfafca8f3c2ec056b0019461dcf371e09015687f2749c3614" name="chromium" arch="src">
  <version epoch="0" ver="89.0.4389.114" rel="lp152.2.83.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
</package>
<package pkgid="8242aa58b47bc333ee29ab7d6e800089c8a1c9b3a837cdefaeb3883991207075" name="chromium" arch="x86_64">
  <version epoch="0" ver="89.0.4389.114" rel="lp152.2.83.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
</package>
<package pkgid="fe1c73dde8eb8bb60b8d40d2b63346c62fc93cf8ebd4bd9d289a23f1980340b8" name="chromium" arch="src">
  <version epoch="0" ver="89.0.4389.128" rel="lp152.2.86.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
</package>
<package pkgid="16d49f2a3065673a4d833bc7efa3c7e4accaa90d3bf02642cb8199faf8115b5f" name="chromium" arch="x86_64">
  <version epoch="0" ver="89.0.4389.128" rel="lp152.2.86.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
</package>
<package pkgid="93a84ba6ede43d139ae86ae8f7ccd2eda3325481b8538bf38907a0c6e2b21e4c" name="chromium" arch="src">
  <version epoch="0" ver="89.0.4389.72" rel="lp152.2.77.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
</package>
<package pkgid="f6dac5a95137a1264de6ca6899dce94b96e8b1bb20092d84b7075b17a1b661a4" name="chromium" arch="x86_64">
  <version epoch="0" ver="89.0.4389.72" rel="lp152.2.77.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
</package>
<package pkgid="320cd15aec7a2701198f3f1814b85836e2b82e6d83b1d5661869fec2ff7f3fad" name="chromium" arch="src">
  <version epoch="0" ver="89.0.4389.90" rel="lp152.2.80.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
</package>
<package pkgid="740736968478d77db8907735d11d0db85e0be8197378ce0b38db6f1a2ef8a8c3" name="chromium" arch="x86_64">
  <version epoch="0" ver="89.0.4389.90" rel="lp152.2.80.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
</package>
<package pkgid="f8ff5de4458def6d68a068284908e11b7346311049318868550583e00c029d8c" name="chromium" arch="src">
  <version epoch="0" ver="90.0.4430.212" rel="lp152.2.92.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
</package>
<package pkgid="489058440048df143e50cb9d7b1bf750ea0f1a326d0ccdd6456f8025317811b4" name="chromium" arch="x86_64">
  <version epoch="0" ver="90.0.4430.212" rel="lp152.2.92.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
</package>
<package pkgid="435ee328a77c22d1bf6def7395ebe51b1133899e57cafa0ccbb6030542fd62c3" name="chromium" arch="src">
  <version epoch="0" ver="90.0.4430.212" rel="lp152.2.95.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
</package>
<package pkgid="ab3253f62c06083e274231dcd6cd98e8789083494fc6f65ea66e4b50fd15f748" name="chromium" arch="x86_64">
  <version epoch="0" ver="90.0.4430.212" rel="lp152.2.95.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
</package>
<package pkgid="df5b8cfa742074f5d114cb121dc8ff691de3278e266db8eebf005590e1ef23a9" name="chromium" arch="src">
  <version epoch="0" ver="90.0.4430.93" rel="lp152.2.89.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
</package>
<package pkgid="a5aa973b4cbdcc402dab84599252cd77dbb9820afdae485ec15ba260fe81aea7" name="chromium" arch="x86_64">
  <version epoch="0" ver="90.0.4430.93" rel="lp152.2.89.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
</package>
<package pkgid="85db32802e6bd735a9dc8166f5266c6ea25b5160ce03173a220424a9f4dcefcc" name="chromium" arch="src">
  <version epoch="0" ver="91.0.4472.101" rel="lp152.2.104.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="7fb8117553e1e21adfe88b5a4ecb8fb7f54932e83f1b304da9c469e00f95eaa7" name="chromium" arch="x86_64">
  <version epoch="0" ver="91.0.4472.101" rel="lp152.2.104.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="a9b8ad4300d67b674d7c21ff3b97ab0e73df61db657d64c4b03f9180972dfb24" name="chromium" arch="src">
  <version epoch="0" ver="91.0.4472.114" rel="lp152.2.107.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
</package>
<package pkgid="eaf05e6a2837256c4577ca0fbd1a7b28f03a97289c6afcca582846e60126b93d" name="chromium" arch="x86_64">
  <version epoch="0" ver="91.0.4472.114" rel="lp152.2.107.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
</package>
<package pkgid="b3668488ece6b8136635cb1be202344480627379f3a2643080daae21d11f30c3" name="chromium" arch="src">
  <version epoch="0" ver="91.0.4472.114" rel="lp152.2.110.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
</package>
<package pkgid="df2ef14e8718c6d0ae9476d9a67e4e5d0d90e5695e99dc72a87945c1ebd61329" name="chromium" arch="x86_64">
  <version epoch="0" ver="91.0.4472.114" rel="lp152.2.110.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
</package>
<package pkgid="cfdb293077544e7bd83d7e9a777d6ebee64469968e94d1f8c733bb19163d056d" name="chromium" arch="src">
  <version epoch="0" ver="91.0.4472.164" rel="lp152.2.113.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="44abfe0b2cb489214fafc317dbf0c47bf00c60de96e9ca1eb56acdf45b7da4e0" name="chromium" arch="x86_64">
  <version epoch="0" ver="91.0.4472.164" rel="lp152.2.113.2"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="d8a4fbd76ec52d63c7cfc4cb9784f1e689edfc137801ffcfd15e9cb585acd172" name="chromium" arch="src">
  <version epoch="0" ver="91.0.4472.77" rel="lp152.2.101.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
</package>
<package pkgid="0f86470b91193a833d360afb279df87877373d5787dd9d141d620bf006caaa5e" name="chromium" arch="x86_64">
  <version epoch="0" ver="91.0.4472.77" rel="lp152.2.101.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
</package>
<package pkgid="1a4601b9913f818aeb31d00787343ff33838e8c700e869e398c665b2f0f11776" name="chromium" arch="src">
  <version epoch="0" ver="91.0.4472.77" rel="lp152.2.98.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
</package>
<package pkgid="17a1dbbf8cae390cbc0d8b852aacaa8d8ff0524fa72a54779ec5e6b5ae71b744" name="chromium" arch="x86_64">
  <version epoch="0" ver="91.0.4472.77" rel="lp152.2.98.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
</package>
<package pkgid="f1c84b6947464f4fc24a4a6aa91ce44a5306652ff71940b878defcd32c3e286b" name="chromium" arch="src">
  <version epoch="0" ver="92.0.4515.131" rel="lp152.2.116.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
</package>
<package pkgid="042849cab9ad67defa9efee86068aa791b054c8d5893c0978f67da975344daeb" name="chromium" arch="x86_64">
  <version epoch="0" ver="92.0.4515.131" rel="lp152.2.116.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
</package>
<package pkgid="37277b33524538c68ae48327728b6f6cf498768fd471c49d57ea5792392666c3" name="chromium" arch="src">
  <version epoch="0" ver="92.0.4515.131" rel="lp152.2.119.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
</package>
<package pkgid="a0c9098d84b4413d2f72de2ca67ae3f062f8f9190e9fa7cb5d69c4144ebf76b2" name="chromium" arch="x86_64">
  <version epoch="0" ver="92.0.4515.131" rel="lp152.2.119.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
</package>
<package pkgid="ad3c1f8905c7db4b98f73f44930fd667f23a124b8d687a014734fbab2fc080f8" name="chromium" arch="src">
  <version epoch="0" ver="92.0.4515.159" rel="lp152.2.122.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="0ceca55b9495be4430f3fcd1e319a75de9bf5a74816377df499b299731110140" name="chromium" arch="x86_64">
  <version epoch="0" ver="92.0.4515.159" rel="lp152.2.122.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="08e623448987822f791c7ae48ef5d5bfa08735cbd1d26b516d81878b5f8b017a" name="chromium" arch="src">
  <version epoch="0" ver="93.0.4577.82" rel="lp152.2.125.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630238400">- Updated chromium-glibc-2.34.patch: Fix PTHREAD_STACK_MIN errors
  with glibc 2.34</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631707200">- Chromium 93.0.4577.63 (boo#1190096):
  * CVE-2021-30606: Use after free in Blink
  * CVE-2021-30607: Use after free in Permissions
  * CVE-2021-30608: Use after free in Web Share
  * CVE-2021-30609: Use after free in Sign-In
  * CVE-2021-30610: Use after free in Extensions API
  * CVE-2021-30611: Use after free in WebRTC
  * CVE-2021-30612: Use after free in WebRTC
  * CVE-2021-30613: Use after free in Base internals
  * CVE-2021-30614: Heap buffer overflow in TabStrip
  * CVE-2021-30615: Cross-origin data leak in Navigation
  * CVE-2021-30616: Use after free in Media
  * CVE-2021-30617: Policy bypass in Blink
  * CVE-2021-30618: Inappropriate implementation in DevTools
  * CVE-2021-30619: UI Spoofing in Autofill
  * CVE-2021-30620: Insufficient policy enforcement in Blink
  * CVE-2021-30621: UI Spoofing in Autofill
  * CVE-2021-30622: Use after free in WebApp Installs
  * CVE-2021-30623: Use after free in Bookmarks
  * CVE-2021-30624: Use after free in Autofill
- Chromium 93.0.4577.82 (boo#1190476):
  * CVE-2021-30625: Use after free in Selection API
  * CVE-2021-30626: Out of bounds memory access in ANGLE
  * CVE-2021-30627: Type Confusion in Blink layout
  * CVE-2021-30628: Stack buffer overflow in ANGLE
  * CVE-2021-30629: Use after free in Permissions
  * CVE-2021-30630: Inappropriate implementation in Blink
  * CVE-2021-30631: Type Confusion in Blink layout
  * CVE-2021-30632: Out of bounds write in V8
  * CVE-2021-30633: Use after free in Indexed DB API
- Removed patches:
  * chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
  * chromium-92-v8-constexpr.patch
  * chromium-no-writeprotection.patch
  * chromium-92-EnumTable-crash.patch
- Added patches:
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-93-ffmpeg-4.4.patch
  * chromium-93-EnumTable-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631966400">- Add patch to fix Leap 15.2 build:
  * chromium-ffmpeg-lp152.patch
- Change system-libdrm.patch: add to unbundle instead of changing
  header path</changelog>
</package>
<package pkgid="93578331583d8df40eb17345608b2e338e8475dd66998286a58de7413acfece0" name="chromium" arch="x86_64">
  <version epoch="0" ver="93.0.4577.82" rel="lp152.2.125.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1620302400">* Patch change *
- Fix build with GCC 11 again (bsc#1185716)
- Remove chromium-88-compiler.patch
- Remove chromium-90-cstdint.patch
- Remove chromium-90-gslang-linkage-fixup.patch
- Added  chromium-90-compiler.patch
- Added  chromium-90-angle-constexpr.patch
- Added  chromium-90-TokenizedOutput-include.patch
- Added  chromium-90-ruy-include.patch
- Added  chromium-90-CrossThreadCopier-qualification.patch
- Added  chromium-90-quantization_utils-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620734400">- Chromium 90.0.4430.212 (boo#1185908)
  * CVE-2021-30506: Incorrect security UI in Web App Installs
  * CVE-2021-30507: Inappropriate implementation in Offline
  * CVE-2021-30508: Heap buffer overflow in Media Feeds
  * CVE-2021-30509: Out of bounds write in Tab Strip
  * CVE-2021-30510: Race in Aura
  * CVE-2021-30511: Out of bounds read in Tab Group
  * CVE-2021-30512: Use after free in Notifications
  * CVE-2021-30513: Type Confusion in V8
  * CVE-2021-30514: Use after free in Autofill
  * CVE-2021-30515: Use after free in File API
  * CVE-2021-30516: Heap buffer overflow in History
  * CVE-2021-30517: Type Confusion in V8
  * CVE-2021-30518: Heap buffer overflow in Reader Mode
  * CVE-2021-30519: Use after free in Payments
  * CVE-2021-30520: Use after free in Tab Strip
- FTP support disabled at runtime by default since release 88.
  Chromium 91 will remove support for ftp altogether
  (boo#1185496)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630238400">- Updated chromium-glibc-2.34.patch: Fix PTHREAD_STACK_MIN errors
  with glibc 2.34</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631707200">- Chromium 93.0.4577.63 (boo#1190096):
  * CVE-2021-30606: Use after free in Blink
  * CVE-2021-30607: Use after free in Permissions
  * CVE-2021-30608: Use after free in Web Share
  * CVE-2021-30609: Use after free in Sign-In
  * CVE-2021-30610: Use after free in Extensions API
  * CVE-2021-30611: Use after free in WebRTC
  * CVE-2021-30612: Use after free in WebRTC
  * CVE-2021-30613: Use after free in Base internals
  * CVE-2021-30614: Heap buffer overflow in TabStrip
  * CVE-2021-30615: Cross-origin data leak in Navigation
  * CVE-2021-30616: Use after free in Media
  * CVE-2021-30617: Policy bypass in Blink
  * CVE-2021-30618: Inappropriate implementation in DevTools
  * CVE-2021-30619: UI Spoofing in Autofill
  * CVE-2021-30620: Insufficient policy enforcement in Blink
  * CVE-2021-30621: UI Spoofing in Autofill
  * CVE-2021-30622: Use after free in WebApp Installs
  * CVE-2021-30623: Use after free in Bookmarks
  * CVE-2021-30624: Use after free in Autofill
- Chromium 93.0.4577.82 (boo#1190476):
  * CVE-2021-30625: Use after free in Selection API
  * CVE-2021-30626: Out of bounds memory access in ANGLE
  * CVE-2021-30627: Type Confusion in Blink layout
  * CVE-2021-30628: Stack buffer overflow in ANGLE
  * CVE-2021-30629: Use after free in Permissions
  * CVE-2021-30630: Inappropriate implementation in Blink
  * CVE-2021-30631: Type Confusion in Blink layout
  * CVE-2021-30632: Out of bounds write in V8
  * CVE-2021-30633: Use after free in Indexed DB API
- Removed patches:
  * chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
  * chromium-92-v8-constexpr.patch
  * chromium-no-writeprotection.patch
  * chromium-92-EnumTable-crash.patch
- Added patches:
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-93-ffmpeg-4.4.patch
  * chromium-93-EnumTable-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631966400">- Add patch to fix Leap 15.2 build:
  * chromium-ffmpeg-lp152.patch
- Change system-libdrm.patch: add to unbundle instead of changing
  header path</changelog>
</package>
<package pkgid="d4695e2e9507646cb9240d0afae92afbcc18a686780f02290310a2f17aa053ca" name="chromium" arch="src">
  <version epoch="0" ver="94.0.4606.81" rel="lp152.2.132.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630238400">- Updated chromium-glibc-2.34.patch: Fix PTHREAD_STACK_MIN errors
  with glibc 2.34</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631707200">- Chromium 93.0.4577.63 (boo#1190096):
  * CVE-2021-30606: Use after free in Blink
  * CVE-2021-30607: Use after free in Permissions
  * CVE-2021-30608: Use after free in Web Share
  * CVE-2021-30609: Use after free in Sign-In
  * CVE-2021-30610: Use after free in Extensions API
  * CVE-2021-30611: Use after free in WebRTC
  * CVE-2021-30612: Use after free in WebRTC
  * CVE-2021-30613: Use after free in Base internals
  * CVE-2021-30614: Heap buffer overflow in TabStrip
  * CVE-2021-30615: Cross-origin data leak in Navigation
  * CVE-2021-30616: Use after free in Media
  * CVE-2021-30617: Policy bypass in Blink
  * CVE-2021-30618: Inappropriate implementation in DevTools
  * CVE-2021-30619: UI Spoofing in Autofill
  * CVE-2021-30620: Insufficient policy enforcement in Blink
  * CVE-2021-30621: UI Spoofing in Autofill
  * CVE-2021-30622: Use after free in WebApp Installs
  * CVE-2021-30623: Use after free in Bookmarks
  * CVE-2021-30624: Use after free in Autofill
- Chromium 93.0.4577.82 (boo#1190476):
  * CVE-2021-30625: Use after free in Selection API
  * CVE-2021-30626: Out of bounds memory access in ANGLE
  * CVE-2021-30627: Type Confusion in Blink layout
  * CVE-2021-30628: Stack buffer overflow in ANGLE
  * CVE-2021-30629: Use after free in Permissions
  * CVE-2021-30630: Inappropriate implementation in Blink
  * CVE-2021-30631: Type Confusion in Blink layout
  * CVE-2021-30632: Out of bounds write in V8
  * CVE-2021-30633: Use after free in Indexed DB API
- Removed patches:
  * chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
  * chromium-92-v8-constexpr.patch
  * chromium-no-writeprotection.patch
  * chromium-92-EnumTable-crash.patch
- Added patches:
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-93-ffmpeg-4.4.patch
  * chromium-93-EnumTable-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631966400">- Add patch to fix Leap 15.2 build:
  * chromium-ffmpeg-lp152.patch
- Change system-libdrm.patch: add to unbundle instead of changing
  header path</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633262400">- Chromium 94.0.4606.54 (boo#1190765):
  * CVE-2021-37956: Use after free in Offline use
  * CVE-2021-37957: Use after free in WebGPU
  * CVE-2021-37958: Inappropriate implementation in Navigation
  * CVE-2021-37959: Use after free in Task Manager
  * CVE-2021-37960: Inappropriate implementation in Blink graphics
  * CVE-2021-37961: Use after free in Tab Strip
  * CVE-2021-37962: Use after free in Performance Manager
  * CVE-2021-37963: Side-channel information leakage in DevTools
  * CVE-2021-37964: Inappropriate implementation in ChromeOS Networking
  * CVE-2021-37965: Inappropriate implementation in Background Fetch API
  * CVE-2021-37966: Inappropriate implementation in Compositing
  * CVE-2021-37967: Inappropriate implementation in Background Fetch API
  * CVE-2021-37968: Inappropriate implementation in Background Fetch API
  * CVE-2021-37969: Inappropriate implementation in Google Updater
  * CVE-2021-37970: Use after free in File System API
  * CVE-2021-37971: Incorrect security UI in Web Browser UI
  * CVE-2021-37972: Out of bounds read in libjpeg-turbo
- Chromium 94.0.4606.61 (boo#1191166):
  * CVE-2021-37973: Use after free in Portals
- Chromium 94.0.4606.71 (boo#1191204):
  * CVE-2021-37974 : Use after free in Safe Browsing
  * CVE-2021-37975 : Use after free in V8
  * CVE-2021-37976 : Information leak in core
- Added patches:
  * chromium-94-CustomSpaces-include.patch
  * chromium-94-sql-no-assert.patch
  * chromium-older-harfbuzz.patch
  * chromium-94-ffmpeg-roll.patch
  * chromium-94-compiler.patch
- Removed patches:
  * chromium-freetype-2.11.patch
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-91-compiler.patch
  * chromium-glibc-2.33.patch
  * chromium-shim_headers.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633694400">- Chromium 94.0.4606.81 (boo#1191463):
  * CVE-2021-37977: Use after free in Garbage Collection
  * CVE-2021-37978: Heap buffer overflow in Blink
  * CVE-2021-37979: Heap buffer overflow in WebRTC
  * CVE-2021-37980: Inappropriate implementation in Sandbox
- Re-add after accidental deletion:
  * chromium-93-InkDropHost-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780800">- Add pipewire-do-not-typecheck-the-portal-session_handle.patch:
  fix WebRTC with xdg-desktop-portal 1.10</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780801">- Disable DCHECK(): that's for debug only</changelog>
</package>
<package pkgid="e6b2efd2e3fc02b1ef96da0fd86b16de0dc85cea518787ae70847390af558344" name="chromium" arch="x86_64">
  <version epoch="0" ver="94.0.4606.81" rel="lp152.2.132.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1621252800">- use asimdrdm CPU flag for aarch64 to select only more powerful buildhosts.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1622116800">- Chromium 91.0.4472.77 (boo#1186458):
  * Support Managed configuration API for Web Applications
  * WebOTP API: cross-origin iframe support
  * CSS custom counter styles
  * Support JSON Modules
  * Clipboard: read-only files support
  * Remove webkitBeforeTextInserted &amp; webkitEditableCOntentChanged
    JS events
  * Honor media HTML attribute for link icon
  * Import Assertions
  * Class static initializer blocks
  * Ergonomic brand checks for private fields
  * Expose WebAssembly SIMD
  * New Feature: WebTransport
  * ES Modules for service workers ('module' type option)
  * Suggested file name and location for the File System Access API
  * adaptivePTime property for RTCRtpEncodingParameters
  * Block HTTP port 10080 - mitigation for NAT Slipstream 2.0 attack
  * Support WebSockets over HTTP/2
  * Support 103 Early Hints for Navigation
  * CVE-2021-30521: Heap buffer overflow in Autofill
  * CVE-2021-30522: Use after free in WebAudio
  * CVE-2021-30523: Use after free in WebRTC
  * CVE-2021-30524: Use after free in TabStrip
  * CVE-2021-30525: Use after free in TabGroups
  * CVE-2021-30526: Out of bounds write in TabStrip
  * CVE-2021-30527: Use after free in WebUI
  * CVE-2021-30528: Use after free in WebAuthentication
  * CVE-2021-30529: Use after free in Bookmarks
  * CVE-2021-30530: Out of bounds memory access in WebAudio
  * CVE-2021-30531: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30532: Insufficient policy enforcement in Content Security Policy
  * CVE-2021-30533: Insufficient policy enforcement in PopupBlocker
  * CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox
  * CVE-2021-30535: Double free in ICU
  * CVE-2021-21212: Insufficient data validation in networking
  * CVE-2021-30536: Out of bounds read in V8
  * CVE-2021-30537: Insufficient policy enforcement in cookies
  * CVE-2021-30538: Insufficient policy enforcement in content security policy
  * CVE-2021-30539: Insufficient policy enforcement in content security policy
  * CVE-2021-30540: Incorrect security UI in payments
  * Various fixes from internal audits, fuzzing and other initiatives
  * drop chromium-90-TokenizedOutput-include.patch
  * drop chromium-90-CrossThreadCopier-qualification.patch
  * drop chromium-90-quantization_utils-include.patch
  * drop chromium-90-angle-constexpr.patch
  * add chromium-91-java-only-allowed-in-android-builds.patch
  * add chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * add chromium-91-system-icu.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630238400">- Updated chromium-glibc-2.34.patch: Fix PTHREAD_STACK_MIN errors
  with glibc 2.34</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631707200">- Chromium 93.0.4577.63 (boo#1190096):
  * CVE-2021-30606: Use after free in Blink
  * CVE-2021-30607: Use after free in Permissions
  * CVE-2021-30608: Use after free in Web Share
  * CVE-2021-30609: Use after free in Sign-In
  * CVE-2021-30610: Use after free in Extensions API
  * CVE-2021-30611: Use after free in WebRTC
  * CVE-2021-30612: Use after free in WebRTC
  * CVE-2021-30613: Use after free in Base internals
  * CVE-2021-30614: Heap buffer overflow in TabStrip
  * CVE-2021-30615: Cross-origin data leak in Navigation
  * CVE-2021-30616: Use after free in Media
  * CVE-2021-30617: Policy bypass in Blink
  * CVE-2021-30618: Inappropriate implementation in DevTools
  * CVE-2021-30619: UI Spoofing in Autofill
  * CVE-2021-30620: Insufficient policy enforcement in Blink
  * CVE-2021-30621: UI Spoofing in Autofill
  * CVE-2021-30622: Use after free in WebApp Installs
  * CVE-2021-30623: Use after free in Bookmarks
  * CVE-2021-30624: Use after free in Autofill
- Chromium 93.0.4577.82 (boo#1190476):
  * CVE-2021-30625: Use after free in Selection API
  * CVE-2021-30626: Out of bounds memory access in ANGLE
  * CVE-2021-30627: Type Confusion in Blink layout
  * CVE-2021-30628: Stack buffer overflow in ANGLE
  * CVE-2021-30629: Use after free in Permissions
  * CVE-2021-30630: Inappropriate implementation in Blink
  * CVE-2021-30631: Type Confusion in Blink layout
  * CVE-2021-30632: Out of bounds write in V8
  * CVE-2021-30633: Use after free in Indexed DB API
- Removed patches:
  * chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
  * chromium-92-v8-constexpr.patch
  * chromium-no-writeprotection.patch
  * chromium-92-EnumTable-crash.patch
- Added patches:
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-93-ffmpeg-4.4.patch
  * chromium-93-EnumTable-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631966400">- Add patch to fix Leap 15.2 build:
  * chromium-ffmpeg-lp152.patch
- Change system-libdrm.patch: add to unbundle instead of changing
  header path</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633262400">- Chromium 94.0.4606.54 (boo#1190765):
  * CVE-2021-37956: Use after free in Offline use
  * CVE-2021-37957: Use after free in WebGPU
  * CVE-2021-37958: Inappropriate implementation in Navigation
  * CVE-2021-37959: Use after free in Task Manager
  * CVE-2021-37960: Inappropriate implementation in Blink graphics
  * CVE-2021-37961: Use after free in Tab Strip
  * CVE-2021-37962: Use after free in Performance Manager
  * CVE-2021-37963: Side-channel information leakage in DevTools
  * CVE-2021-37964: Inappropriate implementation in ChromeOS Networking
  * CVE-2021-37965: Inappropriate implementation in Background Fetch API
  * CVE-2021-37966: Inappropriate implementation in Compositing
  * CVE-2021-37967: Inappropriate implementation in Background Fetch API
  * CVE-2021-37968: Inappropriate implementation in Background Fetch API
  * CVE-2021-37969: Inappropriate implementation in Google Updater
  * CVE-2021-37970: Use after free in File System API
  * CVE-2021-37971: Incorrect security UI in Web Browser UI
  * CVE-2021-37972: Out of bounds read in libjpeg-turbo
- Chromium 94.0.4606.61 (boo#1191166):
  * CVE-2021-37973: Use after free in Portals
- Chromium 94.0.4606.71 (boo#1191204):
  * CVE-2021-37974 : Use after free in Safe Browsing
  * CVE-2021-37975 : Use after free in V8
  * CVE-2021-37976 : Information leak in core
- Added patches:
  * chromium-94-CustomSpaces-include.patch
  * chromium-94-sql-no-assert.patch
  * chromium-older-harfbuzz.patch
  * chromium-94-ffmpeg-roll.patch
  * chromium-94-compiler.patch
- Removed patches:
  * chromium-freetype-2.11.patch
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-91-compiler.patch
  * chromium-glibc-2.33.patch
  * chromium-shim_headers.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633694400">- Chromium 94.0.4606.81 (boo#1191463):
  * CVE-2021-37977: Use after free in Garbage Collection
  * CVE-2021-37978: Heap buffer overflow in Blink
  * CVE-2021-37979: Heap buffer overflow in WebRTC
  * CVE-2021-37980: Inappropriate implementation in Sandbox
- Re-add after accidental deletion:
  * chromium-93-InkDropHost-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780800">- Add pipewire-do-not-typecheck-the-portal-session_handle.patch:
  fix WebRTC with xdg-desktop-portal 1.10</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780801">- Disable DCHECK(): that's for debug only</changelog>
</package>
<package pkgid="4c69b84cf961847012488dc9155b3ec358d993dd9ccee13bbdc7fcd90921114d" name="chromium" arch="src">
  <version epoch="0" ver="95.0.4638.54" rel="lp152.2.135.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630238400">- Updated chromium-glibc-2.34.patch: Fix PTHREAD_STACK_MIN errors
  with glibc 2.34</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631707200">- Chromium 93.0.4577.63 (boo#1190096):
  * CVE-2021-30606: Use after free in Blink
  * CVE-2021-30607: Use after free in Permissions
  * CVE-2021-30608: Use after free in Web Share
  * CVE-2021-30609: Use after free in Sign-In
  * CVE-2021-30610: Use after free in Extensions API
  * CVE-2021-30611: Use after free in WebRTC
  * CVE-2021-30612: Use after free in WebRTC
  * CVE-2021-30613: Use after free in Base internals
  * CVE-2021-30614: Heap buffer overflow in TabStrip
  * CVE-2021-30615: Cross-origin data leak in Navigation
  * CVE-2021-30616: Use after free in Media
  * CVE-2021-30617: Policy bypass in Blink
  * CVE-2021-30618: Inappropriate implementation in DevTools
  * CVE-2021-30619: UI Spoofing in Autofill
  * CVE-2021-30620: Insufficient policy enforcement in Blink
  * CVE-2021-30621: UI Spoofing in Autofill
  * CVE-2021-30622: Use after free in WebApp Installs
  * CVE-2021-30623: Use after free in Bookmarks
  * CVE-2021-30624: Use after free in Autofill
- Chromium 93.0.4577.82 (boo#1190476):
  * CVE-2021-30625: Use after free in Selection API
  * CVE-2021-30626: Out of bounds memory access in ANGLE
  * CVE-2021-30627: Type Confusion in Blink layout
  * CVE-2021-30628: Stack buffer overflow in ANGLE
  * CVE-2021-30629: Use after free in Permissions
  * CVE-2021-30630: Inappropriate implementation in Blink
  * CVE-2021-30631: Type Confusion in Blink layout
  * CVE-2021-30632: Out of bounds write in V8
  * CVE-2021-30633: Use after free in Indexed DB API
- Removed patches:
  * chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
  * chromium-92-v8-constexpr.patch
  * chromium-no-writeprotection.patch
  * chromium-92-EnumTable-crash.patch
- Added patches:
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-93-ffmpeg-4.4.patch
  * chromium-93-EnumTable-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631966400">- Add patch to fix Leap 15.2 build:
  * chromium-ffmpeg-lp152.patch
- Change system-libdrm.patch: add to unbundle instead of changing
  header path</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633262400">- Chromium 94.0.4606.54 (boo#1190765):
  * CVE-2021-37956: Use after free in Offline use
  * CVE-2021-37957: Use after free in WebGPU
  * CVE-2021-37958: Inappropriate implementation in Navigation
  * CVE-2021-37959: Use after free in Task Manager
  * CVE-2021-37960: Inappropriate implementation in Blink graphics
  * CVE-2021-37961: Use after free in Tab Strip
  * CVE-2021-37962: Use after free in Performance Manager
  * CVE-2021-37963: Side-channel information leakage in DevTools
  * CVE-2021-37964: Inappropriate implementation in ChromeOS Networking
  * CVE-2021-37965: Inappropriate implementation in Background Fetch API
  * CVE-2021-37966: Inappropriate implementation in Compositing
  * CVE-2021-37967: Inappropriate implementation in Background Fetch API
  * CVE-2021-37968: Inappropriate implementation in Background Fetch API
  * CVE-2021-37969: Inappropriate implementation in Google Updater
  * CVE-2021-37970: Use after free in File System API
  * CVE-2021-37971: Incorrect security UI in Web Browser UI
  * CVE-2021-37972: Out of bounds read in libjpeg-turbo
- Chromium 94.0.4606.61 (boo#1191166):
  * CVE-2021-37973: Use after free in Portals
- Chromium 94.0.4606.71 (boo#1191204):
  * CVE-2021-37974 : Use after free in Safe Browsing
  * CVE-2021-37975 : Use after free in V8
  * CVE-2021-37976 : Information leak in core
- Added patches:
  * chromium-94-CustomSpaces-include.patch
  * chromium-94-sql-no-assert.patch
  * chromium-older-harfbuzz.patch
  * chromium-94-ffmpeg-roll.patch
  * chromium-94-compiler.patch
- Removed patches:
  * chromium-freetype-2.11.patch
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-91-compiler.patch
  * chromium-glibc-2.33.patch
  * chromium-shim_headers.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633694400">- Chromium 94.0.4606.81 (boo#1191463):
  * CVE-2021-37977: Use after free in Garbage Collection
  * CVE-2021-37978: Heap buffer overflow in Blink
  * CVE-2021-37979: Heap buffer overflow in WebRTC
  * CVE-2021-37980: Inappropriate implementation in Sandbox
- Re-add after accidental deletion:
  * chromium-93-InkDropHost-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780800">- Add pipewire-do-not-typecheck-the-portal-session_handle.patch:
  fix WebRTC with xdg-desktop-portal 1.10</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780801">- Disable DCHECK(): that's for debug only</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1634385600">- Remove Python 2 requirement</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1635076800">- Chromium 95.0.4638.54 (boo#1191844):
  * CVE-2021-37981: Heap buffer overflow in Skia
  * CVE-2021-37982: Use after free in Incognito
  * CVE-2021-37983: Use after free in Dev Tools
  * CVE-2021-37984: Heap buffer overflow in PDFium
  * CVE-2021-37985: Use after free in V8
  * CVE-2021-37986: Heap buffer overflow in Settings
  * CVE-2021-37987: Use after free in Network APIs
  * CVE-2021-37988: Use after free in Profiles
  * CVE-2021-37989: Inappropriate implementation in Blink
  * CVE-2021-37990: Inappropriate implementation in WebView
  * CVE-2021-37991: Race in V8
  * CVE-2021-37992: Out of bounds read in WebAudio
  * CVE-2021-37993: Use after free in PDF Accessibility
  * CVE-2021-37996: Insufficient validation of untrusted input in Downloads
  * CVE-2021-37994: Inappropriate implementation in iFrame Sandbox
  * CVE-2021-37995: Inappropriate implementation in WebApp Installer
- Added patches:
  * chromium-95-BitstreamReader-namespace.patch
  * chromium-95-compiler.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-quiche-include.patch
  * chromium-95-system-zlib.patch
- Removed patches:
  * chromium-94-compiler.patch
  * chromium-91-libyuv-aarch64.patch
  * chromium-90-ruy-include.patch
  * chromium-94-CustomSpaces-include.patch</changelog>
</package>
<package pkgid="430caa2660ed4cfde50ee76d060fbc5bb3d7a7f557ade5158faa78dea341fb1b" name="chromium" arch="x86_64">
  <version epoch="0" ver="95.0.4638.54" rel="lp152.2.135.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622721600">- Add README.SUSE
- Fix aarch64 build:
  * chromium-91-libyuv-aarch64.patch
  * Update highway to 0.12.2 (arm only)
- Add -flax-vector-conversions to build flags</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630238400">- Updated chromium-glibc-2.34.patch: Fix PTHREAD_STACK_MIN errors
  with glibc 2.34</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631707200">- Chromium 93.0.4577.63 (boo#1190096):
  * CVE-2021-30606: Use after free in Blink
  * CVE-2021-30607: Use after free in Permissions
  * CVE-2021-30608: Use after free in Web Share
  * CVE-2021-30609: Use after free in Sign-In
  * CVE-2021-30610: Use after free in Extensions API
  * CVE-2021-30611: Use after free in WebRTC
  * CVE-2021-30612: Use after free in WebRTC
  * CVE-2021-30613: Use after free in Base internals
  * CVE-2021-30614: Heap buffer overflow in TabStrip
  * CVE-2021-30615: Cross-origin data leak in Navigation
  * CVE-2021-30616: Use after free in Media
  * CVE-2021-30617: Policy bypass in Blink
  * CVE-2021-30618: Inappropriate implementation in DevTools
  * CVE-2021-30619: UI Spoofing in Autofill
  * CVE-2021-30620: Insufficient policy enforcement in Blink
  * CVE-2021-30621: UI Spoofing in Autofill
  * CVE-2021-30622: Use after free in WebApp Installs
  * CVE-2021-30623: Use after free in Bookmarks
  * CVE-2021-30624: Use after free in Autofill
- Chromium 93.0.4577.82 (boo#1190476):
  * CVE-2021-30625: Use after free in Selection API
  * CVE-2021-30626: Out of bounds memory access in ANGLE
  * CVE-2021-30627: Type Confusion in Blink layout
  * CVE-2021-30628: Stack buffer overflow in ANGLE
  * CVE-2021-30629: Use after free in Permissions
  * CVE-2021-30630: Inappropriate implementation in Blink
  * CVE-2021-30631: Type Confusion in Blink layout
  * CVE-2021-30632: Out of bounds write in V8
  * CVE-2021-30633: Use after free in Indexed DB API
- Removed patches:
  * chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
  * chromium-92-v8-constexpr.patch
  * chromium-no-writeprotection.patch
  * chromium-92-EnumTable-crash.patch
- Added patches:
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-93-ffmpeg-4.4.patch
  * chromium-93-EnumTable-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631966400">- Add patch to fix Leap 15.2 build:
  * chromium-ffmpeg-lp152.patch
- Change system-libdrm.patch: add to unbundle instead of changing
  header path</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633262400">- Chromium 94.0.4606.54 (boo#1190765):
  * CVE-2021-37956: Use after free in Offline use
  * CVE-2021-37957: Use after free in WebGPU
  * CVE-2021-37958: Inappropriate implementation in Navigation
  * CVE-2021-37959: Use after free in Task Manager
  * CVE-2021-37960: Inappropriate implementation in Blink graphics
  * CVE-2021-37961: Use after free in Tab Strip
  * CVE-2021-37962: Use after free in Performance Manager
  * CVE-2021-37963: Side-channel information leakage in DevTools
  * CVE-2021-37964: Inappropriate implementation in ChromeOS Networking
  * CVE-2021-37965: Inappropriate implementation in Background Fetch API
  * CVE-2021-37966: Inappropriate implementation in Compositing
  * CVE-2021-37967: Inappropriate implementation in Background Fetch API
  * CVE-2021-37968: Inappropriate implementation in Background Fetch API
  * CVE-2021-37969: Inappropriate implementation in Google Updater
  * CVE-2021-37970: Use after free in File System API
  * CVE-2021-37971: Incorrect security UI in Web Browser UI
  * CVE-2021-37972: Out of bounds read in libjpeg-turbo
- Chromium 94.0.4606.61 (boo#1191166):
  * CVE-2021-37973: Use after free in Portals
- Chromium 94.0.4606.71 (boo#1191204):
  * CVE-2021-37974 : Use after free in Safe Browsing
  * CVE-2021-37975 : Use after free in V8
  * CVE-2021-37976 : Information leak in core
- Added patches:
  * chromium-94-CustomSpaces-include.patch
  * chromium-94-sql-no-assert.patch
  * chromium-older-harfbuzz.patch
  * chromium-94-ffmpeg-roll.patch
  * chromium-94-compiler.patch
- Removed patches:
  * chromium-freetype-2.11.patch
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-91-compiler.patch
  * chromium-glibc-2.33.patch
  * chromium-shim_headers.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633694400">- Chromium 94.0.4606.81 (boo#1191463):
  * CVE-2021-37977: Use after free in Garbage Collection
  * CVE-2021-37978: Heap buffer overflow in Blink
  * CVE-2021-37979: Heap buffer overflow in WebRTC
  * CVE-2021-37980: Inappropriate implementation in Sandbox
- Re-add after accidental deletion:
  * chromium-93-InkDropHost-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780800">- Add pipewire-do-not-typecheck-the-portal-session_handle.patch:
  fix WebRTC with xdg-desktop-portal 1.10</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780801">- Disable DCHECK(): that's for debug only</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1634385600">- Remove Python 2 requirement</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1635076800">- Chromium 95.0.4638.54 (boo#1191844):
  * CVE-2021-37981: Heap buffer overflow in Skia
  * CVE-2021-37982: Use after free in Incognito
  * CVE-2021-37983: Use after free in Dev Tools
  * CVE-2021-37984: Heap buffer overflow in PDFium
  * CVE-2021-37985: Use after free in V8
  * CVE-2021-37986: Heap buffer overflow in Settings
  * CVE-2021-37987: Use after free in Network APIs
  * CVE-2021-37988: Use after free in Profiles
  * CVE-2021-37989: Inappropriate implementation in Blink
  * CVE-2021-37990: Inappropriate implementation in WebView
  * CVE-2021-37991: Race in V8
  * CVE-2021-37992: Out of bounds read in WebAudio
  * CVE-2021-37993: Use after free in PDF Accessibility
  * CVE-2021-37996: Insufficient validation of untrusted input in Downloads
  * CVE-2021-37994: Inappropriate implementation in iFrame Sandbox
  * CVE-2021-37995: Inappropriate implementation in WebApp Installer
- Added patches:
  * chromium-95-BitstreamReader-namespace.patch
  * chromium-95-compiler.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-quiche-include.patch
  * chromium-95-system-zlib.patch
- Removed patches:
  * chromium-94-compiler.patch
  * chromium-91-libyuv-aarch64.patch
  * chromium-90-ruy-include.patch
  * chromium-94-CustomSpaces-include.patch</changelog>
</package>
<package pkgid="41cab9374d280d710630903e9af77e71d637d61fad6b972633c95652ed71093f" name="chromium" arch="src">
  <version epoch="0" ver="95.0.4638.69" rel="lp152.2.138.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630238400">- Updated chromium-glibc-2.34.patch: Fix PTHREAD_STACK_MIN errors
  with glibc 2.34</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631707200">- Chromium 93.0.4577.63 (boo#1190096):
  * CVE-2021-30606: Use after free in Blink
  * CVE-2021-30607: Use after free in Permissions
  * CVE-2021-30608: Use after free in Web Share
  * CVE-2021-30609: Use after free in Sign-In
  * CVE-2021-30610: Use after free in Extensions API
  * CVE-2021-30611: Use after free in WebRTC
  * CVE-2021-30612: Use after free in WebRTC
  * CVE-2021-30613: Use after free in Base internals
  * CVE-2021-30614: Heap buffer overflow in TabStrip
  * CVE-2021-30615: Cross-origin data leak in Navigation
  * CVE-2021-30616: Use after free in Media
  * CVE-2021-30617: Policy bypass in Blink
  * CVE-2021-30618: Inappropriate implementation in DevTools
  * CVE-2021-30619: UI Spoofing in Autofill
  * CVE-2021-30620: Insufficient policy enforcement in Blink
  * CVE-2021-30621: UI Spoofing in Autofill
  * CVE-2021-30622: Use after free in WebApp Installs
  * CVE-2021-30623: Use after free in Bookmarks
  * CVE-2021-30624: Use after free in Autofill
- Chromium 93.0.4577.82 (boo#1190476):
  * CVE-2021-30625: Use after free in Selection API
  * CVE-2021-30626: Out of bounds memory access in ANGLE
  * CVE-2021-30627: Type Confusion in Blink layout
  * CVE-2021-30628: Stack buffer overflow in ANGLE
  * CVE-2021-30629: Use after free in Permissions
  * CVE-2021-30630: Inappropriate implementation in Blink
  * CVE-2021-30631: Type Confusion in Blink layout
  * CVE-2021-30632: Out of bounds write in V8
  * CVE-2021-30633: Use after free in Indexed DB API
- Removed patches:
  * chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
  * chromium-92-v8-constexpr.patch
  * chromium-no-writeprotection.patch
  * chromium-92-EnumTable-crash.patch
- Added patches:
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-93-ffmpeg-4.4.patch
  * chromium-93-EnumTable-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631966400">- Add patch to fix Leap 15.2 build:
  * chromium-ffmpeg-lp152.patch
- Change system-libdrm.patch: add to unbundle instead of changing
  header path</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633262400">- Chromium 94.0.4606.54 (boo#1190765):
  * CVE-2021-37956: Use after free in Offline use
  * CVE-2021-37957: Use after free in WebGPU
  * CVE-2021-37958: Inappropriate implementation in Navigation
  * CVE-2021-37959: Use after free in Task Manager
  * CVE-2021-37960: Inappropriate implementation in Blink graphics
  * CVE-2021-37961: Use after free in Tab Strip
  * CVE-2021-37962: Use after free in Performance Manager
  * CVE-2021-37963: Side-channel information leakage in DevTools
  * CVE-2021-37964: Inappropriate implementation in ChromeOS Networking
  * CVE-2021-37965: Inappropriate implementation in Background Fetch API
  * CVE-2021-37966: Inappropriate implementation in Compositing
  * CVE-2021-37967: Inappropriate implementation in Background Fetch API
  * CVE-2021-37968: Inappropriate implementation in Background Fetch API
  * CVE-2021-37969: Inappropriate implementation in Google Updater
  * CVE-2021-37970: Use after free in File System API
  * CVE-2021-37971: Incorrect security UI in Web Browser UI
  * CVE-2021-37972: Out of bounds read in libjpeg-turbo
- Chromium 94.0.4606.61 (boo#1191166):
  * CVE-2021-37973: Use after free in Portals
- Chromium 94.0.4606.71 (boo#1191204):
  * CVE-2021-37974 : Use after free in Safe Browsing
  * CVE-2021-37975 : Use after free in V8
  * CVE-2021-37976 : Information leak in core
- Added patches:
  * chromium-94-CustomSpaces-include.patch
  * chromium-94-sql-no-assert.patch
  * chromium-older-harfbuzz.patch
  * chromium-94-ffmpeg-roll.patch
  * chromium-94-compiler.patch
- Removed patches:
  * chromium-freetype-2.11.patch
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-91-compiler.patch
  * chromium-glibc-2.33.patch
  * chromium-shim_headers.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633694400">- Chromium 94.0.4606.81 (boo#1191463):
  * CVE-2021-37977: Use after free in Garbage Collection
  * CVE-2021-37978: Heap buffer overflow in Blink
  * CVE-2021-37979: Heap buffer overflow in WebRTC
  * CVE-2021-37980: Inappropriate implementation in Sandbox
- Re-add after accidental deletion:
  * chromium-93-InkDropHost-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780800">- Add pipewire-do-not-typecheck-the-portal-session_handle.patch:
  fix WebRTC with xdg-desktop-portal 1.10</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780801">- Disable DCHECK(): that's for debug only</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1634385600">- Remove Python 2 requirement</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1635076800">- Chromium 95.0.4638.54 (boo#1191844):
  * CVE-2021-37981: Heap buffer overflow in Skia
  * CVE-2021-37982: Use after free in Incognito
  * CVE-2021-37983: Use after free in Dev Tools
  * CVE-2021-37984: Heap buffer overflow in PDFium
  * CVE-2021-37985: Use after free in V8
  * CVE-2021-37986: Heap buffer overflow in Settings
  * CVE-2021-37987: Use after free in Network APIs
  * CVE-2021-37988: Use after free in Profiles
  * CVE-2021-37989: Inappropriate implementation in Blink
  * CVE-2021-37990: Inappropriate implementation in WebView
  * CVE-2021-37991: Race in V8
  * CVE-2021-37992: Out of bounds read in WebAudio
  * CVE-2021-37993: Use after free in PDF Accessibility
  * CVE-2021-37996: Insufficient validation of untrusted input in Downloads
  * CVE-2021-37994: Inappropriate implementation in iFrame Sandbox
  * CVE-2021-37995: Inappropriate implementation in WebApp Installer
- Added patches:
  * chromium-95-BitstreamReader-namespace.patch
  * chromium-95-compiler.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-quiche-include.patch
  * chromium-95-system-zlib.patch
- Removed patches:
  * chromium-94-compiler.patch
  * chromium-91-libyuv-aarch64.patch
  * chromium-90-ruy-include.patch
  * chromium-94-CustomSpaces-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635681600">- Chromium 95.0.4638.69 (boo#1192184):
  * CVE-2021-37997: Use after free in Sign-In
  * CVE-2021-37998: Use after free in Garbage Collection
  * CVE-2021-37999: Insufficient data validation in New Tab Page
  * CVE-2021-38000: Insufficient validation of untrusted input in Intents
  * CVE-2021-38001: Type Confusion in V8
  * CVE-2021-38002: Use after free in Web Transport
  * CVE-2021-38003: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="73112cdc94f34600578c028abdc81620f767656ee43a5f0cee9cb91ac46edefe" name="chromium" arch="x86_64">
  <version epoch="0" ver="95.0.4638.69" rel="lp152.2.138.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623240000">- Chromium 91.0.4472.101 (boo#1187141)
  * CVE-2021-30544: Use after free in BFCache
  * CVE-2021-30545: Use after free in Extensions
  * CVE-2021-30546: Use after free in Autofill
  * CVE-2021-30547: Out of bounds write in ANGLE
  * CVE-2021-30548: Use after free in Loader
  * CVE-2021-30549: Use after free in Spell check
  * CVE-2021-30550: Use after free in Accessibility
  * CVE-2021-30551: Type Confusion in V8
  * CVE-2021-30552: Use after free in Extensions
  * CVE-2021-30553: Use after free in Network service
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- Chromium 91.0.4472.106
  * Fix use-after-free in SendTabToSelfSubMenuModel
  * Destroy system-token NSSCertDatabase on the IO thread</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624017600">- Chromium 91.0.4472.114 (boo#1187481)
  * CVE-2021-30554: Use after free in WebGL
  * CVE-2021-30555: Use after free in Sharing
  * CVE-2021-30556: Use after free in WebAudio
  * CVE-2021-30557: Use after free in TabGroups</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1624276800">- fix crash upon exit boo#1186948
  add chromium-91-1190561-boo1186948.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1625486400">- Add chromium-91-sql-standard-layout-type.patch: to fix SQL being
  incorrect with libstdc++ 11</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626523200">- chromium 91.0.4472.164 (boo#1188373)
  * CVE-2021-30559: Out of bounds write in ANGLE
  * CVE-2021-30541: Use after free in V8
  * CVE-2021-30560: Use after free in Blink XSLT
  * CVE-2021-30561: Type Confusion in V8
  * CVE-2021-30562: Use after free in WebSerial
  * CVE-2021-30563: Type Confusion in V8
  * CVE-2021-30564: Heap buffer overflow in WebXR
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1627819200">- Chromium 92.0.4515.107 (boo#1188590)
  * CVE-2021-30565: Out of bounds write in Tab Groups
  * CVE-2021-30566: Stack buffer overflow in Printing
  * CVE-2021-30567: Use after free in DevTools
  * CVE-2021-30568: Heap buffer overflow in WebGL
  * CVE-2021-30569: Use after free in sqlite
  * CVE-2021-30571: Insufficient policy enforcement in DevTools
  * CVE-2021-30572: Use after free in Autofill
  * CVE-2021-30573: Use after free in GPU
  * CVE-2021-30574: Use after free in protocol handling
  * CVE-2021-30575: Out of bounds read in Autofill
  * CVE-2021-30576: Use after free in DevTools
  * CVE-2021-30577: Insufficient policy enforcement in Installer
  * CVE-2021-30578: Uninitialized Use in Media
  * CVE-2021-30579: Use after free in UI framework
  * CVE-2021-30581: Use after free in DevTools
  * CVE-2021-30582: Inappropriate implementation in Animation
  * CVE-2021-30584: Incorrect security UI in Downloads
  * CVE-2021-30585: Use after free in sensor handling
  * CVE-2021-30588: Type Confusion in V8
  * CVE-2021-30589: Insufficient validation of untrusted input in Sharing
- Switched from GCC+LTO to Clang+ThinLTO due to errors
- Removed patches:
  * chromium-90-compiler.patch
  * chromium-89-EnumTable-crash.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-lp152-missing-includes.patch
  * chromium-91-GCC_fix_vector_types_in_pcscan.patch
  * chromium-91-system-icu.patch
  * chromium-91-1190561-boo1186948.patch
- Added patches:
  * chromium-91-compiler.patch
  * chromium-92-EnumTable-crash.patch
  * chromium-92-v8-constexpr.patch
  * chromium-92-GetUsableSize-nullptr.patch
  * chromium-freetype-2.11.patch
  * chromium-clang-nomerge.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1628251200">- Chromium 92.0.4515.131 (boo#1189006)
  * CVE-2021-30590: Heap buffer overflow in Bookmarks
  * CVE-2021-30591: Use after free in File System API
  * CVE-2021-30592: Out of bounds write in Tab Groups
  * CVE-2021-30593: Out of bounds read in Tab Strip
  * CVE-2021-30594: Use after free in Page Info UI
  * CVE-2021-30596: Incorrect security UI in Navigation
  * CVE-2021-30597: Use after free in Browser UI
- Removed patches:
  * chromium-92-GetUsableSize-nullptr.patch
- Added patches:
  * chromium-no-writeprotection.patch
  * chromium-glibc-2.34.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1629028800">- Add missing crashpad_handler (boo#1189254)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629201600">- Chromium 92.0.4515.159 (boo#1189490):
  * CVE-2021-30598: Type Confusion in V8
  * CVE-2021-30599: Type Confusion in V8
  * CVE-2021-30600: Use after free in Printing
  * CVE-2021-30601: Use after free in Extensions API
  * CVE-2021-30602: Use after free in WebRTC
  * CVE-2021-30603: Race in WebAudio
  * CVE-2021-30604: Use after free in ANGLE
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630238400">- Updated chromium-glibc-2.34.patch: Fix PTHREAD_STACK_MIN errors
  with glibc 2.34</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631707200">- Chromium 93.0.4577.63 (boo#1190096):
  * CVE-2021-30606: Use after free in Blink
  * CVE-2021-30607: Use after free in Permissions
  * CVE-2021-30608: Use after free in Web Share
  * CVE-2021-30609: Use after free in Sign-In
  * CVE-2021-30610: Use after free in Extensions API
  * CVE-2021-30611: Use after free in WebRTC
  * CVE-2021-30612: Use after free in WebRTC
  * CVE-2021-30613: Use after free in Base internals
  * CVE-2021-30614: Heap buffer overflow in TabStrip
  * CVE-2021-30615: Cross-origin data leak in Navigation
  * CVE-2021-30616: Use after free in Media
  * CVE-2021-30617: Policy bypass in Blink
  * CVE-2021-30618: Inappropriate implementation in DevTools
  * CVE-2021-30619: UI Spoofing in Autofill
  * CVE-2021-30620: Insufficient policy enforcement in Blink
  * CVE-2021-30621: UI Spoofing in Autofill
  * CVE-2021-30622: Use after free in WebApp Installs
  * CVE-2021-30623: Use after free in Bookmarks
  * CVE-2021-30624: Use after free in Autofill
- Chromium 93.0.4577.82 (boo#1190476):
  * CVE-2021-30625: Use after free in Selection API
  * CVE-2021-30626: Out of bounds memory access in ANGLE
  * CVE-2021-30627: Type Confusion in Blink layout
  * CVE-2021-30628: Stack buffer overflow in ANGLE
  * CVE-2021-30629: Use after free in Permissions
  * CVE-2021-30630: Inappropriate implementation in Blink
  * CVE-2021-30631: Type Confusion in Blink layout
  * CVE-2021-30632: Out of bounds write in V8
  * CVE-2021-30633: Use after free in Indexed DB API
- Removed patches:
  * chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
  * chromium-92-v8-constexpr.patch
  * chromium-no-writeprotection.patch
  * chromium-92-EnumTable-crash.patch
- Added patches:
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-93-ffmpeg-4.4.patch
  * chromium-93-EnumTable-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631966400">- Add patch to fix Leap 15.2 build:
  * chromium-ffmpeg-lp152.patch
- Change system-libdrm.patch: add to unbundle instead of changing
  header path</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633262400">- Chromium 94.0.4606.54 (boo#1190765):
  * CVE-2021-37956: Use after free in Offline use
  * CVE-2021-37957: Use after free in WebGPU
  * CVE-2021-37958: Inappropriate implementation in Navigation
  * CVE-2021-37959: Use after free in Task Manager
  * CVE-2021-37960: Inappropriate implementation in Blink graphics
  * CVE-2021-37961: Use after free in Tab Strip
  * CVE-2021-37962: Use after free in Performance Manager
  * CVE-2021-37963: Side-channel information leakage in DevTools
  * CVE-2021-37964: Inappropriate implementation in ChromeOS Networking
  * CVE-2021-37965: Inappropriate implementation in Background Fetch API
  * CVE-2021-37966: Inappropriate implementation in Compositing
  * CVE-2021-37967: Inappropriate implementation in Background Fetch API
  * CVE-2021-37968: Inappropriate implementation in Background Fetch API
  * CVE-2021-37969: Inappropriate implementation in Google Updater
  * CVE-2021-37970: Use after free in File System API
  * CVE-2021-37971: Incorrect security UI in Web Browser UI
  * CVE-2021-37972: Out of bounds read in libjpeg-turbo
- Chromium 94.0.4606.61 (boo#1191166):
  * CVE-2021-37973: Use after free in Portals
- Chromium 94.0.4606.71 (boo#1191204):
  * CVE-2021-37974 : Use after free in Safe Browsing
  * CVE-2021-37975 : Use after free in V8
  * CVE-2021-37976 : Information leak in core
- Added patches:
  * chromium-94-CustomSpaces-include.patch
  * chromium-94-sql-no-assert.patch
  * chromium-older-harfbuzz.patch
  * chromium-94-ffmpeg-roll.patch
  * chromium-94-compiler.patch
- Removed patches:
  * chromium-freetype-2.11.patch
  * chromium-93-ContextSet-permissive.patch
  * chromium-93-ClassProperty-include.patch
  * chromium-93-BluetoothLowEnergyScanFilter-include.patch
  * chromium-93-HashPasswordManager-include.patch
  * chromium-93-pdfium-include.patch
  * chromium-93-DevToolsEmbedderMessageDispatcher-include.patch
  * chromium-93-FormForest-constexpr.patch
  * chromium-93-ScopedTestDialogAutoConfirm-include.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-91-compiler.patch
  * chromium-glibc-2.33.patch
  * chromium-shim_headers.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633694400">- Chromium 94.0.4606.81 (boo#1191463):
  * CVE-2021-37977: Use after free in Garbage Collection
  * CVE-2021-37978: Heap buffer overflow in Blink
  * CVE-2021-37979: Heap buffer overflow in WebRTC
  * CVE-2021-37980: Inappropriate implementation in Sandbox
- Re-add after accidental deletion:
  * chromium-93-InkDropHost-crash.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780800">- Add pipewire-do-not-typecheck-the-portal-session_handle.patch:
  fix WebRTC with xdg-desktop-portal 1.10</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1633780801">- Disable DCHECK(): that's for debug only</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1634385600">- Remove Python 2 requirement</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1635076800">- Chromium 95.0.4638.54 (boo#1191844):
  * CVE-2021-37981: Heap buffer overflow in Skia
  * CVE-2021-37982: Use after free in Incognito
  * CVE-2021-37983: Use after free in Dev Tools
  * CVE-2021-37984: Heap buffer overflow in PDFium
  * CVE-2021-37985: Use after free in V8
  * CVE-2021-37986: Heap buffer overflow in Settings
  * CVE-2021-37987: Use after free in Network APIs
  * CVE-2021-37988: Use after free in Profiles
  * CVE-2021-37989: Inappropriate implementation in Blink
  * CVE-2021-37990: Inappropriate implementation in WebView
  * CVE-2021-37991: Race in V8
  * CVE-2021-37992: Out of bounds read in WebAudio
  * CVE-2021-37993: Use after free in PDF Accessibility
  * CVE-2021-37996: Insufficient validation of untrusted input in Downloads
  * CVE-2021-37994: Inappropriate implementation in iFrame Sandbox
  * CVE-2021-37995: Inappropriate implementation in WebApp Installer
- Added patches:
  * chromium-95-BitstreamReader-namespace.patch
  * chromium-95-compiler.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-quiche-include.patch
  * chromium-95-system-zlib.patch
- Removed patches:
  * chromium-94-compiler.patch
  * chromium-91-libyuv-aarch64.patch
  * chromium-90-ruy-include.patch
  * chromium-94-CustomSpaces-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635681600">- Chromium 95.0.4638.69 (boo#1192184):
  * CVE-2021-37997: Use after free in Sign-In
  * CVE-2021-37998: Use after free in Garbage Collection
  * CVE-2021-37999: Insufficient data validation in New Tab Page
  * CVE-2021-38000: Insufficient validation of untrusted input in Intents
  * CVE-2021-38001: Type Confusion in V8
  * CVE-2021-38002: Use after free in Web Transport
  * CVE-2021-38003: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="52d1aff0ce113d3740b507ca838a670d53dc51d464635c39a2c499d6d1de6d92" name="chrony" arch="i586">
  <version epoch="0" ver="3.2" rel="lp152.13.3.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="3b0b16649e0f464111f8faf0aa8f879aac81f6bab1fa83fda77820621319258d" name="chrony" arch="src">
  <version epoch="0" ver="3.2" rel="lp152.13.3.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="52c8bee38590f6382700c5f90e9c7799da4336610f01dcc2157c66e62a088c30" name="chrony" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp152.13.3.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="253dbaa4a2f06336ea3adff2a7907e989e91cfc5a66de1b663e1427cbe2bcf15" name="chrony" arch="i586">
  <version epoch="0" ver="3.2" rel="lp152.13.6.1"/>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617883200">- boo#1162964, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
</package>
<package pkgid="4f31b5242ed3b6ec1912fa8022ef2da5b7bcbf4e26d3d22c8cee2a834b450322" name="chrony" arch="src">
  <version epoch="0" ver="3.2" rel="lp152.13.6.1"/>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617883200">- boo#1162964, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
</package>
<package pkgid="32d9fa70cfd154195fc86ff58ff0c7514901853fe9649f54e1a91ec406e3504f" name="chrony" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp152.13.6.1"/>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617883200">- boo#1162964, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
</package>
<package pkgid="1a8aa77beda886f79088b0fe97bc30eb8655062a7d776d4009d9c26c54100196" name="chrony" arch="i586">
  <version epoch="0" ver="3.2" rel="lp152.13.9.1"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="fd0d202e7ef103fc724fb8c35a26a03305a3a147dfb04e71d41e5cdf6e3a5f84" name="chrony" arch="src">
  <version epoch="0" ver="3.2" rel="lp152.13.9.1"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="10ecdeffde841b7faa5fb67e6f9d15f31b4d136f451df7eecb46b6106893886c" name="chrony" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp152.13.9.1"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="38b6dbe4d0a82ee385d8d9fb3fe867219ed7dc0ecd8c985cf5eae4d34ad0e5a3" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp152.13.3.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="ebf1ecd8014ed4a1c257a1a2ca9773b52e7b240c504f1492c5002b575d44a964" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp152.13.6.1"/>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617883200">- boo#1162964, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
</package>
<package pkgid="b669e4f23f87b1d6a5e6aa55c30a830b04ba3755a31e767f35d42dbdaa10feb0" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp152.13.9.1"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="abfc6625fde798c4838c732f0e853fe5cb52afbccb2428f541c1b248752fb2a9" name="chrony-pool-openSUSE" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp152.13.3.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="69d982670f7356c9ef977a4fdf0f347ccaf5833cc1001bcbf4f03c1190da88e0" name="chrony-pool-openSUSE" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp152.13.6.1"/>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617883200">- boo#1162964, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
</package>
<package pkgid="7bdee887b516aec7a0f5a8329d36052590ee85ad1b4452a10a0d6aa1bf687ab7" name="chrony-pool-openSUSE" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp152.13.9.1"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="68a710c3006dce4c655b46ea272a57a6154a889432a3a5f27e2c662a2023dd9f" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp152.13.3.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="2298346b16a4040fa346a1837bcd278520f5934d650fc6a28694b3047938beac" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp152.13.6.1"/>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617883200">- boo#1162964, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
</package>
<package pkgid="f713df11787c0c1fb442760af2bcf0ed79b4ab92815a904dc05eb8041541481e" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="3.2" rel="lp152.13.9.1"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="63f99c2f232131eb45226c2e6398d2a5c254849e3e432fb9660ac7ddd59701a5" name="cifs-utils" arch="i586">
  <version epoch="0" ver="6.9" rel="lp152.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0014-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="palcantara@suse.de" date="1619438400">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0015-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
</package>
<package pkgid="ad655e4894d7493b7b2c0c1b1d324255a50caa5f2800d247fc560a5a8a9ecbe4" name="cifs-utils" arch="src">
  <version epoch="0" ver="6.9" rel="lp152.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0014-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="palcantara@suse.de" date="1619438400">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0015-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
</package>
<package pkgid="502f60d9540faa1ac82cb0a0f0e3bcea3799d0130e59cd1cdcb3ed6678fe16fa" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="6.9" rel="lp152.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0014-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="palcantara@suse.de" date="1619438400">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0015-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
</package>
<package pkgid="f5c3c4f771a780d42da7bab84c7589ad1992367e5c6087c19564e8f9ee11432b" name="cifs-utils-devel" arch="i586">
  <version epoch="0" ver="6.9" rel="lp152.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0014-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="palcantara@suse.de" date="1619438400">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0015-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
</package>
<package pkgid="b81072c3d5217529abb1e7d535768fb2a92179e047fe5f23c2500b0ad5108350" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.9" rel="lp152.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0014-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="palcantara@suse.de" date="1619438400">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0015-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
</package>
<package pkgid="09904fc4b94c7c6cf83beb902fc26ccae24982b42543506c8bb8236264e016e4" name="civetweb" arch="src">
  <version epoch="0" ver="1.15" rel="lp152.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545480000">- Initial build at version 1.11.
  Thanks to malcolmlewis for helping with the specfile</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add fix-libpath.patch to fix library install directory</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1594382400">- version 1.12
  * fix-libpath.patch removed
  * See https://github.com/civetweb/civetweb/releases/tag/v1.12 for detailed changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604491200">- version 1.13
  * Add arguments for CGI interpreters
  * Support multiple CGi interpreters
  * Buffering HTTP response headers, including API functions mg_response_header_* in C and Lua
  * Additional C API functions
  * Fix some memory leaks
  * Extended use of atomic operations (e.g., for server stats)
  * Add fuzz tests
  * Set OpenSSL 1.1 API as default (from 1.0)
  * Add Lua 5.4 support and deprecate Lua 5.1
  * Provide additional Lua API functions
  * Fix Lua websocket memory leak when closing the server
  * Remove obsolete "file in memory" implementation
  * Improvements and fixes in documentation
  * Fixes from static source code analysis
  * Additional unit tests
  * Various small bug fixes
  * Experimental support for some HTTP2 features (not ready for production)
  * Experimental support for websocket compression
  * Remove legacy interfaces declared obsolete since more than 3 years</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.14
  * Change SSL default setting to use TLS 1.2 as minimum (set config if you need an earlier version)
  * Add local_uri_raw field (not sanitized URI) to request_info
  * Additional API functions and a callback after closing connections
  * Allow mbedTLS as OpenSSL alternative (basic functionality)
  * Add OpenSSL 3.0 support (OpenSSL 3.0 Alpha 13)
  * Support UNIX/Linux domain sockets
  * Fuzz tests and ossfuzz integration
  * Compression for websockets
  * Restructure some source files
  * Improve documentation
  * Fix HTTP range requests
  * Add some functions for Lua scripts/LSP
  * Build system specific fixes (CMake, MinGW)
  * Update 3rd party components (Lua, lfs, sqlite)
  * Allow Lua background script to use timers, format and filter logs
  * Remove WinCE code
  * Update version number</changelog>
  <changelog author="Perry Werneck &lt;perry.werneck@gmail.com&gt;" date="1620648000">- Enabling cmake control file and cpp library.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634904000">- version 1.15
  * Security update boo#1191938
  * New configuration for URL decoding
  * Sanitize filenames in handle form
  * Example ?embedded_c.c?: Do not overwrite files (possible security issue)
  * Remove obsolete examples
  * Remove ?experimental? label for some features
  * Remove MG_LEGACY_INTERFACE that have been declared obsolete in 2017 or earlier
  * Modifications to build scripts, required due to changes in the test environment
  * Unix domain socket support fixed
  * Fixes for NO_SSL_DL
  * Fixes for some warnings / static code analysis</changelog>
</package>
<package pkgid="b0e0d1d527026175683eba73bd3c985eb9a3958eda74ad9dad64deaa66bb84fa" name="civetweb" arch="x86_64">
  <version epoch="0" ver="1.15" rel="lp152.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545480000">- Initial build at version 1.11.
  Thanks to malcolmlewis for helping with the specfile</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add fix-libpath.patch to fix library install directory</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1594382400">- version 1.12
  * fix-libpath.patch removed
  * See https://github.com/civetweb/civetweb/releases/tag/v1.12 for detailed changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604491200">- version 1.13
  * Add arguments for CGI interpreters
  * Support multiple CGi interpreters
  * Buffering HTTP response headers, including API functions mg_response_header_* in C and Lua
  * Additional C API functions
  * Fix some memory leaks
  * Extended use of atomic operations (e.g., for server stats)
  * Add fuzz tests
  * Set OpenSSL 1.1 API as default (from 1.0)
  * Add Lua 5.4 support and deprecate Lua 5.1
  * Provide additional Lua API functions
  * Fix Lua websocket memory leak when closing the server
  * Remove obsolete "file in memory" implementation
  * Improvements and fixes in documentation
  * Fixes from static source code analysis
  * Additional unit tests
  * Various small bug fixes
  * Experimental support for some HTTP2 features (not ready for production)
  * Experimental support for websocket compression
  * Remove legacy interfaces declared obsolete since more than 3 years</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.14
  * Change SSL default setting to use TLS 1.2 as minimum (set config if you need an earlier version)
  * Add local_uri_raw field (not sanitized URI) to request_info
  * Additional API functions and a callback after closing connections
  * Allow mbedTLS as OpenSSL alternative (basic functionality)
  * Add OpenSSL 3.0 support (OpenSSL 3.0 Alpha 13)
  * Support UNIX/Linux domain sockets
  * Fuzz tests and ossfuzz integration
  * Compression for websockets
  * Restructure some source files
  * Improve documentation
  * Fix HTTP range requests
  * Add some functions for Lua scripts/LSP
  * Build system specific fixes (CMake, MinGW)
  * Update 3rd party components (Lua, lfs, sqlite)
  * Allow Lua background script to use timers, format and filter logs
  * Remove WinCE code
  * Update version number</changelog>
  <changelog author="Perry Werneck &lt;perry.werneck@gmail.com&gt;" date="1620648000">- Enabling cmake control file and cpp library.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634904000">- version 1.15
  * Security update boo#1191938
  * New configuration for URL decoding
  * Sanitize filenames in handle form
  * Example ?embedded_c.c?: Do not overwrite files (possible security issue)
  * Remove obsolete examples
  * Remove ?experimental? label for some features
  * Remove MG_LEGACY_INTERFACE that have been declared obsolete in 2017 or earlier
  * Modifications to build scripts, required due to changes in the test environment
  * Unix domain socket support fixed
  * Fixes for NO_SSL_DL
  * Fixes for some warnings / static code analysis</changelog>
</package>
<package pkgid="dcdc858ab2bf1670cfc468a96240fa8cfc12f5e10c987d166c0c9d905949b9a3" name="civetweb-devel" arch="x86_64">
  <version epoch="0" ver="1.15" rel="lp152.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1545480000">- Initial build at version 1.11.
  Thanks to malcolmlewis for helping with the specfile</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add fix-libpath.patch to fix library install directory</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1594382400">- version 1.12
  * fix-libpath.patch removed
  * See https://github.com/civetweb/civetweb/releases/tag/v1.12 for detailed changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604491200">- version 1.13
  * Add arguments for CGI interpreters
  * Support multiple CGi interpreters
  * Buffering HTTP response headers, including API functions mg_response_header_* in C and Lua
  * Additional C API functions
  * Fix some memory leaks
  * Extended use of atomic operations (e.g., for server stats)
  * Add fuzz tests
  * Set OpenSSL 1.1 API as default (from 1.0)
  * Add Lua 5.4 support and deprecate Lua 5.1
  * Provide additional Lua API functions
  * Fix Lua websocket memory leak when closing the server
  * Remove obsolete "file in memory" implementation
  * Improvements and fixes in documentation
  * Fixes from static source code analysis
  * Additional unit tests
  * Various small bug fixes
  * Experimental support for some HTTP2 features (not ready for production)
  * Experimental support for websocket compression
  * Remove legacy interfaces declared obsolete since more than 3 years</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.14
  * Change SSL default setting to use TLS 1.2 as minimum (set config if you need an earlier version)
  * Add local_uri_raw field (not sanitized URI) to request_info
  * Additional API functions and a callback after closing connections
  * Allow mbedTLS as OpenSSL alternative (basic functionality)
  * Add OpenSSL 3.0 support (OpenSSL 3.0 Alpha 13)
  * Support UNIX/Linux domain sockets
  * Fuzz tests and ossfuzz integration
  * Compression for websockets
  * Restructure some source files
  * Improve documentation
  * Fix HTTP range requests
  * Add some functions for Lua scripts/LSP
  * Build system specific fixes (CMake, MinGW)
  * Update 3rd party components (Lua, lfs, sqlite)
  * Allow Lua background script to use timers, format and filter logs
  * Remove WinCE code
  * Update version number</changelog>
  <changelog author="Perry Werneck &lt;perry.werneck@gmail.com&gt;" date="1620648000">- Enabling cmake control file and cpp library.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1634904000">- version 1.15
  * Security update boo#1191938
  * New configuration for URL decoding
  * Sanitize filenames in handle form
  * Example ?embedded_c.c?: Do not overwrite files (possible security issue)
  * Remove obsolete examples
  * Remove ?experimental? label for some features
  * Remove MG_LEGACY_INTERFACE that have been declared obsolete in 2017 or earlier
  * Modifications to build scripts, required due to changes in the test environment
  * Unix domain socket support fixed
  * Fixes for NO_SSL_DL
  * Fixes for some warnings / static code analysis</changelog>
</package>
<package pkgid="7e8c30a1afaf5be402e467aadc6b92da044c22306859d0d2a6244ab143dc187c" name="clamav" arch="src">
  <version epoch="0" ver="0.103.0" rel="lp152.6.3.1"/>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
</package>
<package pkgid="e9bcd82388c9045c037d1b07ac42c6f215d868a776206b1413f96285aaa2d059" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.103.0" rel="lp152.6.3.1"/>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
</package>
<package pkgid="63258b255a6cef379f1f48f51c0e7c7c2bd73ae1f046ce1878e5167faaf9bd19" name="clamav" arch="src">
  <version epoch="0" ver="0.103.2" rel="lp152.6.6.1"/>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
</package>
<package pkgid="e8d9000df7d70fc40bbc7f39c7819699ab971018806d23b2cb0fe287176df934" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.103.2" rel="lp152.6.6.1"/>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
</package>
<package pkgid="245c13179a0ed2d3397986b7f4d4eb65c5133c56bf17c2bc8f63721cd0f5b7ee" name="clamav" arch="src">
  <version epoch="0" ver="0.103.2" rel="lp152.6.9.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="4084fc9ff0931f9128a1c9677711fd238af8fbf8a3d82896245b740922864ed5" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.103.2" rel="lp152.6.9.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="04cd8617c85b62bedc21308bfef9cae1ae716f831e3b4d471991feed1ee242d6" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.103.0" rel="lp152.6.3.1"/>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
</package>
<package pkgid="454f393cd6afdec2b74b5ae85a68e865268d5e9a391fca4562a1acb65b91a369" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.103.2" rel="lp152.6.6.1"/>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
</package>
<package pkgid="cc47521299a8b1f75e764f7e5c0ca549cdaab487a01d0892f9d92c5814be3b47" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.103.2" rel="lp152.6.9.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="f338507b3cb5bf3d139ba561fe04104ba727024e71ea1cbda3bc5667fb461e15" name="claws-mail" arch="src">
  <version epoch="0" ver="3.17.6" rel="lp152.3.3.1"/>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
  rules from parent folder' when creating new folders with the
  move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
  addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
  responsive.
  * A warning dialogue is shown if the selected privacy system is
  'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
  enables the Python plugin (which uses python2) to be built on
  newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation (CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
  just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
</package>
<package pkgid="15272a4e926f208906c3ec5cf86ea5b3a532172d4dd7bb76aec48bc1fc112e6d" name="claws-mail" arch="x86_64">
  <version epoch="0" ver="3.17.6" rel="lp152.3.3.1"/>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
  rules from parent folder' when creating new folders with the
  move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
  addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
  responsive.
  * A warning dialogue is shown if the selected privacy system is
  'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
  enables the Python plugin (which uses python2) to be built on
  newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation (CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
  just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
</package>
<package pkgid="01ec076813df28eba670f2d1a21c7817117b72af9bff56e76ee5c09351326f56" name="claws-mail" arch="src">
  <version epoch="0" ver="3.17.8" rel="lp152.3.6.1"/>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
  rules from parent folder' when creating new folders with the
  move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
  addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
  responsive.
  * A warning dialogue is shown if the selected privacy system is
  'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
  enables the Python plugin (which uses python2) to be built on
  newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation (CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
  just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1600344000">- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1601294400">- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
</package>
<package pkgid="e02842d5576a4c298ebabd649fb51b5a0bdbad26a8975c2c3acdfce5b3ab4b56" name="claws-mail" arch="x86_64">
  <version epoch="0" ver="3.17.8" rel="lp152.3.6.1"/>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
  rules from parent folder' when creating new folders with the
  move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
  addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
  responsive.
  * A warning dialogue is shown if the selected privacy system is
  'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
  enables the Python plugin (which uses python2) to be built on
  newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation (CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
  just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1600344000">- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1601294400">- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
</package>
<package pkgid="611d52f9d7bfaf5a11c7179ab2dbb4119ee9ba377c76b13af7d2a26d959df41d" name="claws-mail" arch="src">
  <version epoch="0" ver="3.18.0" rel="lp152.3.9.1"/>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1594641600">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
    rules from parent folder' when creating new folders with the
    move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
    addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
    responsive.
  * A warning dialogue is shown if the selected privacy system is
    'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
    enables the Python plugin (which uses python2) to be built on
    newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
    just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1600344000">- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1601294400">- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1622635200">- added claws-mail-oauth.patch:
  https://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=4339
  new BR: pkgconfig(json-c) and force libeptan to be at least
  version 1.9.4, additionally we need autotools and libtool to
  rebuild the configure script</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1625918400">- Update to 3.18.0
  * Support for the OAuth2 authorisation protocol has been added for
    IMAP, POP and SMTP using custom, user-generated client IDs.
    OAuth2 preferences are found in the Account Preferences on the
    Receive page (for POP: Authenticate before POP connection, for
    IMAP: Authentication method); the Send page (SMTP authentication:
    Authentication method); and on a dedicated OAuth2 page.
  * The option 'Save (X-)Face in address book if possible' has been
    added to the /Message View/Text Options preferences page.
    Previously the (X-)Face would be saved automatically, therefore
    this option is turned on by default.
  * The Image Viewer has been reworked. New options have been added to
    /Message View/Image Viewer: when resizing images, either fit the
    image width or fit the image height to the available space.
    Fitting the image height is the default. Regardless of this
    setting, when displaying images inline they will fit the height.
    When displaying an image, left-clicking the image will toggle
    between full size and reduced size; right-clicking will toggle
    between fitting the height and fitting the width.
  * When re-editing a saved message, it is now possible to use
    /Options/Remove References.
  * It is now possible to attempt to retrieve a missing GPG key via
    WKD.
  * The man page has been updated.
  * Updated translations: Brazilian Portuguese, British English,
    Catalan, Czech, Danish, Dutch, French, Polish, Romanian, Russian,
    Slovak, Spanish, Traditional Chinese, Turkish.
  * bug fixes: claws#2411, claws#4326, claws#4394, claws#4431,
    claws#4445, claws#4447, claws#4455, claws#4473
  - stop WM's X button from causing GPG key fetch attempt
  - Make fancy respect default font size for messageview
  - harden link checker before accepting click
  - non-display of (X-)Face when prefs_common.enable_avatars
    is AVATARS_ENABLE_RENDER (2)
  - debian bug #983778, 'Segfault on selecting empty 'X-Face'
    custom header'
- Drop claws-mail-oauth.patch, OAuth2 authorisation protocol is now
  included
- Drop claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch,
  merged upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626091200">- bump buildrequires to follow version limits in the configure.ac</changelog>
</package>
<package pkgid="2dd7c7d434e16f245d3a92ffb757cad1af14781b4c1eb99833ab691322acf675" name="claws-mail" arch="x86_64">
  <version epoch="0" ver="3.18.0" rel="lp152.3.9.1"/>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1594641600">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
    rules from parent folder' when creating new folders with the
    move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
    addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
    responsive.
  * A warning dialogue is shown if the selected privacy system is
    'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
    enables the Python plugin (which uses python2) to be built on
    newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
    just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1600344000">- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1601294400">- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1622635200">- added claws-mail-oauth.patch:
  https://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=4339
  new BR: pkgconfig(json-c) and force libeptan to be at least
  version 1.9.4, additionally we need autotools and libtool to
  rebuild the configure script</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1625918400">- Update to 3.18.0
  * Support for the OAuth2 authorisation protocol has been added for
    IMAP, POP and SMTP using custom, user-generated client IDs.
    OAuth2 preferences are found in the Account Preferences on the
    Receive page (for POP: Authenticate before POP connection, for
    IMAP: Authentication method); the Send page (SMTP authentication:
    Authentication method); and on a dedicated OAuth2 page.
  * The option 'Save (X-)Face in address book if possible' has been
    added to the /Message View/Text Options preferences page.
    Previously the (X-)Face would be saved automatically, therefore
    this option is turned on by default.
  * The Image Viewer has been reworked. New options have been added to
    /Message View/Image Viewer: when resizing images, either fit the
    image width or fit the image height to the available space.
    Fitting the image height is the default. Regardless of this
    setting, when displaying images inline they will fit the height.
    When displaying an image, left-clicking the image will toggle
    between full size and reduced size; right-clicking will toggle
    between fitting the height and fitting the width.
  * When re-editing a saved message, it is now possible to use
    /Options/Remove References.
  * It is now possible to attempt to retrieve a missing GPG key via
    WKD.
  * The man page has been updated.
  * Updated translations: Brazilian Portuguese, British English,
    Catalan, Czech, Danish, Dutch, French, Polish, Romanian, Russian,
    Slovak, Spanish, Traditional Chinese, Turkish.
  * bug fixes: claws#2411, claws#4326, claws#4394, claws#4431,
    claws#4445, claws#4447, claws#4455, claws#4473
  - stop WM's X button from causing GPG key fetch attempt
  - Make fancy respect default font size for messageview
  - harden link checker before accepting click
  - non-display of (X-)Face when prefs_common.enable_avatars
    is AVATARS_ENABLE_RENDER (2)
  - debian bug #983778, 'Segfault on selecting empty 'X-Face'
    custom header'
- Drop claws-mail-oauth.patch, OAuth2 authorisation protocol is now
  included
- Drop claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch,
  merged upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626091200">- bump buildrequires to follow version limits in the configure.ac</changelog>
</package>
<package pkgid="41f7317a6ed5198e687dad2b921f11f8e4c056eb536639ca6387a85df27285d5" name="claws-mail-devel" arch="x86_64">
  <version epoch="0" ver="3.17.6" rel="lp152.3.3.1"/>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
  rules from parent folder' when creating new folders with the
  move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
  addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
  responsive.
  * A warning dialogue is shown if the selected privacy system is
  'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
  enables the Python plugin (which uses python2) to be built on
  newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation (CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
  just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
</package>
<package pkgid="9ab86969356ec7f02ab9b78e9b2b162364d8e7d88823d7ea32a7840098c05fcf" name="claws-mail-devel" arch="x86_64">
  <version epoch="0" ver="3.17.8" rel="lp152.3.6.1"/>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
  rules from parent folder' when creating new folders with the
  move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
  addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
  responsive.
  * A warning dialogue is shown if the selected privacy system is
  'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
  enables the Python plugin (which uses python2) to be built on
  newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation (CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
  just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1600344000">- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1601294400">- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
</package>
<package pkgid="8b4b776476a0ceff5f0f7afa50dcea619e33a589572ab70ff94fcc0e21788076" name="claws-mail-devel" arch="x86_64">
  <version epoch="0" ver="3.18.0" rel="lp152.3.9.1"/>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1594641600">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
    rules from parent folder' when creating new folders with the
    move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
    addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
    responsive.
  * A warning dialogue is shown if the selected privacy system is
    'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
    enables the Python plugin (which uses python2) to be built on
    newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
    just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1600344000">- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1601294400">- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1622635200">- added claws-mail-oauth.patch:
  https://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=4339
  new BR: pkgconfig(json-c) and force libeptan to be at least
  version 1.9.4, additionally we need autotools and libtool to
  rebuild the configure script</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1625918400">- Update to 3.18.0
  * Support for the OAuth2 authorisation protocol has been added for
    IMAP, POP and SMTP using custom, user-generated client IDs.
    OAuth2 preferences are found in the Account Preferences on the
    Receive page (for POP: Authenticate before POP connection, for
    IMAP: Authentication method); the Send page (SMTP authentication:
    Authentication method); and on a dedicated OAuth2 page.
  * The option 'Save (X-)Face in address book if possible' has been
    added to the /Message View/Text Options preferences page.
    Previously the (X-)Face would be saved automatically, therefore
    this option is turned on by default.
  * The Image Viewer has been reworked. New options have been added to
    /Message View/Image Viewer: when resizing images, either fit the
    image width or fit the image height to the available space.
    Fitting the image height is the default. Regardless of this
    setting, when displaying images inline they will fit the height.
    When displaying an image, left-clicking the image will toggle
    between full size and reduced size; right-clicking will toggle
    between fitting the height and fitting the width.
  * When re-editing a saved message, it is now possible to use
    /Options/Remove References.
  * It is now possible to attempt to retrieve a missing GPG key via
    WKD.
  * The man page has been updated.
  * Updated translations: Brazilian Portuguese, British English,
    Catalan, Czech, Danish, Dutch, French, Polish, Romanian, Russian,
    Slovak, Spanish, Traditional Chinese, Turkish.
  * bug fixes: claws#2411, claws#4326, claws#4394, claws#4431,
    claws#4445, claws#4447, claws#4455, claws#4473
  - stop WM's X button from causing GPG key fetch attempt
  - Make fancy respect default font size for messageview
  - harden link checker before accepting click
  - non-display of (X-)Face when prefs_common.enable_avatars
    is AVATARS_ENABLE_RENDER (2)
  - debian bug #983778, 'Segfault on selecting empty 'X-Face'
    custom header'
- Drop claws-mail-oauth.patch, OAuth2 authorisation protocol is now
  included
- Drop claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch,
  merged upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626091200">- bump buildrequires to follow version limits in the configure.ac</changelog>
</package>
<package pkgid="69f20028db7011b55718c94a3024b194b5f5b2aea648ecf7d7f326e98427ef8a" name="claws-mail-lang" arch="noarch">
  <version epoch="0" ver="3.17.6" rel="lp152.3.3.1"/>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
  rules from parent folder' when creating new folders with the
  move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
  addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
  responsive.
  * A warning dialogue is shown if the selected privacy system is
  'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
  enables the Python plugin (which uses python2) to be built on
  newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation (CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
  just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
</package>
<package pkgid="791066dad6f75c4f19dba70a313db28277b205efaf0802bb2629742f4574ae88" name="claws-mail-lang" arch="noarch">
  <version epoch="0" ver="3.17.8" rel="lp152.3.6.1"/>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
  rules from parent folder' when creating new folders with the
  move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
  addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
  responsive.
  * A warning dialogue is shown if the selected privacy system is
  'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
  enables the Python plugin (which uses python2) to be built on
  newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation (CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
  just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1600344000">- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1601294400">- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
</package>
<package pkgid="e0cebe8a568e1b553c266fbe4a1e101cd05ba705fe308d24a1e6fbd0da5be97e" name="claws-mail-lang" arch="noarch">
  <version epoch="0" ver="3.18.0" rel="lp152.3.9.1"/>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1594641600">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
    rules from parent folder' when creating new folders with the
    move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
    addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
    responsive.
  * A warning dialogue is shown if the selected privacy system is
    'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
    enables the Python plugin (which uses python2) to be built on
    newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
    just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1600344000">- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1601294400">- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1622635200">- added claws-mail-oauth.patch:
  https://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=4339
  new BR: pkgconfig(json-c) and force libeptan to be at least
  version 1.9.4, additionally we need autotools and libtool to
  rebuild the configure script</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1625918400">- Update to 3.18.0
  * Support for the OAuth2 authorisation protocol has been added for
    IMAP, POP and SMTP using custom, user-generated client IDs.
    OAuth2 preferences are found in the Account Preferences on the
    Receive page (for POP: Authenticate before POP connection, for
    IMAP: Authentication method); the Send page (SMTP authentication:
    Authentication method); and on a dedicated OAuth2 page.
  * The option 'Save (X-)Face in address book if possible' has been
    added to the /Message View/Text Options preferences page.
    Previously the (X-)Face would be saved automatically, therefore
    this option is turned on by default.
  * The Image Viewer has been reworked. New options have been added to
    /Message View/Image Viewer: when resizing images, either fit the
    image width or fit the image height to the available space.
    Fitting the image height is the default. Regardless of this
    setting, when displaying images inline they will fit the height.
    When displaying an image, left-clicking the image will toggle
    between full size and reduced size; right-clicking will toggle
    between fitting the height and fitting the width.
  * When re-editing a saved message, it is now possible to use
    /Options/Remove References.
  * It is now possible to attempt to retrieve a missing GPG key via
    WKD.
  * The man page has been updated.
  * Updated translations: Brazilian Portuguese, British English,
    Catalan, Czech, Danish, Dutch, French, Polish, Romanian, Russian,
    Slovak, Spanish, Traditional Chinese, Turkish.
  * bug fixes: claws#2411, claws#4326, claws#4394, claws#4431,
    claws#4445, claws#4447, claws#4455, claws#4473
  - stop WM's X button from causing GPG key fetch attempt
  - Make fancy respect default font size for messageview
  - harden link checker before accepting click
  - non-display of (X-)Face when prefs_common.enable_avatars
    is AVATARS_ENABLE_RENDER (2)
  - debian bug #983778, 'Segfault on selecting empty 'X-Face'
    custom header'
- Drop claws-mail-oauth.patch, OAuth2 authorisation protocol is now
  included
- Drop claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch,
  merged upstream</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1626091200">- bump buildrequires to follow version limits in the configure.ac</changelog>
</package>
<package pkgid="6768399ae43c64eac59e4d02f0d96ba421c91e569509426591e4c52f24de3010" name="clippy" arch="i586">
  <version epoch="0" ver="1.43.1" rel="lp152.3.5.1"/>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-61206-assume-tarball-llvm-is-fresh.patch - Upstream fix to make
  LLVM not be rebuilt during the installation phase.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="8e3616185a6ba462d3970b576a6ccaf66b6ac80234a8dd1e84aaf8e27ee9c8cb" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.43.1" rel="lp152.3.5.1"/>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-61206-assume-tarball-llvm-is-fresh.patch - Upstream fix to make
  LLVM not be rebuilt during the installation phase.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
</package>
<package pkgid="4d9fd29f7526937e354126ff525cece40d2c6135738a3497c998b4392e234925" name="clippy" arch="i586">
  <version epoch="0" ver="1.43.1" rel="lp152.3.8.2"/>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="3c55432ba5360ae593e7889815d18a45dfc29d560ff8e63d5be4f4996744761c" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.43.1" rel="lp152.3.8.2"/>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="d772da792bfa5d301c4d146b0ec26c440cdab8b3586bbbae9c24077bb87acf7a" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="lp152.5.3.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
</package>
<package pkgid="87de46da55332d55fbc48d9d87d4ff93895e33fbd8ffba586c19d736fefe263e" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp152.5.3.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
</package>
<package pkgid="9422d419c1f6d79ce7a7fc0f2f7cbfc616c971da88102b73992a2372a19c7752" name="cloud-init" arch="src">
  <version epoch="0" ver="20.2" rel="lp152.5.12.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
</package>
<package pkgid="f142f98bc33a4da6eca347c881295dcb0da2f818f3583475d239c572bd14af80" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.12.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
</package>
<package pkgid="20e77987bf2f33e2acc7c3e2737c4346909afb6c04c0c1c5e10b133a82577a15" name="cloud-init" arch="src">
  <version epoch="0" ver="20.2" rel="lp152.5.15.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
</package>
<package pkgid="737ef0101d866900cf74d5e6f5ab0ba1ef73244400bc7d58359a1cb1723f19ed" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.15.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
</package>
<package pkgid="406533147c717ee4298a23e656d7e1f6d8812c6b6ad77e1f8e620a43972fdd64" name="cloud-init" arch="src">
  <version epoch="0" ver="20.2" rel="lp152.5.18.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
</package>
<package pkgid="490785bf016c31fe65f69bca4f4ab7c53e7d2d8cf7814933a43a269e345102be" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.18.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
</package>
<package pkgid="7cac9d446f9163991491729254537038900044830d948ee0a4a053104d1b4246" name="cloud-init" arch="src">
  <version epoch="0" ver="20.2" rel="lp152.5.21.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
</package>
<package pkgid="576352cdb9b329d2f22a16ed296e98b5ef7e75f78eb7c378cd9bbb9068e51570" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.21.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
</package>
<package pkgid="63fbca174fde1b26f50413168a63bed29c2d54e018079d6395dfc742998eadee" name="cloud-init" arch="src">
  <version epoch="0" ver="20.2" rel="lp152.5.24.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
</package>
<package pkgid="a67a5e454c8fa0eeb7a7f55efaaa2054efe46252890ecd4618eac0a92d4fe4a2" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.24.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
</package>
<package pkgid="9b826892f7cfe78e56c0bce9b9ff6cbb474a163bad6e774e65d6e041f4a8a06b" name="cloud-init" arch="src">
  <version epoch="0" ver="20.2" rel="lp152.5.6.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
</package>
<package pkgid="b64e8d6a89499bd2564ccb42c49f92fce16e94db08fda2770a74a24b714a1376" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.6.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
</package>
<package pkgid="f26bfd7c40fb5a0bf56685d13320165be8fc1b749ca1281410f4db1ff86fb940" name="cloud-init" arch="src">
  <version epoch="0" ver="20.2" rel="lp152.5.9.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="0b33e0433b1c7c44fc85599405ee384ad3a4d8a2915e26173e94315a031b9b4f" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.9.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="e62046394d34ffcd5a1c13189ba478a0b7e74dcc34e48edb56d52ce8e25bd0ec" name="cloud-init" arch="src">
  <version epoch="0" ver="21.2" rel="lp152.5.27.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Gali?] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Gali?]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Gali?]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Gali?]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Gali?]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Gali?]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Gali?]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wac?aw Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wac?aw Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Gali?]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Gali? (deprecated: Igor Gali?)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Gali? (deprecated: Igor Gali?)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
</package>
<package pkgid="5794e64588ba090020aaeaa7d144bd91a2c290c14af83182dd5f85e370bff5e6" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="21.2" rel="lp152.5.27.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Gali?] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Gali?]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Gali?]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Gali?]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Gali?]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Gali?]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Gali?]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wac?aw Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wac?aw Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Gali?]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Gali? (deprecated: Igor Gali?)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Gali? (deprecated: Igor Gali?)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
</package>
<package pkgid="408a0bd17542e94958388ea9678dbbb410e2164334d298e561c840430040e3c2" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp152.5.3.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
</package>
<package pkgid="2bf74c43bc37f65110f37d2c06acfe53aa0d55a85358e36de3b0c80156bc6b3e" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.12.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
</package>
<package pkgid="aafb3f1eb0fc42d70968b8e1ed55bdf0a64e21e78077b8a94ce2a870474db137" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.15.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
</package>
<package pkgid="6f3c4ba96ee9b40588c7e560647b38e270602bec945407cc4735c60fe581f44b" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.18.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
</package>
<package pkgid="ae12df47d3af8b72e8ea750a6c104dcea5cba2be7d069faa0dd5f6d6258ca4c7" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.21.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
</package>
<package pkgid="ee77fc8d82bca69ba3653de3ac5e905cccbbf14270e3a49afe2c46cff8596bc6" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.24.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
</package>
<package pkgid="d31ecd5a965440c1d40a548b72a6c9df859f6e8c6b0748e7bea2f41d1bb3e945" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.6.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
</package>
<package pkgid="b7b1d53603c3a59c24e81b779fc1452cb13e59071e40cd6082d015f98608e84b" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.9.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="84fc35db87a988450e2060c1e5e82d3a7b2bdf2f5ef3c99622d31700f3e89ea4" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="21.2" rel="lp152.5.27.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Gali?] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Gali?]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Gali?]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Gali?]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Gali?]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Gali?]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Gali?]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wac?aw Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wac?aw Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Gali?]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Gali? (deprecated: Igor Gali?)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Gali? (deprecated: Igor Gali?)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
</package>
<package pkgid="3cd67f5f47ab2a28f43fec836f0417765a855048be6688c14fda979f58cde0e3" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.4" rel="lp152.5.3.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
</package>
<package pkgid="28f050d38fdc74cbd19e9b6af33eb6f0767df07b94a48c164ed3a842829ea329" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.12.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
</package>
<package pkgid="c1534b60ec723cdbfd10fac378e84381552a7e5a40dbfdd89459eda0b24009b2" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.15.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
</package>
<package pkgid="20e18d7879e7e88343d17f0392813483b389744bb1c61148930c55031e6fabe2" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.18.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
</package>
<package pkgid="edda0e5deabed807719a6f3bb878479e9c5c63c600e234049314f285355a1f04" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.21.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
</package>
<package pkgid="b16d6c5b33bb07c216ffcdf02d450fa641f64903753a178ee5cd0ee12b2e9453" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.24.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
</package>
<package pkgid="36d9d8181e24a703b80d766261bc7af197f59f45fe7eedad632110066369a840" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.6.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569499200">- Update to cloud-init 19.2 (bsc#1099358, bsc#1145622)
  + Remove, included upstream
  - cloud-init-detect-nova.diff
  - cloud-init-add-static-routes.diff
  + net: add rfc3442 (classless static routes) to EphemeralDHCP
    (LP: #1821102)
  + templates/ntp.conf.debian.tmpl: fix missing newline for pools
    (LP: #1836598)
  + Support netplan renderer in Arch Linux [Conrad Hoffmann]
  + Fix typo in publicly viewable documentation. [David Medberry]
  + Add a cdrom size checker for OVF ds to ds-identify
    [Pengpeng Sun] (LP: #1806701)
  + VMWare: Trigger the post customization script via cc_scripts module.
    [Xiaofeng Wang] (LP: #1833192)
  + Cloud-init analyze module: Added ability to analyze boot events.
    [Sam Gilson]
  + Update debian eni network configuration location, retain Ubuntu setting
    [Janos Lenart]
  + net: skip bond interfaces in get_interfaces
    [Stanislav Makar] (LP: #1812857)
  + Fix a couple of issues raised by a coverity scan
  + Add missing dsname for Hetzner Cloud datasource [Markus Schade]
  + doc: indicate that netplan is default in Ubuntu now
  + azure: add region and AZ properties from imds compute location metadata
  + sysconfig: support more bonding options [Penghui Liao]
  + cloud-init-generator: use libexec path to ds-identify on redhat systems
    (LP: #1833264)
  + tools/build-on-freebsd: update to python3 [Gonéri Le Bouder]
  + Allow identification of OpenStack by Asset Tag
    [Mark T. Voelker] (LP: #1669875)
  + Fix spelling error making 'an Ubuntu' consistent. [Brian Murray]
  + run-container: centos: comment out the repo mirrorlist [Paride Legovini]
  + netplan: update netplan key mappings for gratuitous-arp (LP: #1827238)
  + freebsd: fix the name of cloudcfg VARIANT [Gonéri Le Bouder]
  + freebsd: ability to grow root file system [Gonéri Le Bouder]
  + freebsd: NoCloud data source support [Gonéri Le Bouder] (LP: #1645824)
  + Azure: Return static fallback address as if failed to find endpoint
    [Jason Zions (MSFT)]</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
</package>
<package pkgid="6b3a4ac80fdfb3624a9485a9b5fa8bce81b073c4305a4516d5d54e2bedd27750" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="20.2" rel="lp152.5.9.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add cloud-init-break-resolv-symlink.patch (bsc#1151488)
  + If /etc/resolv.conf is a symlink break it. This will avoid netconfig
    from clobbering the changes cloud-init applied.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745601">- Add cloud-init-renderer-detect.patch (bsc#1154092, boo#1142988)
  + Short curcuit the conditional for identifying the sysconfig renderer.
    If we find ifup/ifdown accept the renderer as available.</changelog>
  <changelog author="Petr Pavlu &lt;petr.pavlu@suse.com&gt;" date="1573041600">- Update cloud-init-write-routes.patch (bsc#1155376)
  + Write a route's destination network in CIDR notation instead of using the
    netmask. This provides support for correctly recording IPv6 routes.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1574683200">- Add cloud-init-proper-ipv6-setting.patch (bsc#1156139)
  + Set proper IPv6 interface variable in ifcfg file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1578571200">- Update to version 19.4
  + Remove patches included upstream:
  - cloud-init-after-wicked.patch
  - cloud-init-noresolv-merge-no-dns-data.diff
  - cloud-init-renderer-detect.patch
  - cloud-init-trigger-udev.patch
  + Removed patches merged with cloud-init-mix-static-dhcp.patch
  - cloud-init-proper-ipv6-setting.patch
  - cloud-init-static-net.patch
  + Added cloud-init-mix-static-dhcp.patch (bsc#1157894)
  + Forward port cloud-init-sysconf-path.patch
  + doc: specify _ over - in cloud config modules
  + [Joshua Powers] (LP: #1293254)
  + tools: Detect python to use via env in migrate-lp-user-to-github
  + [Adam Dobrawy]
  + Partially revert "fix unlocking method on FreeBSD" (#116)
  + tests: mock uid when running as root (#113)
  + [Joshua Powers] (LP: #1856096)
  + cloudinit/netinfo: remove unused getgateway (#111)
  + docs: clear up apt config sections (#107) [Joshua Powers] (LP: #1832823)
  + doc: add kernel command line option to user data (#105)
  + [Joshua Powers] (LP: #1846524)
  + config/cloud.cfg.d: update README [Joshua Powers] (LP: #1855006)
  + azure: avoid re-running cloud-init when instance-id is byte-swapped
  + (#84) [AOhassan]
  + fix unlocking method on FreeBSD [Igor Gali?] (LP: #1854594)
  + debian: add reference to the manpages [Joshua Powers]
  + ds_identify: if /sys is not available use dmidecode (#42)
  + [Igor Gali?] (LP: #1852442)
  + docs: add cloud-id manpage [Joshua Powers]
  + docs: add cloud-init-per manpage [Joshua Powers]
  + docs: add cloud-init manpage [Joshua Powers]
  + docs: add additional details to per-instance/once [Joshua Powers]
  + Update doc-requirements.txt [Joshua Powers]
  + doc-requirements: add missing dep [Joshua Powers]
  + dhcp: Support RedHat dhcp rfc3442 lease format for option 121 (#76)
  + [Eric Lafontaine] (LP: #1850642)
  + network_state: handle empty v1 config (#45) (LP: #1852496)
  + docs: Add document on how to report bugs [Joshua Powers]
  + Add an Amazon distro in the redhat OS family [Frederick Lefebvre]
  + removed a couple of "the"s [gaughen]
  + docs: fix line length and remove highlighting [Joshua Powers]
  + docs: Add security.md to readthedocs [Joshua Powers]
  + Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  + Revert "travis: only run CI on pull requests"
  + doc: update links on README.md [Joshua Powers]
  + doc: Updates to wording of README.md [Joshua Powers]
  + Add security.md [Joshua Powers]
  + setup.py: Amazon Linux sets libexec to /usr/libexec (#52)
  + [Frederick Lefebvre]
  + Fix linting failure in test_url_helper (#83) [Eric Lafontaine]
  + url_helper: read_file_or_url should pass headers param into readurl
  + (#66) (LP: #1854084)
  + dmidecode: log result *after* stripping n [Igor Gali?]
  + cloud_tests: add azure platform support to integration tests
  + [ahosmanmsft]
  + set_passwords: support for FreeBSD (#46) [Igor Gali?]
  + tools: migrate-lp-user-to-github removes repo_dir if created (#35)
  + Correct jumbled documentation for cc_set_hostname module (#64)
  + [do3meli] (LP: #1853543)
  + FreeBSD: fix for get_linux_distro() and lru_cache (#59)
  + [Igor Gali?] (LP: #1815030)
  + ec2: Add support for AWS IMDS v2 (session-oriented) (#55)
  + tests: Fix cloudsigma tests when no dmidecode data is present. (#57)
  + [Scott Moser]
  + net: IPv6, accept_ra, slaac, stateless (#51)
  + [Harald] (LP: #1806014, #1808647)
  + docs: Update the configdrive datasource links (#44)
  + [Joshua Powers] (LP: #1852461)
  + distro: correctly set usr_lib_exec path for FreeBSD distro (#40)
  + [Igor Gali?] (LP: #1852491)
  + azure: support secondary ipv6 addresses (#33)
  + Fix metadata check when local-hostname is null (#32)
  + [Mark Goddard] (LP: #1852100)
  + switch default FreeBSD salt minion pkg from py27 to py36
  + [Dominic Schlegel]
  + travis: only run CI on pull requests
  + add data-server dns entry as new metadata server detection [Joshua Hügli]
  + pycodestyle: remove unused local variable
  + reporting: Using a uuid to enforce uniqueness on the KVP keys. [momousta]
  + docs: touchups in rtd intro and README.md
  + doc: update launchpad git refs to github
  + github: drop pull-request template to prepare for migration
  + tools: add migrate-lp-user-to-github script to link LP to github
  + github: new basic project readme
- From 19.3
  + azure: support matching dhcp route-metrics for dual-stack ipv4 ipv6
  + (LP: #1850308)
  + configdrive: fix subplatform config-drive for /config-drive source
  + [David Kindred] (LP: #1849731)
  + DataSourceSmartOS: reconfigure network on each boot
  + [Mike Gerdts] (LP: #1765801)
  + Add config for ssh-key import and consuming user-data [Pavel Zakharov]
  + net: fix subnet_is_ipv6() for stateless|stateful
  + [Harald Jensås] (LP: #1848690)
  + OVF: disable custom script execution by default [Xiaofeng Wang]
  + cc_puppet: Implement csr_attributes.yaml support [Matthias Baur]
  + cloud-init.service: on centos/fedora/redhat wait on NetworkManager.service
  + (LP: #1843334)
  + azure: Do not lock user on instance id change [Sam Eiderman] (LP: #1849677)
  + net/netplan: use ipv6-mtu key for specifying ipv6 mtu values
  + Fix usages of yaml, and move yaml_dump to safeyaml.dumps. (LP: #1849640)
  + exoscale: Increase url_max_wait to 120s. [Chris Glass]
  + net/sysconfig: fix available check on SUSE distros
  + [Robert Schweikert] (LP: #1849378)
  + docs: Fix incorrect Azure IMDS IP address [Joshua Powers] (LP: #1849508)
  + introduce .travis.yml
  + net: enable infiniband support in eni and sysconfig renderers
  + [Darren Birkett] (LP: #1847114)
  + guestcust_util: handle special characters in config file [Xiaofeng Wang]
  + fix some more typos in comments [Dominic Schlegel]
  + replace any deprecated log.warn with log.warning
  + [Dominic Schlegel] (LP: #1508442)
  + net: handle openstack dhcpv6-stateless configuration
  + [Harald Jensås] (LP: #1847517)
  + Add .venv/ to .gitignore [Dominic Schlegel]
  + Small typo fixes in code comments. [Dominic Schlegel]
  + cloud_test/lxd: Retry container delete a few times
  + Add Support for e24cloud to Ec2 datasource. (LP: #1696476)
  + Add RbxCloud datasource [Adam Dobrawy]
  + get_interfaces: don't exclude bridge and bond members (LP: #1846535)
  + Add support for Arch Linux in render-cloudcfg [Conrad Hoffmann]
  + util: json.dumps on python 2.7 will handle UnicodeDecodeError on binary
  + (LP: #1801364)
  + debian/ubuntu: add missing word to netplan/ENI header (LP: #1845669)
  + ovf: do not generate random instance-id for IMC customization path
  + sysconfig: only write resolv.conf if network_state has DNS values
  + (LP: #1843634)
  + sysconfig: use distro variant to check if available (LP: #1843584)
  + systemd/cloud-init.service.tmpl: start after wicked.service
  + [Robert Schweikert]
  + docs: fix zstack documentation lints
  + analyze/show: remove trailing space in output
  + Add missing space in warning: "not avalid seed" [Brian Candler]
  + pylintrc: add 'enter_context' to generated-members list
  + Add datasource for ZStack platform. [Shixin Ruan] (LP: #1841181)
  + docs: organize TOC and update summary of project [Joshua Powers]
  + tools: make clean now cleans the dev directory, not the system
  + docs: create cli specific page [Joshua Powers]
  + docs: added output examples to analyze.rst [Joshua Powers]
  + docs: doc8 fixes for instancedata page [Joshua Powers]
  + docs: clean up formatting, organize boot page [Joshua Powers]
  + net: add is_master check for filtering device list (LP: #1844191)
  + docs: more complete list of availability [Joshua Powers]
  + docs: start FAQ page [Joshua Powers]
  + docs: cleanup output &amp; order of datasource page [Joshua Powers]
  + Brightbox: restrict detection to require full domain match .brightbox.com
  + VMWware: add option into VMTools config to enable/disable custom script.
  + [Xiaofeng Wang]
  + net,Oracle: Add support for netfailover detection
  + atomic_helper: add DEBUG logging to write_file (LP: #1843276)
  + doc: document doc, create makefile and tox target [Joshua Powers]
  + .gitignore: ignore files produced by package builds
  + docs: fix whitespace, spelling, and line length [Joshua Powers]
  + docs: remove unnecessary file in doc directory [Joshua Powers]
  + Oracle: Render secondary vnic IP and MTU values only
  + exoscale: fix sysconfig cloud_config_modules overrides (LP: #1841454)
  + net/cmdline: refactor to allow multiple initramfs network config sources
  + ubuntu-drivers: call db_x_loadtemplatefile to accept NVIDIA EULA
  + (LP: #1840080)
  + Add missing #cloud-config comment on first example in documentation.
  + [Florian Müller]
  + ubuntu-drivers: emit latelink=true debconf to accept nvidia eula
  + (LP: #1840080)
  + DataSourceOracle: prefer DS network config over initramfs
  + format.rst: add text/jinja2 to list of content types (+ cleanups)
  + Add GitHub pull request template to point people at hacking doc
  + cloudinit/distros/parsers/sys_conf: add docstring to SysConf
  + pyflakes: remove unused variable [Joshua Powers]
  + Azure: Record boot timestamps, system information, and diagnostic events
  + [Anh Vo]
  + DataSourceOracle: configure secondary NICs on Virtual Machines
  + distros: fix confusing variable names
  + azure/net: generate_fallback_nic emits network v2 config instead of v1
  + Add support for publishing host keys to GCE guest attributes [Rick Wright]
  + New data source for the Exoscale.com cloud platform [Chris Glass]
  + doc: remove intersphinx extension
  + cc_set_passwords: rewrite documentation (LP: #1838794)
  + net/cmdline: split interfaces_by_mac and init network config determination
  + stages: allow data sources to override network config source order
  + cloud_tests: updates and fixes
  + Fix bug rendering MTU on bond or vlan when input was netplan. (LP: #1836949)
  + net: update net sequence, include wait on netdevs, opensuse netrules path
    (LP: #1817368)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1579003200">- Add patch to build properly with python 3.8:
  * 0001-Make-tests-work-with-Python-3.8-139.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1579262400">- Add cloud-init-no-tempnet-oci.patch (bsc#1161132, bsc#1161133)
  + Do not attempt to configure an ephemeral network on OCI. We
    boot off iSCSI and the network is up. Just read the data.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508800">- Update cloud-init-write-routes.patch (bsc#1163178)
  + Entries in the routes definition have changed causing a traceback
    during rout config file writing. This patch update addresses the
    issue by extracting the new entries properly.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581508801">- Add cloud-init-use-different-random-src.diff (bsc#1162937, CVE-2020-8631)
  + Use non-deterministic generator for password generation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1581595200">- Add cloud-init-long-pass.patch (bsc#1162936, CVE-2020-8632)
  + Increase the default length of generated passwords</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585137600">- Update cloud-init-write-routes.patch (bsc#1165296)
  + Add the default gateway to the ifroute config file when specified
    as part of the subnet configuration
  + Fix typo to properly extrakt provided netmask data (bsc#1163178)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
</package>
<package pkgid="47b90406b49e177a4870d80ed7650b1eaea91c62ca22b2b66d4d990d3edb6443" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="21.2" rel="lp152.5.27.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585224000">- Update cloud-init-write-routes.patch
  + Still need to consider the "network" configuration uption
    for the v1 config implementation. Fixes regression
    introduced with update from Wed Feb 12 19:30:42</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1585310400">- Update cloud-init-write-routes.patch
  + In cases where the config contains 2 or more default gateway
    specifications for an interface only write the first default route,
    log warning message about skipped routes
  + Avoid writing invalid route specification if neither the network
    nor destination is specified in the route configuration</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589803200">- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546, bsc#1171995)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1589889600">- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2</changelog>
  <changelog author="Martin Loviska &lt;mloviska@suse.com&gt;" date="1589976000">- bsc#1170154: rsyslog warning, '~' is deprecated
  + replace deprecated syntax '&amp; ~' by '&amp; stop'
    for more information please see https://www.rsyslog.com/rsyslog-error-2307/</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1592481600">- Disable testing to aid elimination of unittest2 in Factory</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1595592000">- Update to version 20.2 (bsc#1174443, bsc#1174444)
  + Remove patches included upstream:
  - 0001-Make-tests-work-with-Python-3.8-139.patch
  - cloud-init-ostack-metadat-dencode.patch
  - cloud-init-use-different-random-src.diff
  - cloud-init-long-pass.patch
  - cloud-init-mix-static-dhcp.patch
  + Remove patches build switched to Python 3 for all distributions
    (jsc#PM-2335)
  - cloud-init-python2-sigpipe.patch
  - cloud-init-template-py2.patch
  + Add
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  + doc/format: reference make-mime.py instead of an inline script (#334)
  + Add docs about  creating parent folders (#330) [Adrian Wilkins]
  + DataSourceNoCloud/OVF: drop claim to support FTP (#333) (LP: #1875470)
  + schema: ignore spurious pylint error (#332)
  + schema: add json schema for write_files module (#152)
  + BSD: find_devs_with_ refactoring (#298) [Gonéri Le Bouder]
  + nocloud: drop work around for Linux 2.6 (#324) [Gonéri Le Bouder]
  + cloudinit: drop dependencies on unittest2 and contextlib2 (#322)
  + distros: handle a potential mirror filtering error case (#328)
  + log: remove unnecessary import fallback logic (#327)
  + .travis.yml: don't run integration test on ubuntu/* branches (#321)
  + More unit test documentation (#314)
  + conftest: introduce disable_subp_usage autouse fixture (#304)
  + YAML align indent sizes for docs readability  (#323) [Tak Nishigori]
  + network_state: add missing space to log message (#325)
  + tests: add missing mocks for get_interfaces_by_mac (#326) (LP: #1873910)
  + test_mounts: expand happy path test for both happy paths (#319)
  + cc_mounts: fix incorrect format specifiers (#316) (LP: #1872836)
  + swap file "size" being used before checked if str (#315) [Eduardo Otubo]
  + HACKING.rst: add pytest version gotchas section (#311)
  + docs: Add steps to re-run cloud-id and cloud-init (#313) [Joshua Powers]
  + readme: OpenBSD is now supported (#309) [Gonéri Le Bouder]
  + net: ignore 'renderer' key in netplan config (#306) (LP: #1870421)
  + Add support for NFS/EFS mounts (#300) [Andrew Beresford] (LP: #1870370)
  + openbsd: set_passwd should not unlock user (#289) [Gonéri Le Bouder]
  + tools/.github-cla-signers: add beezly as CLA signer (#301)
  + util: remove unnecessary lru_cache import fallback (#299)
  + HACKING.rst: reorganise/update CLA signature info (#297)
  + distros: drop leading/trailing hyphens from mirror URL labels (#296)
  + HACKING.rst: add note about variable annotations (#295)
  + CiTestCase: stop using and remove sys_exit helper (#283)
  + distros: replace invalid characters in mirror URLs with hyphens (#291)
    (LP: #1868232)
  + rbxcloud: gracefully handle arping errors (#262) [Adam Dobrawy]
  + Fix cloud-init ignoring some misdeclared mimetypes in user-data.
    [Kurt Garloff]
  + net: ubuntu focal prioritize netplan over eni even if both present
    (#267) (LP: #1867029)
  + cloudinit: refactor util.is_ipv4 to net.is_ipv4_address (#292)
  + net/cmdline: replace type comments with annotations (#294)
  + HACKING.rst: add Type Annotations design section (#293)
  + net: introduce is_ip_address function (#288)
  + CiTestCase: remove now-unneeded parse_and_read helper method (#286)
  + .travis.yml: allow 30 minutes of inactivity in cloud tests (#287)
  + sources/tests/test_init: drop use of deprecated inspect.getargspec (#285)
  + setup.py: drop NIH check_output implementation (#282)
  + Identify SAP Converged Cloud as OpenStack [Silvio Knizek]
  + add Openbsd support (#147) [Gonéri Le Bouder]
  + HACKING.rst: add examples of the two test class types (#278)
  + VMWware: support to update guest info gc status if enabled (#261)
    [xiaofengw-vmware]
  + Add lp-to-git mapping for kgarloff (#279)
  + set_passwords: avoid chpasswd on BSD (#268) [Gonéri Le Bouder]
  + HACKING.rst: add Unit Testing design section (#277)
  + util: read_cc_from_cmdline handle urlencoded yaml content (#275)
  + distros/tests/test_init: add tests for _get_package_mirror_info (#272)
  + HACKING.rst: add links to new Code Review Process doc (#276)
  + freebsd: ensure package update works (#273) [Gonéri Le Bouder]
  + doc: introduce Code Review Process documentation (#160)
  + tools: use python3 (#274)
  + cc_disk_setup: fix RuntimeError (#270) (LP: #1868327)
  + cc_apt_configure/util: combine search_for_mirror implementations (#271)
  + bsd: boottime does not depend on the libc soname (#269)
    [Gonéri Le Bouder]
  + test_oracle,DataSourceOracle: sort imports (#266)
  + DataSourceOracle: update .network_config docstring (#257)
  + cloudinit/tests: remove unneeded with_logs configuration (#263)
  + .travis.yml: drop stale comment (#255)
  + .gitignore: add more common directories (#258)
  + ec2: render network on all NICs and add secondary IPs as static (#114)
    (LP: #1866930)
  + ec2 json validation: fix the reference to the 'merged_cfg' key (#256)
    [Paride Legovini]
  + releases.yaml: quote the Ubuntu version numbers (#254) [Paride Legovini]
  + cloudinit: remove six from packaging/tooling (#253)
  + util/netbsd: drop six usage (#252)
  + workflows: introduce stale pull request workflow (#125)
  + cc_resolv_conf: introduce tests and stabilise output across Python
    versions (#251)
  + fix minor issue with resolv_conf template (#144) [andreaf74]
  + doc: CloudInit also support NetBSD (#250) [Gonéri Le Bouder]
  + Add Netbsd support (#62) [Gonéri Le Bouder]
  + tox.ini: avoid substition syntax that causes a traceback on xenial (#245)
  + Add pub_key_ed25519 to cc_phone_home (#237) [Daniel Hensby]
  + Introduce and use of a list of GitHub usernames that have signed CLA
    (#244)
  + workflows/cla.yml: use correct username for CLA check (#243)
  + tox.ini: use xenial version of jsonpatch in CI (#242)
  + workflows: CLA validation altered to fail status on pull_request (#164)
  + tox.ini: bump pyflakes version to 2.1.1 (#239)
  + cloudinit: move to pytest for running tests (#211)
  + instance-data: add cloud-init merged_cfg and sys_info keys to json
    (#214) (LP: #1865969)
  + ec2: Do not fallback to IMDSv1 on EC2 (#216)
  + instance-data: write redacted cfg to instance-data.json (#233)
    (LP: #1865947)
  + net: support network-config:disabled on the kernel commandline (#232)
    (LP: #1862702)
  + ec2: only redact token request headers in logs, avoid altering request
    (#230) (LP: #1865882)
  + docs: typo fixed: dta ? data [Alexey Vazhnov]
  + Fixes typo on Amazon Web Services (#217) [Nick Wales]
  + Fix docs for OpenStack DMI Asset Tag (#228)
    [Mark T. Voelker] (LP: #1669875)
  + Add physical network type: cascading to openstack helpers (#200)
    [sab-systems]
  + tests: add focal integration tests for ubuntu (#225)
- From 20.1 (first vesrion after 19.4)
  + ec2: Do not log IMDSv2 token values, instead use REDACTED (#219)
    (LP: #1863943)
  + utils: use SystemRandom when generating random password. (#204)
    [Dimitri John Ledkov]
  + docs: mount_default_files is a list of 6 items, not 7 (#212)
  + azurecloud: fix issues with instances not starting (#205) (LP: #1861921)
  + unittest: fix stderr leak in cc_set_password random unittest
    output. (#208)
  + cc_disk_setup: add swap filesystem force flag (#207)
  + import sysvinit patches from freebsd-ports tree (#161) [Igor Gali?]
  + docs: fix typo (#195) [Edwin Kofler]
  + sysconfig: distro-specific config rendering for BOOTPROTO option (#162)
    [Robert Schweikert] (LP: #1800854)
  + cloudinit: replace "from six import X" imports (except in util.py) (#183)
  + run-container: use 'test -n' instead of 'test ! -z' (#202)
    [Paride Legovini]
  + net/cmdline: correctly handle static ip= config (#201)
    [Dimitri John Ledkov] (LP: #1861412)
  + Replace mock library with unittest.mock (#186)
  + HACKING.rst: update CLA link (#199)
  + Scaleway: Fix DatasourceScaleway to avoid backtrace (#128)
    [Louis Bouchard]
  + cloudinit/cmd/devel/net_convert.py: add missing space (#191)
  + tools/run-container: drop support for python2 (#192) [Paride Legovini]
  + Print ssh key fingerprints using sha256 hash (#188) (LP: #1860789)
  + Make the RPM build use Python 3 (#190) [Paride Legovini]
  + cc_set_password: increase random pwlength from 9 to 20 (#189)
    (LP: #1860795)
  + .travis.yml: use correct Python version for xenial tests (#185)
  + cloudinit: remove ImportError handling for mock imports (#182)
  + Do not use fallocate in swap file creation on xfs. (#70)
    [Eduardo Otubo] (LP: #1781781)
  + .readthedocs.yaml: install cloud-init when building docs (#181)
    (LP: #1860450)
  + Introduce an RTD config file, and pin the Sphinx version to the RTD
    default (#180)
  + Drop most of the remaining use of six (#179)
  + Start removing dependency on six (#178)
  + Add Rootbox &amp; HyperOne to list of cloud in README (#176) [Adam Dobrawy]
  + docs: add proposed SRU testing procedure (#167)
  + util: rename get_architecture to get_dpkg_architecture (#173)
  + Ensure util.get_architecture() runs only once (#172)
  + Only use gpart if it is the BSD gpart (#131) [Conrad Hoffmann]
  + freebsd: remove superflu exception mapping (#166) [Gonéri Le Bouder]
  + ssh_auth_key_fingerprints_disable test: fix capitalization (#165)
    [Paride Legovini]
  + util: move uptime's else branch into its own boottime function (#53)
    [Igor Gali?] (LP: #1853160)
  + workflows: add contributor license agreement checker (#155)
  + net: fix rendering of 'static6' in network config (#77) (LP: #1850988)
  + Make tests work with Python 3.8 (#139) [Conrad Hoffmann]
  + fixed minor bug with mkswap in cc_disk_setup.py (#143) [andreaf74]
  + freebsd: fix create_group() cmd (#146) [Gonéri Le Bouder]
  + doc: make apt_update example consistent (#154)
  + doc: add modules page toc with links (#153) (LP: #1852456)
  + Add support for the amazon variant in cloud.cfg.tmpl (#119)
    [Frederick Lefebvre]
  + ci: remove Python 2.7 from CI runs (#137)
  + modules: drop cc_snap_config config module (#134)
  + migrate-lp-user-to-github: ensure Launchpad repo exists (#136)
  + docs: add initial troubleshooting to FAQ (#104) [Joshua Powers]
  + doc: update cc_set_hostname frequency and descrip (#109)
    [Joshua Powers] (LP: #1827021)
  + freebsd: introduce the freebsd renderer (#61) [Gonéri Le Bouder]
  + cc_snappy: remove deprecated module (#127)
  + HACKING.rst: clarify that everyone needs to do the LP-&gt;GH dance (#130)
  + freebsd: cloudinit service requires devd (#132) [Gonéri Le Bouder]
  + cloud-init: fix capitalisation of SSH (#126)
  + doc: update cc_ssh clarify host and auth keys
    [Joshua Powers] (LP: #1827021)
  + ci: emit names of tests run in Travis (#120)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1602936000">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Avoid exception if no gateway information is present and warning
    is triggered for existing routing.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="Jordi Massaguer &lt;jmassaguerpla@suse.com&gt;" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Gali?] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Gali?]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Gali?]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Gali?]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Gali?]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Gali?]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Gali?]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wac?aw Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wac?aw Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Gali?]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Gali? (deprecated: Igor Gali?)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Gali? (deprecated: Igor Gali?)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
</package>
<package pkgid="2bae4feb07f30d20bc8ca4dc32f41ffe3b3d5b7478493135437d62a10e986c5e" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.5" rel="lp152.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
</package>
<package pkgid="2d5322ad74708323fb2a2c80efcdb45584fd4ffddd66d49eee9bc492398b032c" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.5" rel="lp152.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
</package>
<package pkgid="9939cd211444f010656b2ee79e2713b2ac6f2dcbc61e7c9a3343438cf331a3f3" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.5" rel="lp152.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
</package>
<package pkgid="c64f26ec59ac9882e6baacc54bd41ee1c3b7c39d16dc00797e4ab52ba60c27f3" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.5" rel="lp152.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
</package>
<package pkgid="cbca26bf6f62b8fb5482c744dc8377b63c44d4379bcaed7801bd339740f77eb2" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.5" rel="lp152.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
</package>
<package pkgid="cf0d43386313f1959ec3909a1af5de9edec09cea58c174b7bc4adad511300a8a" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.5" rel="lp152.2.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
</package>
<package pkgid="3c5ab17efe63770bd41ddbd5014e93dfd0bcabd5b117a97b1043f2924beca339" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.11.1"/>
  <changelog author="schwab@suse.de" date="1619784000">- rpm/constraints.in: bump disk space to 45GB on riscv64
- commit f8b883f</changelog>
  <changelog author="tiwai@suse.de" date="1619784001">- net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
  (git-fixes).
- net: phy: marvell: fix m88e1111_set_downshift (git-fixes).
- net: phy: marvell: fix m88e1011_set_downshift (git-fixes).
- net: phy: intel-xway: enable integrated led functions
  (git-fixes).
- ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock
  without lock (git-fixes).
- ath9k: Fix error check in ath9k_hw_read_revisions() for PCI
  devices (git-fixes).
- mac80211: bail out if cipher schemes are invalid (git-fixes).
- rtw88: Fix array overrun in rtw_get_tx_power_params()
  (git-fixes).
- rsi: Use resume_noirq for SDIO (git-fixes).
- ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
  (git-fixes).
- rtlwifi: 8821ae: upgrade PHY and RF parameters (git-fixes).
- mt7601u: fix always true expression (git-fixes).
- liquidio: Fix unintented sign extension of a left shift of a
  u16 (git-fixes).
- nfc: pn533: prevent potential memory corruption (git-fixes).
- commit 4c3b252</changelog>
  <changelog author="tiwai@suse.de" date="1619784002">- net: geneve: modify IP header check in geneve6_xmit_skb and
  geneve_xmit_skb (git-fixes).
- commit f8b6668</changelog>
  <changelog author="tiwai@suse.de" date="1619870400">- i2c: cadence: add IRQ check (git-fixes).
- i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  (git-fixes).
- i2c: omap: fix reference leak when pm_runtime_get_sync fails
  (git-fixes).
- i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync
  fails (git-fixes).
- i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  (git-fixes).
- HID: plantronics: Workaround for double volume key presses
  (git-fixes).
- ASoC: ak5558: correct reset polarity (git-fixes).
- ASoC: simple-card: fix possible uninitialized single_cpu local
  variable (git-fixes).
- ASoC: ak5558: Fix s/show/slow/ typo (git-fixes).
- ASoC: samsung: tm2_wm5110: check of of_parse return value
  (git-fixes).
- ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops
  (git-fixes).
- ALSA: usb-audio: Fix implicit sync clearance at stopping stream
  (git-fixes).
- ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check
  fails (git-fixes).
- ALSA: usb-audio: Add error checks for
  usb_driver_claim_interface() calls (git-fixes).
- ALSA: core: remove redundant spin_lock pair in
  snd_card_disconnect (git-fixes).
- drm/i915/gvt: Fix error code in intel_gvt_init_device()
  (git-fixes).
- commit 2b66742</changelog>
  <changelog author="tiwai@suse.de" date="1619870401">- pinctrl: core: Fix kernel doc string for pin_get_name()
  (git-fixes).
- pinctrl: Ingenic: Add missing pins to the JZ4770 MAC MII group
  (git-fixes).
- i2c: sh7760: add IRQ check (git-fixes).
- i2c: jz4780: add IRQ check (git-fixes).
- i2c: emev2: add IRQ check (git-fixes).
- commit da2180a</changelog>
  <changelog author="tiwai@suse.de" date="1619870402">- i2c: sh7760: fix IRQ error path (git-fixes).
- commit e315f49</changelog>
  <changelog author="tiwai@suse.de" date="1619870403">- ALSA: hda/realtek: Remove redundant entry for ALC861
  Haier/Uniwill devices (git-fixes).
- ALSA: hda/realtek: Re-order ALC662 quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx (git-fixes).
- ALSA: hda/cirrus: Use CS8409 filter to fix abnormal sounds on
  Bullseye (git-fixes).
- ALSA: hda/cirrus: Set Initial DMIC volume for Bullseye to -26 dB
  (git-fixes).
- ALSA: sb: Fix two use after free in snd_sb_qsound_build
  (git-fixes).
- ASoC: Intel: kbl_da7219_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
  (git-fixes).
- ALSA: hda/realtek - Headset Mic issue on HP platform
  (git-fixes).
- ALSA: usb-audio: DJM-750: ensure format is set (git-fixes).
- ALSA: hda/realtek: GA503 use same quirks as GA401 (git-fixes).
- ALSA: hda/realtek: fix mic boost on Intel NUC 8 (git-fixes).
- ALSA: usb-audio: Explicitly set up the clock selector
  (git-fixes).
- ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX (git-fixes).
- ALSA: hda/cirrus: Make CS8409 driver more generic by using
  fixups (git-fixes).
- ALSA: hda/cirrus: Fix CS42L42 Headset Mic volume control name
  (git-fixes).
- ALSA: hda/cirrus: Cleanup patch_cirrus.c code (git-fixes).
- ALSA: hda/cirrus: Add error handling into CS8409 I2C functions
  (git-fixes).
- ALSA: hda/cirrus: Add Headphone and Headset MIC Volume Control
  (git-fixes).
- ALSA: hda/cirrus: Add jack detect interrupt support from
  CS42L42 companion codec (git-fixes).
- ALSA: hda/cirrus: Add support for CS8409 HDA bridge and CS42L42
  companion codec (git-fixes).
- ALSA: usb-audio: Configure Pioneer DJM-850 samplerate
  (git-fixes).
- ALSA: usb-audio: Fix Pioneer DJM devices URB_CONTROL request
  direction to set samplerate (git-fixes).
- ALSA: usb-audio: Add DJM450 to Pioneer format quirk (git-fixes).
- commit 82d06eb</changelog>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="f8f4bd9a7f94335f77cd19d176e2b00222b8f4bc2137db19a39317dd71e04fb1" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.14.1"/>
  <changelog author="dbueso@suse.de" date="1622203200">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376002">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="neilb@suse.de" date="1622462401">- SUNRPC: More fixes for backlog congestion (bsc#1185428).
- commit c0de1ec</changelog>
  <changelog author="hare@suse.de" date="1622462402">- blk-mq: Swap two calls in blk_mq_exit_queue() (git-fixes).
- block: Fix three kernel-doc warnings (git-fixes).
- commit e222970</changelog>
  <changelog author="tiwai@suse.de" date="1622462403">- i2c: s3c2410: fix possible NULL pointer deref on read message
  after write (git-fixes).
- i2c: i801: Don't generate an interrupt on bus reset (git-fixes).
- i2c: sh_mobile: Use new clock calculation formulas for RZ/G2E
  (git-fixes).
- iio: adc: ad7793: Add missing error code in ad7793_setup()
  (git-fixes).
- iio: adc: ad7768-1: Fix too small buffer passed to
  iio_push_to_buffers_with_timestamp() (git-fixes).
- iio: gyro: fxas21002c: balance runtime power in error path
  (git-fixes).
- staging: iio: cdc: ad7746: avoid overwrite of num_channels
  (git-fixes).
- iio: adc: ad7124: Fix potential overflow due to non sequential
  channel numbers (git-fixes).
- iio: adc: ad7124: Fix missbalanced regulator enable / disable
  on error (git-fixes).
- staging: emxx_udc: fix loop in _nbu2ss_nuke() (git-fixes).
- serial: sh-sci: Fix off-by-one error in FIFO threshold register
  setting (git-fixes).
- serial: core: fix suspicious security_locked_down() call
  (git-fixes).
- serial: tegra: Fix a mask operation that is always true
  (git-fixes).
- thunderbolt: dma_port: Fix NVM read buffer bounds and offset
  issue (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen()
  (git-fixes).
- USB: trancevibrator: fix control-request direction (git-fixes).
- misc/uss720: fix memory leak in uss720_probe (git-fixes).
- drm/meson: fix shutdown crash when component not probed
  (git-fixes).
- net: usb: fix memory leak in smsc75xx_bind (git-fixes).
- cdrom: gdrom: initialize global variable at init time
  (git-fixes).
- cdrom: gdrom: deallocate struct gdrom_unit fields in
  remove_gdrom (git-fixes).
- Revert "gdrom: fix a memory leak bug" (git-fixes).
- usb: dwc3: gadget: Enable suspend events (git-fixes).
- commit 62c76a6</changelog>
  <changelog author="hare@suse.de" date="1622462404">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="ykaukab@suse.de" date="1622462406">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462408">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462409">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
</package>
<package pkgid="ba3664b54522e6cd9cff8c7e259eb8996e760305582d641ba1faa89f995ccfbe" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="fb8b15166393cc717685f87b4e90e1b8dacfc906c64eba8530626621cfbb7250" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="c0c975f3eb037973aa71a06e4a0c5d7d760fb465466b7ea6064333b557c56ddf" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.8.1"/>
  <changelog author="bp@suse.de" date="1618228800">- RAS/CEC: Correct ce_add_elem()'s returned values (bsc#1152489).
- commit 1be7dba</changelog>
  <changelog author="bp@suse.de" date="1618228801">- blacklist.conf: dd926880da8d x86/apic/of: Fix CPU devicetree-node lookups
- commit 92f0632</changelog>
  <changelog author="tiwai@suse.de" date="1618228802">- rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)
  The devel package requires the kernel binary package itself for building
  modules externally.
- commit 794be7b</changelog>
  <changelog author="jroedel@suse.de" date="1618228803">- KVM: SVM: avoid infinite loop on NPF from bad address (CVE-2020-36310 bsc#1184512).
- commit 3916df4</changelog>
  <changelog author="oneukum@suse.com" date="1618228804">- Documentation/ABI: sysfs-platform-ideapad-laptop: update device
  attribute paths (git-fixes).
- commit 2559651</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: lantiq: Wait for the GPHY firmware to be ready (git-fixes).
- commit d0452d2</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315210">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315211">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315212">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315213">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315214">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="be305bdac2ec4272c0d623149d0a8749fed55867963075fe423ec90a8603c19a" name="cluster-md-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.11.1"/>
  <changelog author="schwab@suse.de" date="1619784000">- rpm/constraints.in: bump disk space to 45GB on riscv64
- commit f8b883f</changelog>
  <changelog author="tiwai@suse.de" date="1619784001">- net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
  (git-fixes).
- net: phy: marvell: fix m88e1111_set_downshift (git-fixes).
- net: phy: marvell: fix m88e1011_set_downshift (git-fixes).
- net: phy: intel-xway: enable integrated led functions
  (git-fixes).
- ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock
  without lock (git-fixes).
- ath9k: Fix error check in ath9k_hw_read_revisions() for PCI
  devices (git-fixes).
- mac80211: bail out if cipher schemes are invalid (git-fixes).
- rtw88: Fix array overrun in rtw_get_tx_power_params()
  (git-fixes).
- rsi: Use resume_noirq for SDIO (git-fixes).
- ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
  (git-fixes).
- rtlwifi: 8821ae: upgrade PHY and RF parameters (git-fixes).
- mt7601u: fix always true expression (git-fixes).
- liquidio: Fix unintented sign extension of a left shift of a
  u16 (git-fixes).
- nfc: pn533: prevent potential memory corruption (git-fixes).
- commit 4c3b252</changelog>
  <changelog author="tiwai@suse.de" date="1619784002">- net: geneve: modify IP header check in geneve6_xmit_skb and
  geneve_xmit_skb (git-fixes).
- commit f8b6668</changelog>
  <changelog author="tiwai@suse.de" date="1619870400">- i2c: cadence: add IRQ check (git-fixes).
- i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  (git-fixes).
- i2c: omap: fix reference leak when pm_runtime_get_sync fails
  (git-fixes).
- i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync
  fails (git-fixes).
- i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  (git-fixes).
- HID: plantronics: Workaround for double volume key presses
  (git-fixes).
- ASoC: ak5558: correct reset polarity (git-fixes).
- ASoC: simple-card: fix possible uninitialized single_cpu local
  variable (git-fixes).
- ASoC: ak5558: Fix s/show/slow/ typo (git-fixes).
- ASoC: samsung: tm2_wm5110: check of of_parse return value
  (git-fixes).
- ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops
  (git-fixes).
- ALSA: usb-audio: Fix implicit sync clearance at stopping stream
  (git-fixes).
- ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check
  fails (git-fixes).
- ALSA: usb-audio: Add error checks for
  usb_driver_claim_interface() calls (git-fixes).
- ALSA: core: remove redundant spin_lock pair in
  snd_card_disconnect (git-fixes).
- drm/i915/gvt: Fix error code in intel_gvt_init_device()
  (git-fixes).
- commit 2b66742</changelog>
  <changelog author="tiwai@suse.de" date="1619870401">- pinctrl: core: Fix kernel doc string for pin_get_name()
  (git-fixes).
- pinctrl: Ingenic: Add missing pins to the JZ4770 MAC MII group
  (git-fixes).
- i2c: sh7760: add IRQ check (git-fixes).
- i2c: jz4780: add IRQ check (git-fixes).
- i2c: emev2: add IRQ check (git-fixes).
- commit da2180a</changelog>
  <changelog author="tiwai@suse.de" date="1619870402">- i2c: sh7760: fix IRQ error path (git-fixes).
- commit e315f49</changelog>
  <changelog author="tiwai@suse.de" date="1619870403">- ALSA: hda/realtek: Remove redundant entry for ALC861
  Haier/Uniwill devices (git-fixes).
- ALSA: hda/realtek: Re-order ALC662 quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx (git-fixes).
- ALSA: hda/cirrus: Use CS8409 filter to fix abnormal sounds on
  Bullseye (git-fixes).
- ALSA: hda/cirrus: Set Initial DMIC volume for Bullseye to -26 dB
  (git-fixes).
- ALSA: sb: Fix two use after free in snd_sb_qsound_build
  (git-fixes).
- ASoC: Intel: kbl_da7219_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
  (git-fixes).
- ALSA: hda/realtek - Headset Mic issue on HP platform
  (git-fixes).
- ALSA: usb-audio: DJM-750: ensure format is set (git-fixes).
- ALSA: hda/realtek: GA503 use same quirks as GA401 (git-fixes).
- ALSA: hda/realtek: fix mic boost on Intel NUC 8 (git-fixes).
- ALSA: usb-audio: Explicitly set up the clock selector
  (git-fixes).
- ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX (git-fixes).
- ALSA: hda/cirrus: Make CS8409 driver more generic by using
  fixups (git-fixes).
- ALSA: hda/cirrus: Fix CS42L42 Headset Mic volume control name
  (git-fixes).
- ALSA: hda/cirrus: Cleanup patch_cirrus.c code (git-fixes).
- ALSA: hda/cirrus: Add error handling into CS8409 I2C functions
  (git-fixes).
- ALSA: hda/cirrus: Add Headphone and Headset MIC Volume Control
  (git-fixes).
- ALSA: hda/cirrus: Add jack detect interrupt support from
  CS42L42 companion codec (git-fixes).
- ALSA: hda/cirrus: Add support for CS8409 HDA bridge and CS42L42
  companion codec (git-fixes).
- ALSA: usb-audio: Configure Pioneer DJM-850 samplerate
  (git-fixes).
- ALSA: usb-audio: Fix Pioneer DJM devices URB_CONTROL request
  direction to set samplerate (git-fixes).
- ALSA: usb-audio: Add DJM450 to Pioneer format quirk (git-fixes).
- commit 82d06eb</changelog>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="35283f3236ab4e9f42232cb072789a8babdac8dc1ae71683c1a693afd488172a" name="cluster-md-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.14.1"/>
  <changelog author="dbueso@suse.de" date="1622203200">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376002">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="neilb@suse.de" date="1622462401">- SUNRPC: More fixes for backlog congestion (bsc#1185428).
- commit c0de1ec</changelog>
  <changelog author="hare@suse.de" date="1622462402">- blk-mq: Swap two calls in blk_mq_exit_queue() (git-fixes).
- block: Fix three kernel-doc warnings (git-fixes).
- commit e222970</changelog>
  <changelog author="tiwai@suse.de" date="1622462403">- i2c: s3c2410: fix possible NULL pointer deref on read message
  after write (git-fixes).
- i2c: i801: Don't generate an interrupt on bus reset (git-fixes).
- i2c: sh_mobile: Use new clock calculation formulas for RZ/G2E
  (git-fixes).
- iio: adc: ad7793: Add missing error code in ad7793_setup()
  (git-fixes).
- iio: adc: ad7768-1: Fix too small buffer passed to
  iio_push_to_buffers_with_timestamp() (git-fixes).
- iio: gyro: fxas21002c: balance runtime power in error path
  (git-fixes).
- staging: iio: cdc: ad7746: avoid overwrite of num_channels
  (git-fixes).
- iio: adc: ad7124: Fix potential overflow due to non sequential
  channel numbers (git-fixes).
- iio: adc: ad7124: Fix missbalanced regulator enable / disable
  on error (git-fixes).
- staging: emxx_udc: fix loop in _nbu2ss_nuke() (git-fixes).
- serial: sh-sci: Fix off-by-one error in FIFO threshold register
  setting (git-fixes).
- serial: core: fix suspicious security_locked_down() call
  (git-fixes).
- serial: tegra: Fix a mask operation that is always true
  (git-fixes).
- thunderbolt: dma_port: Fix NVM read buffer bounds and offset
  issue (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen()
  (git-fixes).
- USB: trancevibrator: fix control-request direction (git-fixes).
- misc/uss720: fix memory leak in uss720_probe (git-fixes).
- drm/meson: fix shutdown crash when component not probed
  (git-fixes).
- net: usb: fix memory leak in smsc75xx_bind (git-fixes).
- cdrom: gdrom: initialize global variable at init time
  (git-fixes).
- cdrom: gdrom: deallocate struct gdrom_unit fields in
  remove_gdrom (git-fixes).
- Revert "gdrom: fix a memory leak bug" (git-fixes).
- usb: dwc3: gadget: Enable suspend events (git-fixes).
- commit 62c76a6</changelog>
  <changelog author="hare@suse.de" date="1622462404">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="ykaukab@suse.de" date="1622462406">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462408">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462409">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
</package>
<package pkgid="96a8d88398b2164fa0934acca413709101ebcb400de7b0b30f37f124369fd8b6" name="cluster-md-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="b5502e6b6449987ecad38205f6dd987f36e08bf11f6d5a612649d65bdd239ea8" name="cluster-md-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="38ac76cbc0727f461f01b24d621e263561e4085212f23e7587b9d756e4cb750e" name="cluster-md-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.8.1"/>
  <changelog author="bp@suse.de" date="1618228800">- RAS/CEC: Correct ce_add_elem()'s returned values (bsc#1152489).
- commit 1be7dba</changelog>
  <changelog author="bp@suse.de" date="1618228801">- blacklist.conf: dd926880da8d x86/apic/of: Fix CPU devicetree-node lookups
- commit 92f0632</changelog>
  <changelog author="tiwai@suse.de" date="1618228802">- rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)
  The devel package requires the kernel binary package itself for building
  modules externally.
- commit 794be7b</changelog>
  <changelog author="jroedel@suse.de" date="1618228803">- KVM: SVM: avoid infinite loop on NPF from bad address (CVE-2020-36310 bsc#1184512).
- commit 3916df4</changelog>
  <changelog author="oneukum@suse.com" date="1618228804">- Documentation/ABI: sysfs-platform-ideapad-laptop: update device
  attribute paths (git-fixes).
- commit 2559651</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: lantiq: Wait for the GPHY firmware to be ready (git-fixes).
- commit d0452d2</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315210">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315211">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315212">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315213">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315214">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="691352cc75782527bc2e42012771ad65fe1c205166d8fb41d6ddf627355206db" name="cmake-gui" arch="x86_64">
  <version epoch="0" ver="3.17.0" rel="lp152.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Trim metadata redundancies from description.
- Avoid use of em dashes in summaries.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- cmake 3.15.3:
  * CrayPrgEnv compiler wrapper support updated for 19.06
- includes changes from 3.15.2:
  * Fix CMAKE_FIND_PACKAGE_PREFER_CONFIG variable causing the
    find_package() command to fail on a missing package even
    without the REQUIRED option</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1572177600">- cmake 3.15.4
  * In CMake 3.15.0 through 3.15.3, the EXCLUDE_FROM_ALL directory
    property was regressed from pre-3.14 behavior and caused targets
    within the directory to be excluded even from its own ?all?.
    This has been fixed. The bug also existed in 3.14.0 through
    3.14.6 and is fixed in 3.14.7.
- Use pkgconfig for dependencies where possible (required due to
  tumbleweed build changes)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update cmake conditionals to make sure the multibuild is
  nicely leveraged</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1572955200">- Drop debug patch (never in factory) and update patch numbers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573387200">- cmake 3.15.5:
  * no changelog available</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Switch back to libcurl-mini-devel to avoid new build cycle</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1574769600">- update to CMake 3.16
  Changelog see https://blog.kitware.com/cmake-3-16-0-available-for-download/
- drop patch form.patch, fixed upstream</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574856000">- Fix numbering of patches.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1576843200">- update to CMAke 3.16.2
  * FindBLAS: Consider OpenBLAS with thread libraries only with C or CXX
  * FindBoost: Add support for Boost 1.72
  * FindLAPACK: Fix support for LAPACK symbols inside BLAS libraries
  Full changelog see https://blog.kitware.com/cmake-3-16-2-available-for-download/</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1579003200">- Fix setting CMAKE_INSTALL_LIBDIR in cmake macro
  * This is a relative path, see `cmake --help-module GNUInstallDirs`
- Do NOT set -DCMAKE_SKIP_RPATH:BOOL=OFF
  * A lot of applications have private libraries in a subdirectory
    and require linking with RPATH which is totally valid.</changelog>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt;" date="1579003201">- use cmake generics in marcos.cmake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Add new -mini flavor in order to break up cycles
  * make sure the default cmake links now all system libraries
    and mini uses bundled stuff as needed
- Switch to python3 variant of Sphinx on the manpage/docu creation</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1581076800">- Revert "use cmake generics in marcos.cmake" it breaks many
  cases in stagings.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1581336000">- Revert LIBDIR change in macros - it is inconsistent (all other
  INSTALL_&lt;dir&gt;s use absolute paths), unneeded (paths may be
  absolute or relative), and breaks a number of packages.
- Update minimum libarchive version, &gt;= 3.3.3.
- Do not flag macros as config file.
- Adjust constraints (7G disk space is required, independent
  of architecture).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582113600">- Change cmake to be a meta-package that requires
  cmake-implementation. This new symbol is provided by the (newly
  named) cmake-full package as well as cmake-mini.
- This is needed as the original attempt of using Substitute in OBS
  actually rewrites the used spec files on disk, not only on the
  fly and we ended up with packages Requiring cmake-mini (which is
  not installable on end user systems).</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1584878400">- update to 3.17.0
  * cmake(1) gained a ?Ninja Multi-Config? generator, which
    can be used to build multiple configurations at once.
  * cmake(1) gained a ??debug-find? command-line option to
    enable additional human-readable output on where find
    commands search.
  * Target link properties are now transitive over
    private dependencies on static libraries. See policy ?CMP0099?.
  * cmake(1) gained a ?-E rm? command-line tool that can
    be used to remove directories and files.
  Full changelog see
  https://blog.kitware.com/cmake-3-17-0-available-for-download/</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1584964800">- Many Leap packages don't build without -DCMAKE_SKIP_RPATH:BOOL=ON
  so leave this change to the next major version of Leap / SLE</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1585224000">- Fix mistake in previous change.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628251200">- copypac from SLE-15, because of Firefox91 (bsc#1188891)
  (Dependency chain: cmake3 -&gt; Rust -&gt; Firefox)</changelog>
</package>
<package pkgid="b862261f1383285e77c72992f622f82d728e49b9896301a98b1c50cb89f6e1de" name="cmake-man" arch="x86_64">
  <version epoch="0" ver="3.17.0" rel="lp152.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Trim metadata redundancies from description.
- Avoid use of em dashes in summaries.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- cmake 3.15.3:
  * CrayPrgEnv compiler wrapper support updated for 19.06
- includes changes from 3.15.2:
  * Fix CMAKE_FIND_PACKAGE_PREFER_CONFIG variable causing the
    find_package() command to fail on a missing package even
    without the REQUIRED option</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1572177600">- cmake 3.15.4
  * In CMake 3.15.0 through 3.15.3, the EXCLUDE_FROM_ALL directory
    property was regressed from pre-3.14 behavior and caused targets
    within the directory to be excluded even from its own ?all?.
    This has been fixed. The bug also existed in 3.14.0 through
    3.14.6 and is fixed in 3.14.7.
- Use pkgconfig for dependencies where possible (required due to
  tumbleweed build changes)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update cmake conditionals to make sure the multibuild is
  nicely leveraged</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1572955200">- Drop debug patch (never in factory) and update patch numbers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573387200">- cmake 3.15.5:
  * no changelog available</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Switch back to libcurl-mini-devel to avoid new build cycle</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1574769600">- update to CMake 3.16
  Changelog see https://blog.kitware.com/cmake-3-16-0-available-for-download/
- drop patch form.patch, fixed upstream</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574856000">- Fix numbering of patches.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1576843200">- update to CMAke 3.16.2
  * FindBLAS: Consider OpenBLAS with thread libraries only with C or CXX
  * FindBoost: Add support for Boost 1.72
  * FindLAPACK: Fix support for LAPACK symbols inside BLAS libraries
  Full changelog see https://blog.kitware.com/cmake-3-16-2-available-for-download/</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1579003200">- Fix setting CMAKE_INSTALL_LIBDIR in cmake macro
  * This is a relative path, see `cmake --help-module GNUInstallDirs`
- Do NOT set -DCMAKE_SKIP_RPATH:BOOL=OFF
  * A lot of applications have private libraries in a subdirectory
    and require linking with RPATH which is totally valid.</changelog>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt;" date="1579003201">- use cmake generics in marcos.cmake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Add new -mini flavor in order to break up cycles
  * make sure the default cmake links now all system libraries
    and mini uses bundled stuff as needed
- Switch to python3 variant of Sphinx on the manpage/docu creation</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1581076800">- Revert "use cmake generics in marcos.cmake" it breaks many
  cases in stagings.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1581336000">- Revert LIBDIR change in macros - it is inconsistent (all other
  INSTALL_&lt;dir&gt;s use absolute paths), unneeded (paths may be
  absolute or relative), and breaks a number of packages.
- Update minimum libarchive version, &gt;= 3.3.3.
- Do not flag macros as config file.
- Adjust constraints (7G disk space is required, independent
  of architecture).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582113600">- Change cmake to be a meta-package that requires
  cmake-implementation. This new symbol is provided by the (newly
  named) cmake-full package as well as cmake-mini.
- This is needed as the original attempt of using Substitute in OBS
  actually rewrites the used spec files on disk, not only on the
  fly and we ended up with packages Requiring cmake-mini (which is
  not installable on end user systems).</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1584878400">- update to 3.17.0
  * cmake(1) gained a ?Ninja Multi-Config? generator, which
    can be used to build multiple configurations at once.
  * cmake(1) gained a ??debug-find? command-line option to
    enable additional human-readable output on where find
    commands search.
  * Target link properties are now transitive over
    private dependencies on static libraries. See policy ?CMP0099?.
  * cmake(1) gained a ?-E rm? command-line tool that can
    be used to remove directories and files.
  Full changelog see
  https://blog.kitware.com/cmake-3-17-0-available-for-download/</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1584964800">- Many Leap packages don't build without -DCMAKE_SKIP_RPATH:BOOL=ON
  so leave this change to the next major version of Leap / SLE</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1585224000">- Fix mistake in previous change.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628251200">- copypac from SLE-15, because of Firefox91 (bsc#1188891)
  (Dependency chain: cmake3 -&gt; Rust -&gt; Firefox)</changelog>
</package>
<package pkgid="7d82225ec38c786597e49505334a7b32a468d44a2ab63acb061dc6db788c6995" name="cmake3" arch="src">
  <version epoch="0" ver="3.17.0" rel="lp152.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Trim metadata redundancies from description.
- Avoid use of em dashes in summaries.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- cmake 3.15.3:
  * CrayPrgEnv compiler wrapper support updated for 19.06
- includes changes from 3.15.2:
  * Fix CMAKE_FIND_PACKAGE_PREFER_CONFIG variable causing the
    find_package() command to fail on a missing package even
    without the REQUIRED option</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1572177600">- cmake 3.15.4
  * In CMake 3.15.0 through 3.15.3, the EXCLUDE_FROM_ALL directory
    property was regressed from pre-3.14 behavior and caused targets
    within the directory to be excluded even from its own ?all?.
    This has been fixed. The bug also existed in 3.14.0 through
    3.14.6 and is fixed in 3.14.7.
- Use pkgconfig for dependencies where possible (required due to
  tumbleweed build changes)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update cmake conditionals to make sure the multibuild is
  nicely leveraged</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1572955200">- Drop debug patch (never in factory) and update patch numbers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573387200">- cmake 3.15.5:
  * no changelog available</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Switch back to libcurl-mini-devel to avoid new build cycle</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1574769600">- update to CMake 3.16
  Changelog see https://blog.kitware.com/cmake-3-16-0-available-for-download/
- drop patch form.patch, fixed upstream</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574856000">- Fix numbering of patches.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1576843200">- update to CMAke 3.16.2
  * FindBLAS: Consider OpenBLAS with thread libraries only with C or CXX
  * FindBoost: Add support for Boost 1.72
  * FindLAPACK: Fix support for LAPACK symbols inside BLAS libraries
  Full changelog see https://blog.kitware.com/cmake-3-16-2-available-for-download/</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1579003200">- Fix setting CMAKE_INSTALL_LIBDIR in cmake macro
  * This is a relative path, see `cmake --help-module GNUInstallDirs`
- Do NOT set -DCMAKE_SKIP_RPATH:BOOL=OFF
  * A lot of applications have private libraries in a subdirectory
    and require linking with RPATH which is totally valid.</changelog>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt;" date="1579003201">- use cmake generics in marcos.cmake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Add new -mini flavor in order to break up cycles
  * make sure the default cmake links now all system libraries
    and mini uses bundled stuff as needed
- Switch to python3 variant of Sphinx on the manpage/docu creation</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1581076800">- Revert "use cmake generics in marcos.cmake" it breaks many
  cases in stagings.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1581336000">- Revert LIBDIR change in macros - it is inconsistent (all other
  INSTALL_&lt;dir&gt;s use absolute paths), unneeded (paths may be
  absolute or relative), and breaks a number of packages.
- Update minimum libarchive version, &gt;= 3.3.3.
- Do not flag macros as config file.
- Adjust constraints (7G disk space is required, independent
  of architecture).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582113600">- Change cmake to be a meta-package that requires
  cmake-implementation. This new symbol is provided by the (newly
  named) cmake-full package as well as cmake-mini.
- This is needed as the original attempt of using Substitute in OBS
  actually rewrites the used spec files on disk, not only on the
  fly and we ended up with packages Requiring cmake-mini (which is
  not installable on end user systems).</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1584878400">- update to 3.17.0
  * cmake(1) gained a ?Ninja Multi-Config? generator, which
    can be used to build multiple configurations at once.
  * cmake(1) gained a ??debug-find? command-line option to
    enable additional human-readable output on where find
    commands search.
  * Target link properties are now transitive over
    private dependencies on static libraries. See policy ?CMP0099?.
  * cmake(1) gained a ?-E rm? command-line tool that can
    be used to remove directories and files.
  Full changelog see
  https://blog.kitware.com/cmake-3-17-0-available-for-download/</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1584964800">- Many Leap packages don't build without -DCMAKE_SKIP_RPATH:BOOL=ON
  so leave this change to the next major version of Leap / SLE</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1585224000">- Fix mistake in previous change.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628251200">- copypac from SLE-15, because of Firefox91 (bsc#1188891)
  (Dependency chain: cmake3 -&gt; Rust -&gt; Firefox)</changelog>
</package>
<package pkgid="73ef760e4ad0a82529cc20afd94f812c49ac3b0a966b83437022484399d88255" name="cmake3" arch="x86_64">
  <version epoch="0" ver="3.17.0" rel="lp152.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Trim metadata redundancies from description.
- Avoid use of em dashes in summaries.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- cmake 3.15.3:
  * CrayPrgEnv compiler wrapper support updated for 19.06
- includes changes from 3.15.2:
  * Fix CMAKE_FIND_PACKAGE_PREFER_CONFIG variable causing the
    find_package() command to fail on a missing package even
    without the REQUIRED option</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1572177600">- cmake 3.15.4
  * In CMake 3.15.0 through 3.15.3, the EXCLUDE_FROM_ALL directory
    property was regressed from pre-3.14 behavior and caused targets
    within the directory to be excluded even from its own ?all?.
    This has been fixed. The bug also existed in 3.14.0 through
    3.14.6 and is fixed in 3.14.7.
- Use pkgconfig for dependencies where possible (required due to
  tumbleweed build changes)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update cmake conditionals to make sure the multibuild is
  nicely leveraged</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1572955200">- Drop debug patch (never in factory) and update patch numbers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573387200">- cmake 3.15.5:
  * no changelog available</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Switch back to libcurl-mini-devel to avoid new build cycle</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1574769600">- update to CMake 3.16
  Changelog see https://blog.kitware.com/cmake-3-16-0-available-for-download/
- drop patch form.patch, fixed upstream</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574856000">- Fix numbering of patches.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1576843200">- update to CMAke 3.16.2
  * FindBLAS: Consider OpenBLAS with thread libraries only with C or CXX
  * FindBoost: Add support for Boost 1.72
  * FindLAPACK: Fix support for LAPACK symbols inside BLAS libraries
  Full changelog see https://blog.kitware.com/cmake-3-16-2-available-for-download/</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1579003200">- Fix setting CMAKE_INSTALL_LIBDIR in cmake macro
  * This is a relative path, see `cmake --help-module GNUInstallDirs`
- Do NOT set -DCMAKE_SKIP_RPATH:BOOL=OFF
  * A lot of applications have private libraries in a subdirectory
    and require linking with RPATH which is totally valid.</changelog>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt;" date="1579003201">- use cmake generics in marcos.cmake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Add new -mini flavor in order to break up cycles
  * make sure the default cmake links now all system libraries
    and mini uses bundled stuff as needed
- Switch to python3 variant of Sphinx on the manpage/docu creation</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1581076800">- Revert "use cmake generics in marcos.cmake" it breaks many
  cases in stagings.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1581336000">- Revert LIBDIR change in macros - it is inconsistent (all other
  INSTALL_&lt;dir&gt;s use absolute paths), unneeded (paths may be
  absolute or relative), and breaks a number of packages.
- Update minimum libarchive version, &gt;= 3.3.3.
- Do not flag macros as config file.
- Adjust constraints (7G disk space is required, independent
  of architecture).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582113600">- Change cmake to be a meta-package that requires
  cmake-implementation. This new symbol is provided by the (newly
  named) cmake-full package as well as cmake-mini.
- This is needed as the original attempt of using Substitute in OBS
  actually rewrites the used spec files on disk, not only on the
  fly and we ended up with packages Requiring cmake-mini (which is
  not installable on end user systems).</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1584878400">- update to 3.17.0
  * cmake(1) gained a ?Ninja Multi-Config? generator, which
    can be used to build multiple configurations at once.
  * cmake(1) gained a ??debug-find? command-line option to
    enable additional human-readable output on where find
    commands search.
  * Target link properties are now transitive over
    private dependencies on static libraries. See policy ?CMP0099?.
  * cmake(1) gained a ?-E rm? command-line tool that can
    be used to remove directories and files.
  Full changelog see
  https://blog.kitware.com/cmake-3-17-0-available-for-download/</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1584964800">- Many Leap packages don't build without -DCMAKE_SKIP_RPATH:BOOL=ON
  so leave this change to the next major version of Leap / SLE</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1585224000">- Fix mistake in previous change.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628251200">- copypac from SLE-15, because of Firefox91 (bsc#1188891)
  (Dependency chain: cmake3 -&gt; Rust -&gt; Firefox)</changelog>
</package>
<package pkgid="56c1f6537d8ef697459fb9999376713d75f352e46d1bda490bd3d488ff86dacb" name="cmake3-full" arch="src">
  <version epoch="0" ver="3.17.0" rel="lp152.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Trim metadata redundancies from description.
- Avoid use of em dashes in summaries.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- cmake 3.15.3:
  * CrayPrgEnv compiler wrapper support updated for 19.06
- includes changes from 3.15.2:
  * Fix CMAKE_FIND_PACKAGE_PREFER_CONFIG variable causing the
    find_package() command to fail on a missing package even
    without the REQUIRED option</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1572177600">- cmake 3.15.4
  * In CMake 3.15.0 through 3.15.3, the EXCLUDE_FROM_ALL directory
    property was regressed from pre-3.14 behavior and caused targets
    within the directory to be excluded even from its own ?all?.
    This has been fixed. The bug also existed in 3.14.0 through
    3.14.6 and is fixed in 3.14.7.
- Use pkgconfig for dependencies where possible (required due to
  tumbleweed build changes)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update cmake conditionals to make sure the multibuild is
  nicely leveraged</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1572955200">- Drop debug patch (never in factory) and update patch numbers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573387200">- cmake 3.15.5:
  * no changelog available</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Switch back to libcurl-mini-devel to avoid new build cycle</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1574769600">- update to CMake 3.16
  Changelog see https://blog.kitware.com/cmake-3-16-0-available-for-download/
- drop patch form.patch, fixed upstream</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574856000">- Fix numbering of patches.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1576843200">- update to CMAke 3.16.2
  * FindBLAS: Consider OpenBLAS with thread libraries only with C or CXX
  * FindBoost: Add support for Boost 1.72
  * FindLAPACK: Fix support for LAPACK symbols inside BLAS libraries
  Full changelog see https://blog.kitware.com/cmake-3-16-2-available-for-download/</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1579003200">- Fix setting CMAKE_INSTALL_LIBDIR in cmake macro
  * This is a relative path, see `cmake --help-module GNUInstallDirs`
- Do NOT set -DCMAKE_SKIP_RPATH:BOOL=OFF
  * A lot of applications have private libraries in a subdirectory
    and require linking with RPATH which is totally valid.</changelog>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt;" date="1579003201">- use cmake generics in marcos.cmake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Add new -mini flavor in order to break up cycles
  * make sure the default cmake links now all system libraries
    and mini uses bundled stuff as needed
- Switch to python3 variant of Sphinx on the manpage/docu creation</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1581076800">- Revert "use cmake generics in marcos.cmake" it breaks many
  cases in stagings.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1581336000">- Revert LIBDIR change in macros - it is inconsistent (all other
  INSTALL_&lt;dir&gt;s use absolute paths), unneeded (paths may be
  absolute or relative), and breaks a number of packages.
- Update minimum libarchive version, &gt;= 3.3.3.
- Do not flag macros as config file.
- Adjust constraints (7G disk space is required, independent
  of architecture).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582113600">- Change cmake to be a meta-package that requires
  cmake-implementation. This new symbol is provided by the (newly
  named) cmake-full package as well as cmake-mini.
- This is needed as the original attempt of using Substitute in OBS
  actually rewrites the used spec files on disk, not only on the
  fly and we ended up with packages Requiring cmake-mini (which is
  not installable on end user systems).</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1584878400">- update to 3.17.0
  * cmake(1) gained a ?Ninja Multi-Config? generator, which
    can be used to build multiple configurations at once.
  * cmake(1) gained a ??debug-find? command-line option to
    enable additional human-readable output on where find
    commands search.
  * Target link properties are now transitive over
    private dependencies on static libraries. See policy ?CMP0099?.
  * cmake(1) gained a ?-E rm? command-line tool that can
    be used to remove directories and files.
  Full changelog see
  https://blog.kitware.com/cmake-3-17-0-available-for-download/</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1584964800">- Many Leap packages don't build without -DCMAKE_SKIP_RPATH:BOOL=ON
  so leave this change to the next major version of Leap / SLE</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1585224000">- Fix mistake in previous change.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628251200">- copypac from SLE-15, because of Firefox91 (bsc#1188891)
  (Dependency chain: cmake3 -&gt; Rust -&gt; Firefox)</changelog>
</package>
<package pkgid="40bdd5bf779fb16111905d17c016671aa39b78e56a864cff7089bb24faa3c9d5" name="cmake3-full" arch="x86_64">
  <version epoch="0" ver="3.17.0" rel="lp152.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Trim metadata redundancies from description.
- Avoid use of em dashes in summaries.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- cmake 3.15.3:
  * CrayPrgEnv compiler wrapper support updated for 19.06
- includes changes from 3.15.2:
  * Fix CMAKE_FIND_PACKAGE_PREFER_CONFIG variable causing the
    find_package() command to fail on a missing package even
    without the REQUIRED option</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1572177600">- cmake 3.15.4
  * In CMake 3.15.0 through 3.15.3, the EXCLUDE_FROM_ALL directory
    property was regressed from pre-3.14 behavior and caused targets
    within the directory to be excluded even from its own ?all?.
    This has been fixed. The bug also existed in 3.14.0 through
    3.14.6 and is fixed in 3.14.7.
- Use pkgconfig for dependencies where possible (required due to
  tumbleweed build changes)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update cmake conditionals to make sure the multibuild is
  nicely leveraged</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1572955200">- Drop debug patch (never in factory) and update patch numbers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573387200">- cmake 3.15.5:
  * no changelog available</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Switch back to libcurl-mini-devel to avoid new build cycle</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1574769600">- update to CMake 3.16
  Changelog see https://blog.kitware.com/cmake-3-16-0-available-for-download/
- drop patch form.patch, fixed upstream</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574856000">- Fix numbering of patches.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1576843200">- update to CMAke 3.16.2
  * FindBLAS: Consider OpenBLAS with thread libraries only with C or CXX
  * FindBoost: Add support for Boost 1.72
  * FindLAPACK: Fix support for LAPACK symbols inside BLAS libraries
  Full changelog see https://blog.kitware.com/cmake-3-16-2-available-for-download/</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1579003200">- Fix setting CMAKE_INSTALL_LIBDIR in cmake macro
  * This is a relative path, see `cmake --help-module GNUInstallDirs`
- Do NOT set -DCMAKE_SKIP_RPATH:BOOL=OFF
  * A lot of applications have private libraries in a subdirectory
    and require linking with RPATH which is totally valid.</changelog>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt;" date="1579003201">- use cmake generics in marcos.cmake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Add new -mini flavor in order to break up cycles
  * make sure the default cmake links now all system libraries
    and mini uses bundled stuff as needed
- Switch to python3 variant of Sphinx on the manpage/docu creation</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1581076800">- Revert "use cmake generics in marcos.cmake" it breaks many
  cases in stagings.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1581336000">- Revert LIBDIR change in macros - it is inconsistent (all other
  INSTALL_&lt;dir&gt;s use absolute paths), unneeded (paths may be
  absolute or relative), and breaks a number of packages.
- Update minimum libarchive version, &gt;= 3.3.3.
- Do not flag macros as config file.
- Adjust constraints (7G disk space is required, independent
  of architecture).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582113600">- Change cmake to be a meta-package that requires
  cmake-implementation. This new symbol is provided by the (newly
  named) cmake-full package as well as cmake-mini.
- This is needed as the original attempt of using Substitute in OBS
  actually rewrites the used spec files on disk, not only on the
  fly and we ended up with packages Requiring cmake-mini (which is
  not installable on end user systems).</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1584878400">- update to 3.17.0
  * cmake(1) gained a ?Ninja Multi-Config? generator, which
    can be used to build multiple configurations at once.
  * cmake(1) gained a ??debug-find? command-line option to
    enable additional human-readable output on where find
    commands search.
  * Target link properties are now transitive over
    private dependencies on static libraries. See policy ?CMP0099?.
  * cmake(1) gained a ?-E rm? command-line tool that can
    be used to remove directories and files.
  Full changelog see
  https://blog.kitware.com/cmake-3-17-0-available-for-download/</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1584964800">- Many Leap packages don't build without -DCMAKE_SKIP_RPATH:BOOL=ON
  so leave this change to the next major version of Leap / SLE</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1585224000">- Fix mistake in previous change.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628251200">- copypac from SLE-15, because of Firefox91 (bsc#1188891)
  (Dependency chain: cmake3 -&gt; Rust -&gt; Firefox)</changelog>
</package>
<package pkgid="20f643db3b654d3fd17e9f8f94e15678faaa01fc0d9b1f9e3c886086517073c6" name="cmake3-mini" arch="src">
  <version epoch="0" ver="3.17.0" rel="lp152.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Trim metadata redundancies from description.
- Avoid use of em dashes in summaries.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- cmake 3.15.3:
  * CrayPrgEnv compiler wrapper support updated for 19.06
- includes changes from 3.15.2:
  * Fix CMAKE_FIND_PACKAGE_PREFER_CONFIG variable causing the
    find_package() command to fail on a missing package even
    without the REQUIRED option</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1572177600">- cmake 3.15.4
  * In CMake 3.15.0 through 3.15.3, the EXCLUDE_FROM_ALL directory
    property was regressed from pre-3.14 behavior and caused targets
    within the directory to be excluded even from its own ?all?.
    This has been fixed. The bug also existed in 3.14.0 through
    3.14.6 and is fixed in 3.14.7.
- Use pkgconfig for dependencies where possible (required due to
  tumbleweed build changes)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update cmake conditionals to make sure the multibuild is
  nicely leveraged</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1572955200">- Drop debug patch (never in factory) and update patch numbers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573387200">- cmake 3.15.5:
  * no changelog available</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Switch back to libcurl-mini-devel to avoid new build cycle</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1574769600">- update to CMake 3.16
  Changelog see https://blog.kitware.com/cmake-3-16-0-available-for-download/
- drop patch form.patch, fixed upstream</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574856000">- Fix numbering of patches.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1576843200">- update to CMAke 3.16.2
  * FindBLAS: Consider OpenBLAS with thread libraries only with C or CXX
  * FindBoost: Add support for Boost 1.72
  * FindLAPACK: Fix support for LAPACK symbols inside BLAS libraries
  Full changelog see https://blog.kitware.com/cmake-3-16-2-available-for-download/</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1579003200">- Fix setting CMAKE_INSTALL_LIBDIR in cmake macro
  * This is a relative path, see `cmake --help-module GNUInstallDirs`
- Do NOT set -DCMAKE_SKIP_RPATH:BOOL=OFF
  * A lot of applications have private libraries in a subdirectory
    and require linking with RPATH which is totally valid.</changelog>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt;" date="1579003201">- use cmake generics in marcos.cmake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Add new -mini flavor in order to break up cycles
  * make sure the default cmake links now all system libraries
    and mini uses bundled stuff as needed
- Switch to python3 variant of Sphinx on the manpage/docu creation</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1581076800">- Revert "use cmake generics in marcos.cmake" it breaks many
  cases in stagings.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1581336000">- Revert LIBDIR change in macros - it is inconsistent (all other
  INSTALL_&lt;dir&gt;s use absolute paths), unneeded (paths may be
  absolute or relative), and breaks a number of packages.
- Update minimum libarchive version, &gt;= 3.3.3.
- Do not flag macros as config file.
- Adjust constraints (7G disk space is required, independent
  of architecture).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582113600">- Change cmake to be a meta-package that requires
  cmake-implementation. This new symbol is provided by the (newly
  named) cmake-full package as well as cmake-mini.
- This is needed as the original attempt of using Substitute in OBS
  actually rewrites the used spec files on disk, not only on the
  fly and we ended up with packages Requiring cmake-mini (which is
  not installable on end user systems).</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1584878400">- update to 3.17.0
  * cmake(1) gained a ?Ninja Multi-Config? generator, which
    can be used to build multiple configurations at once.
  * cmake(1) gained a ??debug-find? command-line option to
    enable additional human-readable output on where find
    commands search.
  * Target link properties are now transitive over
    private dependencies on static libraries. See policy ?CMP0099?.
  * cmake(1) gained a ?-E rm? command-line tool that can
    be used to remove directories and files.
  Full changelog see
  https://blog.kitware.com/cmake-3-17-0-available-for-download/</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1584964800">- Many Leap packages don't build without -DCMAKE_SKIP_RPATH:BOOL=ON
  so leave this change to the next major version of Leap / SLE</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1585224000">- Fix mistake in previous change.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628251200">- copypac from SLE-15, because of Firefox91 (bsc#1188891)
  (Dependency chain: cmake3 -&gt; Rust -&gt; Firefox)</changelog>
</package>
<package pkgid="cccf4bb323dc26b31bd0ba1b9d8190ca73573580daa1f716d27c0306cf1caa35" name="cmake3-mini" arch="x86_64">
  <version epoch="0" ver="3.17.0" rel="lp152.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Trim metadata redundancies from description.
- Avoid use of em dashes in summaries.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- cmake 3.15.3:
  * CrayPrgEnv compiler wrapper support updated for 19.06
- includes changes from 3.15.2:
  * Fix CMAKE_FIND_PACKAGE_PREFER_CONFIG variable causing the
    find_package() command to fail on a missing package even
    without the REQUIRED option</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1572177600">- cmake 3.15.4
  * In CMake 3.15.0 through 3.15.3, the EXCLUDE_FROM_ALL directory
    property was regressed from pre-3.14 behavior and caused targets
    within the directory to be excluded even from its own ?all?.
    This has been fixed. The bug also existed in 3.14.0 through
    3.14.6 and is fixed in 3.14.7.
- Use pkgconfig for dependencies where possible (required due to
  tumbleweed build changes)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update cmake conditionals to make sure the multibuild is
  nicely leveraged</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1572955200">- Drop debug patch (never in factory) and update patch numbers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573387200">- cmake 3.15.5:
  * no changelog available</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Switch back to libcurl-mini-devel to avoid new build cycle</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1574769600">- update to CMake 3.16
  Changelog see https://blog.kitware.com/cmake-3-16-0-available-for-download/
- drop patch form.patch, fixed upstream</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574856000">- Fix numbering of patches.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1576843200">- update to CMAke 3.16.2
  * FindBLAS: Consider OpenBLAS with thread libraries only with C or CXX
  * FindBoost: Add support for Boost 1.72
  * FindLAPACK: Fix support for LAPACK symbols inside BLAS libraries
  Full changelog see https://blog.kitware.com/cmake-3-16-2-available-for-download/</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1579003200">- Fix setting CMAKE_INSTALL_LIBDIR in cmake macro
  * This is a relative path, see `cmake --help-module GNUInstallDirs`
- Do NOT set -DCMAKE_SKIP_RPATH:BOOL=OFF
  * A lot of applications have private libraries in a subdirectory
    and require linking with RPATH which is totally valid.</changelog>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt;" date="1579003201">- use cmake generics in marcos.cmake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Add new -mini flavor in order to break up cycles
  * make sure the default cmake links now all system libraries
    and mini uses bundled stuff as needed
- Switch to python3 variant of Sphinx on the manpage/docu creation</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1581076800">- Revert "use cmake generics in marcos.cmake" it breaks many
  cases in stagings.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1581336000">- Revert LIBDIR change in macros - it is inconsistent (all other
  INSTALL_&lt;dir&gt;s use absolute paths), unneeded (paths may be
  absolute or relative), and breaks a number of packages.
- Update minimum libarchive version, &gt;= 3.3.3.
- Do not flag macros as config file.
- Adjust constraints (7G disk space is required, independent
  of architecture).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582113600">- Change cmake to be a meta-package that requires
  cmake-implementation. This new symbol is provided by the (newly
  named) cmake-full package as well as cmake-mini.
- This is needed as the original attempt of using Substitute in OBS
  actually rewrites the used spec files on disk, not only on the
  fly and we ended up with packages Requiring cmake-mini (which is
  not installable on end user systems).</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1584878400">- update to 3.17.0
  * cmake(1) gained a ?Ninja Multi-Config? generator, which
    can be used to build multiple configurations at once.
  * cmake(1) gained a ??debug-find? command-line option to
    enable additional human-readable output on where find
    commands search.
  * Target link properties are now transitive over
    private dependencies on static libraries. See policy ?CMP0099?.
  * cmake(1) gained a ?-E rm? command-line tool that can
    be used to remove directories and files.
  Full changelog see
  https://blog.kitware.com/cmake-3-17-0-available-for-download/</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1584964800">- Many Leap packages don't build without -DCMAKE_SKIP_RPATH:BOOL=ON
  so leave this change to the next major version of Leap / SLE</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1585224000">- Fix mistake in previous change.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628251200">- copypac from SLE-15, because of Firefox91 (bsc#1188891)
  (Dependency chain: cmake3 -&gt; Rust -&gt; Firefox)</changelog>
</package>
<package pkgid="310b1df047461a155008c4149d3fdb8a7785b2a4b322d6b1a48bce2921b32482" name="cmake3-ui" arch="src">
  <version epoch="0" ver="3.17.0" rel="lp152.2.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Trim metadata redundancies from description.
- Avoid use of em dashes in summaries.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- cmake 3.15.3:
  * CrayPrgEnv compiler wrapper support updated for 19.06
- includes changes from 3.15.2:
  * Fix CMAKE_FIND_PACKAGE_PREFER_CONFIG variable causing the
    find_package() command to fail on a missing package even
    without the REQUIRED option</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1572177600">- cmake 3.15.4
  * In CMake 3.15.0 through 3.15.3, the EXCLUDE_FROM_ALL directory
    property was regressed from pre-3.14 behavior and caused targets
    within the directory to be excluded even from its own ?all?.
    This has been fixed. The bug also existed in 3.14.0 through
    3.14.6 and is fixed in 3.14.7.
- Use pkgconfig for dependencies where possible (required due to
  tumbleweed build changes)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572609600">- Update cmake conditionals to make sure the multibuild is
  nicely leveraged</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1572955200">- Drop debug patch (never in factory) and update patch numbers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1573387200">- cmake 3.15.5:
  * no changelog available</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1573646400">- Switch back to libcurl-mini-devel to avoid new build cycle</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1574769600">- update to CMake 3.16
  Changelog see https://blog.kitware.com/cmake-3-16-0-available-for-download/
- drop patch form.patch, fixed upstream</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574856000">- Fix numbering of patches.</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1576843200">- update to CMAke 3.16.2
  * FindBLAS: Consider OpenBLAS with thread libraries only with C or CXX
  * FindBoost: Add support for Boost 1.72
  * FindLAPACK: Fix support for LAPACK symbols inside BLAS libraries
  Full changelog see https://blog.kitware.com/cmake-3-16-2-available-for-download/</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1579003200">- Fix setting CMAKE_INSTALL_LIBDIR in cmake macro
  * This is a relative path, see `cmake --help-module GNUInstallDirs`
- Do NOT set -DCMAKE_SKIP_RPATH:BOOL=OFF
  * A lot of applications have private libraries in a subdirectory
    and require linking with RPATH which is totally valid.</changelog>
  <changelog author="Christoph Junghans &lt;junghans@votca.org&gt;" date="1579003201">- use cmake generics in marcos.cmake</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580904000">- Add new -mini flavor in order to break up cycles
  * make sure the default cmake links now all system libraries
    and mini uses bundled stuff as needed
- Switch to python3 variant of Sphinx on the manpage/docu creation</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1581076800">- Revert "use cmake generics in marcos.cmake" it breaks many
  cases in stagings.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1581336000">- Revert LIBDIR change in macros - it is inconsistent (all other
  INSTALL_&lt;dir&gt;s use absolute paths), unneeded (paths may be
  absolute or relative), and breaks a number of packages.
- Update minimum libarchive version, &gt;= 3.3.3.
- Do not flag macros as config file.
- Adjust constraints (7G disk space is required, independent
  of architecture).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582113600">- Change cmake to be a meta-package that requires
  cmake-implementation. This new symbol is provided by the (newly
  named) cmake-full package as well as cmake-mini.
- This is needed as the original attempt of using Substitute in OBS
  actually rewrites the used spec files on disk, not only on the
  fly and we ended up with packages Requiring cmake-mini (which is
  not installable on end user systems).</changelog>
  <changelog author="Christoph G &lt;foss@grueninger.de&gt;" date="1584878400">- update to 3.17.0
  * cmake(1) gained a ?Ninja Multi-Config? generator, which
    can be used to build multiple configurations at once.
  * cmake(1) gained a ??debug-find? command-line option to
    enable additional human-readable output on where find
    commands search.
  * Target link properties are now transitive over
    private dependencies on static libraries. See policy ?CMP0099?.
  * cmake(1) gained a ?-E rm? command-line tool that can
    be used to remove directories and files.
  Full changelog see
  https://blog.kitware.com/cmake-3-17-0-available-for-download/</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1584964800">- Many Leap packages don't build without -DCMAKE_SKIP_RPATH:BOOL=ON
  so leave this change to the next major version of Leap / SLE</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1585224000">- Fix mistake in previous change.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1628251200">- copypac from SLE-15, because of Firefox91 (bsc#1188891)
  (Dependency chain: cmake3 -&gt; Rust -&gt; Firefox)</changelog>
</package>
<package pkgid="fd186645cc970af9f3b8f3b7e05e95a4df8a42868428e999f73170d75ce13650" name="cni-plugins" arch="src">
  <version epoch="0" ver="0.8.6" rel="lp152.2.4.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
</package>
<package pkgid="cadbe353c52384274046f3277d28b28685422741c6e3ec9b1baec75b89965762" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="lp152.2.4.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
</package>
<package pkgid="ba757ab728f3359616f78851dd02cc0756c23bc18e64ffd77d0a1ec36b77eca4" name="cobbler" arch="noarch">
  <version epoch="0" ver="3.1.2" rel="lp152.6.3.1"/>
  <changelog author="trenn@suse.de" date="1568721600">- Update to latest git HEAD
  - Fixes permission denied in apache2 context when trying to write
    cobbler log
  - Fixes a bad import in import_signature (item)
  - Fixes bad shebang bash path in mkgrub.sh (used in post section)</changelog>
  <changelog author="trenn@suse.de" date="1568808000">- Fix cobbler sync for dhcp and dns enabled due to latest module
  renaming patches</changelog>
  <changelog author="trenn@suse.de" date="1570536000">- Switch to openSUSE latest_mulitarch_work for shortterm until
  everything is in place and submitted mainline
- started to switch to Sphinx manpage generation, but comment out.
  SuMa people must have done this already somewhere.
- Already mainline:
  D fix_module_renaming.diff</changelog>
  <changelog author="trenn@suse.de" date="1572004800">- Update to latest git HEAD code base (commit fbebd758)
- Adjusted manpage creation (needs sphinx as BuildRequires)</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1574164800">- Fix for cobbler import and buildiso (bsc#1156574)
- Added:
  * kopts-utils-path.diff
  * no-system-in-kopts-call.diff
  * item-repo-import-fix.diff</changelog>
  <changelog author="trenn@suse.de" date="1574769600">- Update to latest git HEAD code base
  This version (from mainline so for quite a while already)
  also includes fixes for "bsc#1149075" and bsc#1151875
  These patches are mainline already:
  D kopts-utils-path.diff
  D item-repo-import-fix.diff
  D no-system-in-kopts-call.diff
  This patch is going to be submitted mainline:
  A cobbler_management_mac.diff
- Fix up manpage creation: Do not zip manpages ourselves
  Thanks to namtrac.</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1578916800">- Updated to version 3.1.1.
  * Introduce new packaging from upstream
  * Changelog see below
- New:
  * We are now having a cross-distro specfile which can be build in the OBS
    (#2220) - before rewritten it was improved by #2144 &amp; #2174
  * Grub Submenu for net-booting machines (#2217)
  * Building the Cent-OS RPMs in Docker (#2190 #2189)
  * Reintroduced manpage build in setup.py (#2185)
  * mgmt_parameters are now passed to the dhcp template (#2182)
  * Using the standard Pyhton3 logger instead of a custom one (#2160 #2139 #2151)
  * Script for converting the settings file from 3.0.0 to 3.0.1 (#2154)
  * Docs now inside the repo instead of cobbler.github.io and improved with sphinx (#2117)
- Changes:
  * The default tftpboot directory is now /var/lib/tftpboot instead of previously /srv/tftpboot (#2220)
  * Distro signatures were adjusted where necessary (#2219 #2134)
  * Removed requirements.txt and placed the requirements in setup.py (#2204)
  * Display only entries in grub which are from the same arch (#2191 #2216)
  * Change the name of the cobbler manpage form cobbler-cli to cobbler back and move it to section 8 (#2188 #2186)
- Bugfixes:
  * Incremented Version to 3.1.1 from 3.0.1
  * S390 Support was cleaned up (#2207 #2178)
  * PowerPC Support was cleaned up (#2178)
  * Added a missing import while importing a distro with cobbler import (#2201)
  * Fixed a case where a stacktrace would be produced so pass none instead (#2203)
  * Rename of suse_kopts_textmode_overwrite to kops_overwrite to utils (#2143 #2200)
  * Fix rsync subprocess call (#2199 #2179)
  * Fixed an error where the template rendering did not work (#2176)
  * Fixed some cobbler import errors (#2172)
  * Wrong shebang in various scripts (#2148)
  * Fix some imports which fixes errors introduced by the remodularization (#2150 #2153)
- Other:
  * Issue Templates for Github (#2187)</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1582545600">- Removed not needed files in obs. This is now all mainline:
  D logrotate_cobbler
  D fix_hardcoded_libpath_for_websession.patch
  D fence_ipmitool.template
  D cobbler_management_mac.diff
  D AUTHORS
- Added source files:
  A cobbler.obsinfo
  A cobbler-rpmlintrc
  D exclude_get-loaders_command.patch
  Spec file is mostly adopted to mainline spec file.
  Still it is not directly extracted from mainline tarball.
  First the remaining diff has to be submitted mainline.
- Change group to Productivity/Networking/Boot/Servers
- Disable any python_*_dependency_generator macros
  According to Tomas Chvatal they are much too experimental yet
  in OBS to be used. They have to be undefined, because of a half
  baken implementation in SLE 15 SP2 build env (defined but not
  properly implemented). At some point of time the introduced
  undefine python_*_dependency_generator
  will be conditionally removed via suse_version.</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1590580800">- New:
  * For the distro there is now a parameter remote_boot_initrd and remote_boot_kernel ()
  * For the profile there is now a parameter filename for DHCP. (#2280)
  * Signatures for ESXi 6 and 7 (#2308)
  * The hardlink command is now detected more dynamically and thus more error resistant (#2297)
  * HTTPBoot will now work in some cases out of the bug. (#2295)
  * Additional DNS query for a case where the wrong record was queried in the nsupdate system case (#2285)
- Changes:
  * Enabled a lot of tests, removed some and implemented new. (#2202)
  * Removed not used files from the codebase. (#2302)
  * Exchanged mkisofs to xorrisofs. (#2296)
  * Removed duplicate code. (#2224)
  * Removed unreachable code. (#2223)
  * Snippet creation and deletion now works again via xmlrpc. (#2244)
  * Replace createrepo with createrepo_c. (#2266)
  * Enable Kerberos through having a case sensitive users.conf. (#2272)
- Bugfixes:
  * General various Bugfixes (#2331, )
  * Makefile usage and commands. (#2344, #2304)
  * Fix the dhcp template. (#2314)
  * Creation of the management classes and gPXE. (#2310)
  * Fix the scm_track module. (#2275, #2279)
  * Fix passing the netdevice parameter correctly to the linuxrc. (#2263)
  * powerstatus from cobbler now works thanks to a wrapper for ipmitool. (#2267)
  * In case the LDAP is used for auth, it now works with ADs. (#2274)
  * Fix passthru authentication. (#2271)
- Other:
  * Add Codecov. (#2229)
  * Documentation updates. (#2333, #2326, #2305, #2249, #2268)
  * Buildprocess:
  * Recreation and cleanup of Grub2. (#2278)
  * Fix small errors for openSUSE Leap. (#2233)
  * Fix rpmlint errors. (#2237)
  * Maximum compatibility for debbuild package creation. (#2255, #2292, #2242, #2300)
  * Fixes related to our CI Pipeline (#2254, #2269)
  * Internal Code cleanup (#2273, #2270)
- Breaking Changes:
  * Hash handling in users.digest file. (#2299)</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1590667200">- Bring changelog in sync with Uyuni:
- Fixes template engine selection(bsc#1170462)
  Fixed mainline by commit 33c769e99
  D fix-template-engine-selection.patch
- Fixes a template rendering error (bsc#1169779)
  Fixed mainline by commit 5e5ef6c8c
  D fixes-a-template-rendering-error.patch
- use systemctl to restart cobblerd on logfile rotation (bsc#1169207)
  Mainline logrotate conf file uses already /sbin/service instead of
  outdated: /etc/init.d/cobblerd
- Fix cobbler sync for DHCP or DNS (bsc#1169553)
  Fixed mainline by commit 2d6cfe42da
  D fix_cobbler_sync_for_dhcp_or_dns.diff
- Signatures file now uses "default_autoinstall" which fixes import
  problem happening with some distributions (bsc#1159010)
  Fixed mainline by commit 33d181199f0da1da
- Fix for kernel and initrd detection (bsc#1159010)
  Fixed mainline by commit 872f505f66c50059</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599220800">- Removes Tornado as dependency and only recommends Ldap3</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599220801">- Adds requirement for python-distro</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599480000">- cgi.parse_qs is deprecated. Using urllib instead.
- Added:
  * cgi_parse_qs_is_deprecated.diff</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599480001">- Adding tornado dependency for cobbler tftpd again.</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1599652800">- Switch to new refactored auth module.
- Added:
  * refactored_auth_module.diff</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599825600">- Adds LoadModule definitions for openSUSE/SLE
- Added:
  * load_module_apache_suse_fix.diff</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1600171200">- Add cobbler-tests subpackage for unit testing for openSUSE/SLE</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1600776000">- Add fence-agents package as requirement
- Fix position of wrong endif</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1604404800">- Fixes usage of str.join()
- Added:
  * fix-for-old-str.join-usage.diff</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1605268800">- Remove redundant '.json' suffix
- Added:
  * remove-redundant-json-suffix.diff</changelog>
</package>
<package pkgid="80fce1c873bed94b25c811e3bb0a97e49b5d32f4ccc7ec2945243a854692f4d0" name="cobbler" arch="src">
  <version epoch="0" ver="3.1.2" rel="lp152.6.3.1"/>
  <changelog author="trenn@suse.de" date="1568721600">- Update to latest git HEAD
  - Fixes permission denied in apache2 context when trying to write
    cobbler log
  - Fixes a bad import in import_signature (item)
  - Fixes bad shebang bash path in mkgrub.sh (used in post section)</changelog>
  <changelog author="trenn@suse.de" date="1568808000">- Fix cobbler sync for dhcp and dns enabled due to latest module
  renaming patches</changelog>
  <changelog author="trenn@suse.de" date="1570536000">- Switch to openSUSE latest_mulitarch_work for shortterm until
  everything is in place and submitted mainline
- started to switch to Sphinx manpage generation, but comment out.
  SuMa people must have done this already somewhere.
- Already mainline:
  D fix_module_renaming.diff</changelog>
  <changelog author="trenn@suse.de" date="1572004800">- Update to latest git HEAD code base (commit fbebd758)
- Adjusted manpage creation (needs sphinx as BuildRequires)</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1574164800">- Fix for cobbler import and buildiso (bsc#1156574)
- Added:
  * kopts-utils-path.diff
  * no-system-in-kopts-call.diff
  * item-repo-import-fix.diff</changelog>
  <changelog author="trenn@suse.de" date="1574769600">- Update to latest git HEAD code base
  This version (from mainline so for quite a while already)
  also includes fixes for "bsc#1149075" and bsc#1151875
  These patches are mainline already:
  D kopts-utils-path.diff
  D item-repo-import-fix.diff
  D no-system-in-kopts-call.diff
  This patch is going to be submitted mainline:
  A cobbler_management_mac.diff
- Fix up manpage creation: Do not zip manpages ourselves
  Thanks to namtrac.</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1578916800">- Updated to version 3.1.1.
  * Introduce new packaging from upstream
  * Changelog see below
- New:
  * We are now having a cross-distro specfile which can be build in the OBS
    (#2220) - before rewritten it was improved by #2144 &amp; #2174
  * Grub Submenu for net-booting machines (#2217)
  * Building the Cent-OS RPMs in Docker (#2190 #2189)
  * Reintroduced manpage build in setup.py (#2185)
  * mgmt_parameters are now passed to the dhcp template (#2182)
  * Using the standard Pyhton3 logger instead of a custom one (#2160 #2139 #2151)
  * Script for converting the settings file from 3.0.0 to 3.0.1 (#2154)
  * Docs now inside the repo instead of cobbler.github.io and improved with sphinx (#2117)
- Changes:
  * The default tftpboot directory is now /var/lib/tftpboot instead of previously /srv/tftpboot (#2220)
  * Distro signatures were adjusted where necessary (#2219 #2134)
  * Removed requirements.txt and placed the requirements in setup.py (#2204)
  * Display only entries in grub which are from the same arch (#2191 #2216)
  * Change the name of the cobbler manpage form cobbler-cli to cobbler back and move it to section 8 (#2188 #2186)
- Bugfixes:
  * Incremented Version to 3.1.1 from 3.0.1
  * S390 Support was cleaned up (#2207 #2178)
  * PowerPC Support was cleaned up (#2178)
  * Added a missing import while importing a distro with cobbler import (#2201)
  * Fixed a case where a stacktrace would be produced so pass none instead (#2203)
  * Rename of suse_kopts_textmode_overwrite to kops_overwrite to utils (#2143 #2200)
  * Fix rsync subprocess call (#2199 #2179)
  * Fixed an error where the template rendering did not work (#2176)
  * Fixed some cobbler import errors (#2172)
  * Wrong shebang in various scripts (#2148)
  * Fix some imports which fixes errors introduced by the remodularization (#2150 #2153)
- Other:
  * Issue Templates for Github (#2187)</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1582545600">- Removed not needed files in obs. This is now all mainline:
  D logrotate_cobbler
  D fix_hardcoded_libpath_for_websession.patch
  D fence_ipmitool.template
  D cobbler_management_mac.diff
  D AUTHORS
- Added source files:
  A cobbler.obsinfo
  A cobbler-rpmlintrc
  D exclude_get-loaders_command.patch
  Spec file is mostly adopted to mainline spec file.
  Still it is not directly extracted from mainline tarball.
  First the remaining diff has to be submitted mainline.
- Change group to Productivity/Networking/Boot/Servers
- Disable any python_*_dependency_generator macros
  According to Tomas Chvatal they are much too experimental yet
  in OBS to be used. They have to be undefined, because of a half
  baken implementation in SLE 15 SP2 build env (defined but not
  properly implemented). At some point of time the introduced
  undefine python_*_dependency_generator
  will be conditionally removed via suse_version.</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1590580800">- New:
  * For the distro there is now a parameter remote_boot_initrd and remote_boot_kernel ()
  * For the profile there is now a parameter filename for DHCP. (#2280)
  * Signatures for ESXi 6 and 7 (#2308)
  * The hardlink command is now detected more dynamically and thus more error resistant (#2297)
  * HTTPBoot will now work in some cases out of the bug. (#2295)
  * Additional DNS query for a case where the wrong record was queried in the nsupdate system case (#2285)
- Changes:
  * Enabled a lot of tests, removed some and implemented new. (#2202)
  * Removed not used files from the codebase. (#2302)
  * Exchanged mkisofs to xorrisofs. (#2296)
  * Removed duplicate code. (#2224)
  * Removed unreachable code. (#2223)
  * Snippet creation and deletion now works again via xmlrpc. (#2244)
  * Replace createrepo with createrepo_c. (#2266)
  * Enable Kerberos through having a case sensitive users.conf. (#2272)
- Bugfixes:
  * General various Bugfixes (#2331, )
  * Makefile usage and commands. (#2344, #2304)
  * Fix the dhcp template. (#2314)
  * Creation of the management classes and gPXE. (#2310)
  * Fix the scm_track module. (#2275, #2279)
  * Fix passing the netdevice parameter correctly to the linuxrc. (#2263)
  * powerstatus from cobbler now works thanks to a wrapper for ipmitool. (#2267)
  * In case the LDAP is used for auth, it now works with ADs. (#2274)
  * Fix passthru authentication. (#2271)
- Other:
  * Add Codecov. (#2229)
  * Documentation updates. (#2333, #2326, #2305, #2249, #2268)
  * Buildprocess:
  * Recreation and cleanup of Grub2. (#2278)
  * Fix small errors for openSUSE Leap. (#2233)
  * Fix rpmlint errors. (#2237)
  * Maximum compatibility for debbuild package creation. (#2255, #2292, #2242, #2300)
  * Fixes related to our CI Pipeline (#2254, #2269)
  * Internal Code cleanup (#2273, #2270)
- Breaking Changes:
  * Hash handling in users.digest file. (#2299)</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1590667200">- Bring changelog in sync with Uyuni:
- Fixes template engine selection(bsc#1170462)
  Fixed mainline by commit 33c769e99
  D fix-template-engine-selection.patch
- Fixes a template rendering error (bsc#1169779)
  Fixed mainline by commit 5e5ef6c8c
  D fixes-a-template-rendering-error.patch
- use systemctl to restart cobblerd on logfile rotation (bsc#1169207)
  Mainline logrotate conf file uses already /sbin/service instead of
  outdated: /etc/init.d/cobblerd
- Fix cobbler sync for DHCP or DNS (bsc#1169553)
  Fixed mainline by commit 2d6cfe42da
  D fix_cobbler_sync_for_dhcp_or_dns.diff
- Signatures file now uses "default_autoinstall" which fixes import
  problem happening with some distributions (bsc#1159010)
  Fixed mainline by commit 33d181199f0da1da
- Fix for kernel and initrd detection (bsc#1159010)
  Fixed mainline by commit 872f505f66c50059</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599220800">- Removes Tornado as dependency and only recommends Ldap3</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599220801">- Adds requirement for python-distro</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599480000">- cgi.parse_qs is deprecated. Using urllib instead.
- Added:
  * cgi_parse_qs_is_deprecated.diff</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599480001">- Adding tornado dependency for cobbler tftpd again.</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1599652800">- Switch to new refactored auth module.
- Added:
  * refactored_auth_module.diff</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599825600">- Adds LoadModule definitions for openSUSE/SLE
- Added:
  * load_module_apache_suse_fix.diff</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1600171200">- Add cobbler-tests subpackage for unit testing for openSUSE/SLE</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1600776000">- Add fence-agents package as requirement
- Fix position of wrong endif</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1604404800">- Fixes usage of str.join()
- Added:
  * fix-for-old-str.join-usage.diff</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1605268800">- Remove redundant '.json' suffix
- Added:
  * remove-redundant-json-suffix.diff</changelog>
</package>
<package pkgid="de523a67a0e1ab1ef22e6fc906c4e4a7a270badbda5b7e6ddc4642aced1662c4" name="cobbler-tests" arch="noarch">
  <version epoch="0" ver="3.1.2" rel="lp152.6.3.1"/>
  <changelog author="trenn@suse.de" date="1568721600">- Update to latest git HEAD
  - Fixes permission denied in apache2 context when trying to write
    cobbler log
  - Fixes a bad import in import_signature (item)
  - Fixes bad shebang bash path in mkgrub.sh (used in post section)</changelog>
  <changelog author="trenn@suse.de" date="1568808000">- Fix cobbler sync for dhcp and dns enabled due to latest module
  renaming patches</changelog>
  <changelog author="trenn@suse.de" date="1570536000">- Switch to openSUSE latest_mulitarch_work for shortterm until
  everything is in place and submitted mainline
- started to switch to Sphinx manpage generation, but comment out.
  SuMa people must have done this already somewhere.
- Already mainline:
  D fix_module_renaming.diff</changelog>
  <changelog author="trenn@suse.de" date="1572004800">- Update to latest git HEAD code base (commit fbebd758)
- Adjusted manpage creation (needs sphinx as BuildRequires)</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1574164800">- Fix for cobbler import and buildiso (bsc#1156574)
- Added:
  * kopts-utils-path.diff
  * no-system-in-kopts-call.diff
  * item-repo-import-fix.diff</changelog>
  <changelog author="trenn@suse.de" date="1574769600">- Update to latest git HEAD code base
  This version (from mainline so for quite a while already)
  also includes fixes for "bsc#1149075" and bsc#1151875
  These patches are mainline already:
  D kopts-utils-path.diff
  D item-repo-import-fix.diff
  D no-system-in-kopts-call.diff
  This patch is going to be submitted mainline:
  A cobbler_management_mac.diff
- Fix up manpage creation: Do not zip manpages ourselves
  Thanks to namtrac.</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1578916800">- Updated to version 3.1.1.
  * Introduce new packaging from upstream
  * Changelog see below
- New:
  * We are now having a cross-distro specfile which can be build in the OBS
    (#2220) - before rewritten it was improved by #2144 &amp; #2174
  * Grub Submenu for net-booting machines (#2217)
  * Building the Cent-OS RPMs in Docker (#2190 #2189)
  * Reintroduced manpage build in setup.py (#2185)
  * mgmt_parameters are now passed to the dhcp template (#2182)
  * Using the standard Pyhton3 logger instead of a custom one (#2160 #2139 #2151)
  * Script for converting the settings file from 3.0.0 to 3.0.1 (#2154)
  * Docs now inside the repo instead of cobbler.github.io and improved with sphinx (#2117)
- Changes:
  * The default tftpboot directory is now /var/lib/tftpboot instead of previously /srv/tftpboot (#2220)
  * Distro signatures were adjusted where necessary (#2219 #2134)
  * Removed requirements.txt and placed the requirements in setup.py (#2204)
  * Display only entries in grub which are from the same arch (#2191 #2216)
  * Change the name of the cobbler manpage form cobbler-cli to cobbler back and move it to section 8 (#2188 #2186)
- Bugfixes:
  * Incremented Version to 3.1.1 from 3.0.1
  * S390 Support was cleaned up (#2207 #2178)
  * PowerPC Support was cleaned up (#2178)
  * Added a missing import while importing a distro with cobbler import (#2201)
  * Fixed a case where a stacktrace would be produced so pass none instead (#2203)
  * Rename of suse_kopts_textmode_overwrite to kops_overwrite to utils (#2143 #2200)
  * Fix rsync subprocess call (#2199 #2179)
  * Fixed an error where the template rendering did not work (#2176)
  * Fixed some cobbler import errors (#2172)
  * Wrong shebang in various scripts (#2148)
  * Fix some imports which fixes errors introduced by the remodularization (#2150 #2153)
- Other:
  * Issue Templates for Github (#2187)</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1582545600">- Removed not needed files in obs. This is now all mainline:
  D logrotate_cobbler
  D fix_hardcoded_libpath_for_websession.patch
  D fence_ipmitool.template
  D cobbler_management_mac.diff
  D AUTHORS
- Added source files:
  A cobbler.obsinfo
  A cobbler-rpmlintrc
  D exclude_get-loaders_command.patch
  Spec file is mostly adopted to mainline spec file.
  Still it is not directly extracted from mainline tarball.
  First the remaining diff has to be submitted mainline.
- Change group to Productivity/Networking/Boot/Servers
- Disable any python_*_dependency_generator macros
  According to Tomas Chvatal they are much too experimental yet
  in OBS to be used. They have to be undefined, because of a half
  baken implementation in SLE 15 SP2 build env (defined but not
  properly implemented). At some point of time the introduced
  undefine python_*_dependency_generator
  will be conditionally removed via suse_version.</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1590580800">- New:
  * For the distro there is now a parameter remote_boot_initrd and remote_boot_kernel ()
  * For the profile there is now a parameter filename for DHCP. (#2280)
  * Signatures for ESXi 6 and 7 (#2308)
  * The hardlink command is now detected more dynamically and thus more error resistant (#2297)
  * HTTPBoot will now work in some cases out of the bug. (#2295)
  * Additional DNS query for a case where the wrong record was queried in the nsupdate system case (#2285)
- Changes:
  * Enabled a lot of tests, removed some and implemented new. (#2202)
  * Removed not used files from the codebase. (#2302)
  * Exchanged mkisofs to xorrisofs. (#2296)
  * Removed duplicate code. (#2224)
  * Removed unreachable code. (#2223)
  * Snippet creation and deletion now works again via xmlrpc. (#2244)
  * Replace createrepo with createrepo_c. (#2266)
  * Enable Kerberos through having a case sensitive users.conf. (#2272)
- Bugfixes:
  * General various Bugfixes (#2331, )
  * Makefile usage and commands. (#2344, #2304)
  * Fix the dhcp template. (#2314)
  * Creation of the management classes and gPXE. (#2310)
  * Fix the scm_track module. (#2275, #2279)
  * Fix passing the netdevice parameter correctly to the linuxrc. (#2263)
  * powerstatus from cobbler now works thanks to a wrapper for ipmitool. (#2267)
  * In case the LDAP is used for auth, it now works with ADs. (#2274)
  * Fix passthru authentication. (#2271)
- Other:
  * Add Codecov. (#2229)
  * Documentation updates. (#2333, #2326, #2305, #2249, #2268)
  * Buildprocess:
  * Recreation and cleanup of Grub2. (#2278)
  * Fix small errors for openSUSE Leap. (#2233)
  * Fix rpmlint errors. (#2237)
  * Maximum compatibility for debbuild package creation. (#2255, #2292, #2242, #2300)
  * Fixes related to our CI Pipeline (#2254, #2269)
  * Internal Code cleanup (#2273, #2270)
- Breaking Changes:
  * Hash handling in users.digest file. (#2299)</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1590667200">- Bring changelog in sync with Uyuni:
- Fixes template engine selection(bsc#1170462)
  Fixed mainline by commit 33c769e99
  D fix-template-engine-selection.patch
- Fixes a template rendering error (bsc#1169779)
  Fixed mainline by commit 5e5ef6c8c
  D fixes-a-template-rendering-error.patch
- use systemctl to restart cobblerd on logfile rotation (bsc#1169207)
  Mainline logrotate conf file uses already /sbin/service instead of
  outdated: /etc/init.d/cobblerd
- Fix cobbler sync for DHCP or DNS (bsc#1169553)
  Fixed mainline by commit 2d6cfe42da
  D fix_cobbler_sync_for_dhcp_or_dns.diff
- Signatures file now uses "default_autoinstall" which fixes import
  problem happening with some distributions (bsc#1159010)
  Fixed mainline by commit 33d181199f0da1da
- Fix for kernel and initrd detection (bsc#1159010)
  Fixed mainline by commit 872f505f66c50059</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599220800">- Removes Tornado as dependency and only recommends Ldap3</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599220801">- Adds requirement for python-distro</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599480000">- cgi.parse_qs is deprecated. Using urllib instead.
- Added:
  * cgi_parse_qs_is_deprecated.diff</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599480001">- Adding tornado dependency for cobbler tftpd again.</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1599652800">- Switch to new refactored auth module.
- Added:
  * refactored_auth_module.diff</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599825600">- Adds LoadModule definitions for openSUSE/SLE
- Added:
  * load_module_apache_suse_fix.diff</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1600171200">- Add cobbler-tests subpackage for unit testing for openSUSE/SLE</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1600776000">- Add fence-agents package as requirement
- Fix position of wrong endif</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1604404800">- Fixes usage of str.join()
- Added:
  * fix-for-old-str.join-usage.diff</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1605268800">- Remove redundant '.json' suffix
- Added:
  * remove-redundant-json-suffix.diff</changelog>
</package>
<package pkgid="e52b7a3c2836a1155c33c087c443680db619a22a782ceabaf02c37c2d6ef1b74" name="cobbler-web" arch="noarch">
  <version epoch="0" ver="3.1.2" rel="lp152.6.3.1"/>
  <changelog author="trenn@suse.de" date="1568721600">- Update to latest git HEAD
  - Fixes permission denied in apache2 context when trying to write
    cobbler log
  - Fixes a bad import in import_signature (item)
  - Fixes bad shebang bash path in mkgrub.sh (used in post section)</changelog>
  <changelog author="trenn@suse.de" date="1568808000">- Fix cobbler sync for dhcp and dns enabled due to latest module
  renaming patches</changelog>
  <changelog author="trenn@suse.de" date="1570536000">- Switch to openSUSE latest_mulitarch_work for shortterm until
  everything is in place and submitted mainline
- started to switch to Sphinx manpage generation, but comment out.
  SuMa people must have done this already somewhere.
- Already mainline:
  D fix_module_renaming.diff</changelog>
  <changelog author="trenn@suse.de" date="1572004800">- Update to latest git HEAD code base (commit fbebd758)
- Adjusted manpage creation (needs sphinx as BuildRequires)</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1574164800">- Fix for cobbler import and buildiso (bsc#1156574)
- Added:
  * kopts-utils-path.diff
  * no-system-in-kopts-call.diff
  * item-repo-import-fix.diff</changelog>
  <changelog author="trenn@suse.de" date="1574769600">- Update to latest git HEAD code base
  This version (from mainline so for quite a while already)
  also includes fixes for "bsc#1149075" and bsc#1151875
  These patches are mainline already:
  D kopts-utils-path.diff
  D item-repo-import-fix.diff
  D no-system-in-kopts-call.diff
  This patch is going to be submitted mainline:
  A cobbler_management_mac.diff
- Fix up manpage creation: Do not zip manpages ourselves
  Thanks to namtrac.</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1578916800">- Updated to version 3.1.1.
  * Introduce new packaging from upstream
  * Changelog see below
- New:
  * We are now having a cross-distro specfile which can be build in the OBS
    (#2220) - before rewritten it was improved by #2144 &amp; #2174
  * Grub Submenu for net-booting machines (#2217)
  * Building the Cent-OS RPMs in Docker (#2190 #2189)
  * Reintroduced manpage build in setup.py (#2185)
  * mgmt_parameters are now passed to the dhcp template (#2182)
  * Using the standard Pyhton3 logger instead of a custom one (#2160 #2139 #2151)
  * Script for converting the settings file from 3.0.0 to 3.0.1 (#2154)
  * Docs now inside the repo instead of cobbler.github.io and improved with sphinx (#2117)
- Changes:
  * The default tftpboot directory is now /var/lib/tftpboot instead of previously /srv/tftpboot (#2220)
  * Distro signatures were adjusted where necessary (#2219 #2134)
  * Removed requirements.txt and placed the requirements in setup.py (#2204)
  * Display only entries in grub which are from the same arch (#2191 #2216)
  * Change the name of the cobbler manpage form cobbler-cli to cobbler back and move it to section 8 (#2188 #2186)
- Bugfixes:
  * Incremented Version to 3.1.1 from 3.0.1
  * S390 Support was cleaned up (#2207 #2178)
  * PowerPC Support was cleaned up (#2178)
  * Added a missing import while importing a distro with cobbler import (#2201)
  * Fixed a case where a stacktrace would be produced so pass none instead (#2203)
  * Rename of suse_kopts_textmode_overwrite to kops_overwrite to utils (#2143 #2200)
  * Fix rsync subprocess call (#2199 #2179)
  * Fixed an error where the template rendering did not work (#2176)
  * Fixed some cobbler import errors (#2172)
  * Wrong shebang in various scripts (#2148)
  * Fix some imports which fixes errors introduced by the remodularization (#2150 #2153)
- Other:
  * Issue Templates for Github (#2187)</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1582545600">- Removed not needed files in obs. This is now all mainline:
  D logrotate_cobbler
  D fix_hardcoded_libpath_for_websession.patch
  D fence_ipmitool.template
  D cobbler_management_mac.diff
  D AUTHORS
- Added source files:
  A cobbler.obsinfo
  A cobbler-rpmlintrc
  D exclude_get-loaders_command.patch
  Spec file is mostly adopted to mainline spec file.
  Still it is not directly extracted from mainline tarball.
  First the remaining diff has to be submitted mainline.
- Change group to Productivity/Networking/Boot/Servers
- Disable any python_*_dependency_generator macros
  According to Tomas Chvatal they are much too experimental yet
  in OBS to be used. They have to be undefined, because of a half
  baken implementation in SLE 15 SP2 build env (defined but not
  properly implemented). At some point of time the introduced
  undefine python_*_dependency_generator
  will be conditionally removed via suse_version.</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1590580800">- New:
  * For the distro there is now a parameter remote_boot_initrd and remote_boot_kernel ()
  * For the profile there is now a parameter filename for DHCP. (#2280)
  * Signatures for ESXi 6 and 7 (#2308)
  * The hardlink command is now detected more dynamically and thus more error resistant (#2297)
  * HTTPBoot will now work in some cases out of the bug. (#2295)
  * Additional DNS query for a case where the wrong record was queried in the nsupdate system case (#2285)
- Changes:
  * Enabled a lot of tests, removed some and implemented new. (#2202)
  * Removed not used files from the codebase. (#2302)
  * Exchanged mkisofs to xorrisofs. (#2296)
  * Removed duplicate code. (#2224)
  * Removed unreachable code. (#2223)
  * Snippet creation and deletion now works again via xmlrpc. (#2244)
  * Replace createrepo with createrepo_c. (#2266)
  * Enable Kerberos through having a case sensitive users.conf. (#2272)
- Bugfixes:
  * General various Bugfixes (#2331, )
  * Makefile usage and commands. (#2344, #2304)
  * Fix the dhcp template. (#2314)
  * Creation of the management classes and gPXE. (#2310)
  * Fix the scm_track module. (#2275, #2279)
  * Fix passing the netdevice parameter correctly to the linuxrc. (#2263)
  * powerstatus from cobbler now works thanks to a wrapper for ipmitool. (#2267)
  * In case the LDAP is used for auth, it now works with ADs. (#2274)
  * Fix passthru authentication. (#2271)
- Other:
  * Add Codecov. (#2229)
  * Documentation updates. (#2333, #2326, #2305, #2249, #2268)
  * Buildprocess:
  * Recreation and cleanup of Grub2. (#2278)
  * Fix small errors for openSUSE Leap. (#2233)
  * Fix rpmlint errors. (#2237)
  * Maximum compatibility for debbuild package creation. (#2255, #2292, #2242, #2300)
  * Fixes related to our CI Pipeline (#2254, #2269)
  * Internal Code cleanup (#2273, #2270)
- Breaking Changes:
  * Hash handling in users.digest file. (#2299)</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1590667200">- Bring changelog in sync with Uyuni:
- Fixes template engine selection(bsc#1170462)
  Fixed mainline by commit 33c769e99
  D fix-template-engine-selection.patch
- Fixes a template rendering error (bsc#1169779)
  Fixed mainline by commit 5e5ef6c8c
  D fixes-a-template-rendering-error.patch
- use systemctl to restart cobblerd on logfile rotation (bsc#1169207)
  Mainline logrotate conf file uses already /sbin/service instead of
  outdated: /etc/init.d/cobblerd
- Fix cobbler sync for DHCP or DNS (bsc#1169553)
  Fixed mainline by commit 2d6cfe42da
  D fix_cobbler_sync_for_dhcp_or_dns.diff
- Signatures file now uses "default_autoinstall" which fixes import
  problem happening with some distributions (bsc#1159010)
  Fixed mainline by commit 33d181199f0da1da
- Fix for kernel and initrd detection (bsc#1159010)
  Fixed mainline by commit 872f505f66c50059</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599220800">- Removes Tornado as dependency and only recommends Ldap3</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599220801">- Adds requirement for python-distro</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599480000">- cgi.parse_qs is deprecated. Using urllib instead.
- Added:
  * cgi_parse_qs_is_deprecated.diff</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599480001">- Adding tornado dependency for cobbler tftpd again.</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1599652800">- Switch to new refactored auth module.
- Added:
  * refactored_auth_module.diff</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1599825600">- Adds LoadModule definitions for openSUSE/SLE
- Added:
  * load_module_apache_suse_fix.diff</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1600171200">- Add cobbler-tests subpackage for unit testing for openSUSE/SLE</changelog>
  <changelog author="Dominik Gedon &lt;dominik.gedon@suse.com&gt;" date="1600776000">- Add fence-agents package as requirement
- Fix position of wrong endif</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1604404800">- Fixes usage of str.join()
- Added:
  * fix-for-old-str.join-usage.diff</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1605268800">- Remove redundant '.json' suffix
- Added:
  * remove-redundant-json-suffix.diff</changelog>
</package>
<package pkgid="44ef8a94c1932eaf2fc45d6ad9f1b0ac4904c4b44055097b1da21de168cef4fc" name="coccinelle" arch="src">
  <version epoch="0" ver="1.0.8" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 1.0.0~rc22
  * Limited matching of decimal format strings, with the --ibm option
  * Better support for functions that have no specified return type.
- Drop fix-no_prepare_ocamlcocci-arguments.patch (merged)</changelog>
  <changelog author="jslaby@suse.com" date="1417089600">- fix spatch link. The target did not exist.</changelog>
  <changelog author="dsterba@suse.cz" date="1424347200">- Update to new upstream release 1.0.0~rc24
  * global expression x
  * Varargs support
  * Inline in function prototypes
  * #ifdef on kernel version
  * Parallelism in Coccinelle
  * --jobs &lt;int&gt;: Run the specified number of jobs in parallel.
  * --chunksize &lt;int&gt;. The specified number of files are dispatched as a
    single unit of parallelism.
- Update to new upstream release 1.0.0~rc23
  * Ability to add, but not match or remove, attributes.
  * Some parsing and pretty printing improvements.</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Update to release 1.0.0
  * see changes.txt for full list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 1.0.1
  * Language:
    + allow static on type-level declarers
  * Features:
    +  add --use-gitgrep option, for scanning with git grep
  * Bugfix:
    + Take into account constraints when determining whether a
    metavar is pure don't add switch fall through when a default
    is hidden under another case label.</changelog>
  <changelog author="mpluskal@suse.com" date="1440244800">- Update to 1.0.2
  * Positions of C tokens are now computed while lexing rather than
    during a distinct pass. This makes use of the Lexing.new_line
    function which has been introduced in OCaml 3.11. Coccinelle
    can thus no longer be compiled with OCaml 3.10. --use-gitgrep
    falls back to --use-coccigrep for a non-git repository.
  * ocaml coccilib allows propagating identifiers, expressions,
    statements, listlens, and positions to subsequent matching rules
  * Allow @S, for statement metavariable S on expressions
  * Exploit explicit positive constraints (no regexps) on
    identifiers in file filtering
  * Ability to declare a rule as matching an identifier.  Doesn't
    work properly for names of typedefs, enums, structures, or
    unions.
  * Iso: allow mixed for model for the case where the model is just
    a metavar
  * Allow ! to propagate into == or other ops in more cases.</changelog>
  <changelog author="dsterba@suse.cz" date="1450094400">- Update to 1.0.4
  * Language:
  * Length for statement list metavariables
  * Conjunction (analogous to disjunction)
  * Drop Circles, Stars
  * Drop Unique
  * Default values for script metavariables
  * Features:
  * Introduce .cocciconfig configuration file
  * Add some support for MetaStmtList.  Allowed at top level of {}.
  * timeout of 0 is no timeout, to allow cancelling this option.
  * Bugfixes:
  * Allow virtual variable definition to contain an =.
  * Improvement when exists rule contains when forall.</changelog>
  <changelog author="olaf@aepfle.de" date="1464091200">- Fix build with ocaml-4.03
  Use ocaml-parmap and ocaml-menhir instead of old built-in copies
  Use ocaml-pcre</changelog>
  <changelog author="olaf@aepfle.de" date="1464609600">- Use ocamlfind(camlp4) to refer to camlp4
- Add coccinelle-1.0.4.patch</changelog>
  <changelog author="jengelh@inai.de" date="1511697600">- Update to new upstream release 1.0.6
  * Allow \ in #define in semantic patch rules, to allow body
    with multiple lines, potentially including changes. As a side
    effect, \ is also allowed in when specifications, again to
    allow patterns to stretch over multiple lines.
  * Add identifier list metavariables for #define parameter lists
  * Support for Python 3. Pycaml has been patched.
- Remove coccinelle-1.0.4.patch (merged)</changelog>
  <changelog author="aavindraa@gmail.com" date="1511870400">- use %make_install macro
- remove useless directory creation</changelog>
  <changelog author="jengelh@inai.de" date="1511870401">- Add kill-env.diff</changelog>
  <changelog author="jengelh@inai.de" date="1516795200">- Build under rpm 4.14</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564401600">- Drop pre-shipped binaries for spgen and spgen.opt: since these
  are x86_64 binaries, they would not be usable on i586 builds of
  coccinella.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Update to new upstream release 1.0.7
  * Allow constraints on any metavariables. Constraints can be
    specified by comprehension (= { ? } or != { ? }, with each
    item referring to a constant identifier or an inherited
    meta-variable, and curly-brackets can be omitted for a single
    item), regular expression (~ "..." or !~ "..."), integer
    comparison (&lt;, &lt;, &gt;=, &gt;) or scripts (:script:?). Constraints
    can be used in conjunctions (&amp;&amp;), disjunctions (||) and can
    be negated (!) and parenthesed.
  * Allow script finalizers for parallel computation. See
    tests/countcalls.cocci and tests/countcalls_python.cocci
  * Allow disjunctions on a wider range of syntactic
    constructions (function definitions, variable declarations
    ?).</changelog>
  <changelog author="olaf@aepfle.de" date="1571918400">- Update to new upstream release 1.0.8
  See included changes.txt for details
- Remove usage of camlp4
- Remove pkg-config. It is not required, but pulled in anyway
  by other packages
- Disable parallel build due to internal copy of stdcompat</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578398400">- bsc#1160194, change the python library to site-packages hierarchy.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578657600">- Update to new source URL.</changelog>
  <changelog author="olaf@aepfle.de" date="1579089600">- Use _service file to trim the bundles directory</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621944000">- Add wrapper script to set COCCINELLE_HOME [boo#1184563]</changelog>
</package>
<package pkgid="e5be7278f3a83d17e7b32592c25e1839a3e89aa618dd0467655968d50fce4867" name="coccinelle" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="lp152.2.3.1"/>
  <changelog author="jslaby@suse.com" date="1417089600">- fix spatch link. The target did not exist.</changelog>
  <changelog author="dsterba@suse.cz" date="1424347200">- Update to new upstream release 1.0.0~rc24
  * global expression x
  * Varargs support
  * Inline in function prototypes
  * #ifdef on kernel version
  * Parallelism in Coccinelle
  * --jobs &lt;int&gt;: Run the specified number of jobs in parallel.
  * --chunksize &lt;int&gt;. The specified number of files are dispatched as a
    single unit of parallelism.
- Update to new upstream release 1.0.0~rc23
  * Ability to add, but not match or remove, attributes.
  * Some parsing and pretty printing improvements.</changelog>
  <changelog author="mpluskal@suse.com" date="1430827200">- Update to release 1.0.0
  * see changes.txt for full list of changes</changelog>
  <changelog author="mpluskal@suse.com" date="1438776000">- Update to 1.0.1
  * Language:
    + allow static on type-level declarers
  * Features:
    +  add --use-gitgrep option, for scanning with git grep
  * Bugfix:
    + Take into account constraints when determining whether a
    metavar is pure don't add switch fall through when a default
    is hidden under another case label.</changelog>
  <changelog author="mpluskal@suse.com" date="1440244800">- Update to 1.0.2
  * Positions of C tokens are now computed while lexing rather than
    during a distinct pass. This makes use of the Lexing.new_line
    function which has been introduced in OCaml 3.11. Coccinelle
    can thus no longer be compiled with OCaml 3.10. --use-gitgrep
    falls back to --use-coccigrep for a non-git repository.
  * ocaml coccilib allows propagating identifiers, expressions,
    statements, listlens, and positions to subsequent matching rules
  * Allow @S, for statement metavariable S on expressions
  * Exploit explicit positive constraints (no regexps) on
    identifiers in file filtering
  * Ability to declare a rule as matching an identifier.  Doesn't
    work properly for names of typedefs, enums, structures, or
    unions.
  * Iso: allow mixed for model for the case where the model is just
    a metavar
  * Allow ! to propagate into == or other ops in more cases.</changelog>
  <changelog author="dsterba@suse.cz" date="1450094400">- Update to 1.0.4
  * Language:
  * Length for statement list metavariables
  * Conjunction (analogous to disjunction)
  * Drop Circles, Stars
  * Drop Unique
  * Default values for script metavariables
  * Features:
  * Introduce .cocciconfig configuration file
  * Add some support for MetaStmtList.  Allowed at top level of {}.
  * timeout of 0 is no timeout, to allow cancelling this option.
  * Bugfixes:
  * Allow virtual variable definition to contain an =.
  * Improvement when exists rule contains when forall.</changelog>
  <changelog author="olaf@aepfle.de" date="1464091200">- Fix build with ocaml-4.03
  Use ocaml-parmap and ocaml-menhir instead of old built-in copies
  Use ocaml-pcre</changelog>
  <changelog author="olaf@aepfle.de" date="1464609600">- Use ocamlfind(camlp4) to refer to camlp4
- Add coccinelle-1.0.4.patch</changelog>
  <changelog author="jengelh@inai.de" date="1511697600">- Update to new upstream release 1.0.6
  * Allow \ in #define in semantic patch rules, to allow body
    with multiple lines, potentially including changes. As a side
    effect, \ is also allowed in when specifications, again to
    allow patterns to stretch over multiple lines.
  * Add identifier list metavariables for #define parameter lists
  * Support for Python 3. Pycaml has been patched.
- Remove coccinelle-1.0.4.patch (merged)</changelog>
  <changelog author="aavindraa@gmail.com" date="1511870400">- use %make_install macro
- remove useless directory creation</changelog>
  <changelog author="jengelh@inai.de" date="1511870401">- Add kill-env.diff</changelog>
  <changelog author="jengelh@inai.de" date="1516795200">- Build under rpm 4.14</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1564401600">- Drop pre-shipped binaries for spgen and spgen.opt: since these
  are x86_64 binaries, they would not be usable on i586 builds of
  coccinella.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Update to new upstream release 1.0.7
  * Allow constraints on any metavariables. Constraints can be
    specified by comprehension (= { ? } or != { ? }, with each
    item referring to a constant identifier or an inherited
    meta-variable, and curly-brackets can be omitted for a single
    item), regular expression (~ "..." or !~ "..."), integer
    comparison (&lt;, &lt;, &gt;=, &gt;) or scripts (:script:?). Constraints
    can be used in conjunctions (&amp;&amp;), disjunctions (||) and can
    be negated (!) and parenthesed.
  * Allow script finalizers for parallel computation. See
    tests/countcalls.cocci and tests/countcalls_python.cocci
  * Allow disjunctions on a wider range of syntactic
    constructions (function definitions, variable declarations
    ?).</changelog>
  <changelog author="olaf@aepfle.de" date="1571918400">- Update to new upstream release 1.0.8
  See included changes.txt for details
- Remove usage of camlp4
- Remove pkg-config. It is not required, but pulled in anyway
  by other packages
- Disable parallel build due to internal copy of stdcompat</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578398400">- bsc#1160194, change the python library to site-packages hierarchy.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578657600">- Update to new source URL.</changelog>
  <changelog author="olaf@aepfle.de" date="1579089600">- Use _service file to trim the bundles directory</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621944000">- Add wrapper script to set COCCINELLE_HOME [boo#1184563]</changelog>
</package>
<package pkgid="d25cd0febf39a1ec8774ee27d310efef736efe58f65ed220a3247daa55f305e8" name="colord" arch="i586">
  <version epoch="0" ver="1.4.4" rel="lp152.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1470398400">- Update to version 1.3.3:
  + Check polkit version before defining g_autoptr macros.
  + Fix an assert failure when connecting to sensors.
  + Fix gtk-doc build when srcdir != builddir.
  + Increase timeout to 60s for argyll spotread sampling.
  + Use the USB path to match the ArgyllCMS port.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Update to version 1.3.4:
  + New Features:
  - colord:
    . Add cd_color_rgb_from_wavelength().
    . Add cd_spectrum_resample_to_size().
  - colorhug:
    . Add commands for getting the device calibration spectra.
    . Increase the size of the EP0 transfer.
    . Support enabling the illuminants on the ColorHug+.
  + Bugfixes:
  - Fix a possible NULL dereference when talking to Spark
    devices.
  - Fix compile with -Wformat-signedness.
  - Fix possible division by zero if parsing /proc/cpuinfo fails.</changelog>
  <changelog author="zaitor@opensuse.org" date="1485259200">- Split out color profiles in sub package colord-color-profiles.
  Add shared-color-profiles Obsoletes and Provides.
- Replace shared-color-profiles with colord-color-profiles
  Requires.
- Pass --enable-libcolordcompat, build compatability lib.
- Pass --enable-print-profiles, build print profiles.
- Pass --disable-examples, ensure we do not build examples.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 1.3.5:
  + New Features:
  - Add cd_color_get_blackbody_rgb_full().
  - Add cd_spectrum_multiply_scalar().
  + Bugfixes: Check the parsed context arguments in the session
    helper.</changelog>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in version 1.4.5)
- Move colord-session.service and tmpfiles config from libcolord-devel to colord package</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
</package>
<package pkgid="289343aefa907c949e27dbcf29d1e84132b46dbcfd835e52a944b965a6350984" name="colord" arch="src">
  <version epoch="0" ver="1.4.4" rel="lp152.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1470398400">- Update to version 1.3.3:
  + Check polkit version before defining g_autoptr macros.
  + Fix an assert failure when connecting to sensors.
  + Fix gtk-doc build when srcdir != builddir.
  + Increase timeout to 60s for argyll spotread sampling.
  + Use the USB path to match the ArgyllCMS port.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Update to version 1.3.4:
  + New Features:
  - colord:
    . Add cd_color_rgb_from_wavelength().
    . Add cd_spectrum_resample_to_size().
  - colorhug:
    . Add commands for getting the device calibration spectra.
    . Increase the size of the EP0 transfer.
    . Support enabling the illuminants on the ColorHug+.
  + Bugfixes:
  - Fix a possible NULL dereference when talking to Spark
    devices.
  - Fix compile with -Wformat-signedness.
  - Fix possible division by zero if parsing /proc/cpuinfo fails.</changelog>
  <changelog author="zaitor@opensuse.org" date="1485259200">- Split out color profiles in sub package colord-color-profiles.
  Add shared-color-profiles Obsoletes and Provides.
- Replace shared-color-profiles with colord-color-profiles
  Requires.
- Pass --enable-libcolordcompat, build compatability lib.
- Pass --enable-print-profiles, build print profiles.
- Pass --disable-examples, ensure we do not build examples.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 1.3.5:
  + New Features:
  - Add cd_color_get_blackbody_rgb_full().
  - Add cd_spectrum_multiply_scalar().
  + Bugfixes: Check the parsed context arguments in the session
    helper.</changelog>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in version 1.4.5)
- Move colord-session.service and tmpfiles config from libcolord-devel to colord package</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
</package>
<package pkgid="35ec32fc68c4e82fdbf02cadc9c5d3d7e9ebc36295c8bab437108fbf56acb574" name="colord" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="lp152.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1470398400">- Update to version 1.3.3:
  + Check polkit version before defining g_autoptr macros.
  + Fix an assert failure when connecting to sensors.
  + Fix gtk-doc build when srcdir != builddir.
  + Increase timeout to 60s for argyll spotread sampling.
  + Use the USB path to match the ArgyllCMS port.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Update to version 1.3.4:
  + New Features:
  - colord:
    . Add cd_color_rgb_from_wavelength().
    . Add cd_spectrum_resample_to_size().
  - colorhug:
    . Add commands for getting the device calibration spectra.
    . Increase the size of the EP0 transfer.
    . Support enabling the illuminants on the ColorHug+.
  + Bugfixes:
  - Fix a possible NULL dereference when talking to Spark
    devices.
  - Fix compile with -Wformat-signedness.
  - Fix possible division by zero if parsing /proc/cpuinfo fails.</changelog>
  <changelog author="zaitor@opensuse.org" date="1485259200">- Split out color profiles in sub package colord-color-profiles.
  Add shared-color-profiles Obsoletes and Provides.
- Replace shared-color-profiles with colord-color-profiles
  Requires.
- Pass --enable-libcolordcompat, build compatability lib.
- Pass --enable-print-profiles, build print profiles.
- Pass --disable-examples, ensure we do not build examples.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 1.3.5:
  + New Features:
  - Add cd_color_get_blackbody_rgb_full().
  - Add cd_spectrum_multiply_scalar().
  + Bugfixes: Check the parsed context arguments in the session
    helper.</changelog>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in version 1.4.5)
- Move colord-session.service and tmpfiles config from libcolord-devel to colord package</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
</package>
<package pkgid="78490193808219f0fc14e150b4c325779860ea6c049adcb0df7ba588a7a1c6e2" name="colord-color-profiles" arch="i586">
  <version epoch="0" ver="1.4.4" rel="lp152.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1470398400">- Update to version 1.3.3:
  + Check polkit version before defining g_autoptr macros.
  + Fix an assert failure when connecting to sensors.
  + Fix gtk-doc build when srcdir != builddir.
  + Increase timeout to 60s for argyll spotread sampling.
  + Use the USB path to match the ArgyllCMS port.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Update to version 1.3.4:
  + New Features:
  - colord:
    . Add cd_color_rgb_from_wavelength().
    . Add cd_spectrum_resample_to_size().
  - colorhug:
    . Add commands for getting the device calibration spectra.
    . Increase the size of the EP0 transfer.
    . Support enabling the illuminants on the ColorHug+.
  + Bugfixes:
  - Fix a possible NULL dereference when talking to Spark
    devices.
  - Fix compile with -Wformat-signedness.
  - Fix possible division by zero if parsing /proc/cpuinfo fails.</changelog>
  <changelog author="zaitor@opensuse.org" date="1485259200">- Split out color profiles in sub package colord-color-profiles.
  Add shared-color-profiles Obsoletes and Provides.
- Replace shared-color-profiles with colord-color-profiles
  Requires.
- Pass --enable-libcolordcompat, build compatability lib.
- Pass --enable-print-profiles, build print profiles.
- Pass --disable-examples, ensure we do not build examples.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 1.3.5:
  + New Features:
  - Add cd_color_get_blackbody_rgb_full().
  - Add cd_spectrum_multiply_scalar().
  + Bugfixes: Check the parsed context arguments in the session
    helper.</changelog>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in version 1.4.5)
- Move colord-session.service and tmpfiles config from libcolord-devel to colord package</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
</package>
<package pkgid="5660fa2fed9c8a0376b1e54c8358226b9b60af0808f60e33c11399bab81313f9" name="colord-color-profiles" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="lp152.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1470398400">- Update to version 1.3.3:
  + Check polkit version before defining g_autoptr macros.
  + Fix an assert failure when connecting to sensors.
  + Fix gtk-doc build when srcdir != builddir.
  + Increase timeout to 60s for argyll spotread sampling.
  + Use the USB path to match the ArgyllCMS port.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Update to version 1.3.4:
  + New Features:
  - colord:
    . Add cd_color_rgb_from_wavelength().
    . Add cd_spectrum_resample_to_size().
  - colorhug:
    . Add commands for getting the device calibration spectra.
    . Increase the size of the EP0 transfer.
    . Support enabling the illuminants on the ColorHug+.
  + Bugfixes:
  - Fix a possible NULL dereference when talking to Spark
    devices.
  - Fix compile with -Wformat-signedness.
  - Fix possible division by zero if parsing /proc/cpuinfo fails.</changelog>
  <changelog author="zaitor@opensuse.org" date="1485259200">- Split out color profiles in sub package colord-color-profiles.
  Add shared-color-profiles Obsoletes and Provides.
- Replace shared-color-profiles with colord-color-profiles
  Requires.
- Pass --enable-libcolordcompat, build compatability lib.
- Pass --enable-print-profiles, build print profiles.
- Pass --disable-examples, ensure we do not build examples.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 1.3.5:
  + New Features:
  - Add cd_color_get_blackbody_rgb_full().
  - Add cd_spectrum_multiply_scalar().
  + Bugfixes: Check the parsed context arguments in the session
    helper.</changelog>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in version 1.4.5)
- Move colord-session.service and tmpfiles config from libcolord-devel to colord package</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
</package>
<package pkgid="c1aad62ee61693342bb7f3e28cc99ed474d6d603b4728c0329dc3e1d10797d77" name="colord-lang" arch="noarch">
  <version epoch="0" ver="1.4.4" rel="lp152.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1470398400">- Update to version 1.3.3:
  + Check polkit version before defining g_autoptr macros.
  + Fix an assert failure when connecting to sensors.
  + Fix gtk-doc build when srcdir != builddir.
  + Increase timeout to 60s for argyll spotread sampling.
  + Use the USB path to match the ArgyllCMS port.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Update to version 1.3.4:
  + New Features:
  - colord:
    . Add cd_color_rgb_from_wavelength().
    . Add cd_spectrum_resample_to_size().
  - colorhug:
    . Add commands for getting the device calibration spectra.
    . Increase the size of the EP0 transfer.
    . Support enabling the illuminants on the ColorHug+.
  + Bugfixes:
  - Fix a possible NULL dereference when talking to Spark
    devices.
  - Fix compile with -Wformat-signedness.
  - Fix possible division by zero if parsing /proc/cpuinfo fails.</changelog>
  <changelog author="zaitor@opensuse.org" date="1485259200">- Split out color profiles in sub package colord-color-profiles.
  Add shared-color-profiles Obsoletes and Provides.
- Replace shared-color-profiles with colord-color-profiles
  Requires.
- Pass --enable-libcolordcompat, build compatability lib.
- Pass --enable-print-profiles, build print profiles.
- Pass --disable-examples, ensure we do not build examples.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 1.3.5:
  + New Features:
  - Add cd_color_get_blackbody_rgb_full().
  - Add cd_spectrum_multiply_scalar().
  + Bugfixes: Check the parsed context arguments in the session
    helper.</changelog>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in version 1.4.5)
- Move colord-session.service and tmpfiles config from libcolord-devel to colord package</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
</package>
<package pkgid="4ccd92137c55a3d0feebc554518789cf39d95924cde8ec9f34677a77ecd06d6a" name="conmon" arch="src">
  <version epoch="0" ver="2.0.20" rel="lp152.4.3.1"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565956800">- Use `%make_build` macro instead of `%{__make}`
- Use `%make_install` macro instead of `%{__make} install`
- Use `%{_bindir}` macro instead of `%{_usr}/bin`
- Change `PREFIX` to not contain `%{buildroot}` and use the
  `$DESTDIR` variable</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Upstream has an actual description, use it instead of just
  duplicating the summary again.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568635200">- Set masterfd_stdout before registering ctrl_cb</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1572350400">- Add CONN_SOCK_BUF_SIZE to config
- Fix bug to close the sync pipe before exit command</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573732800">- Add log level trace
- Separate handling of log reopen events and terminal resize events</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1575892800">- Fix tight loop on OOM</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576065600">- Add --persist-dir to allow callers to specify a directory that
  conmon should mirror certain important files that should persist
  reboots (right now, just the container exit file)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576152000">- Kill the process group on timeout</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576238400">- Add --persist-dir flag to allow important container files to be
  written to a persistent directory
- Check OOM counter on cgroups v1 before writing OOM file
- Use splice(2) to copy from stdin</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Persist oom files on cgroup v2
- Revert the check for  the OOM counter on cgroups v1 before
  writing OOM file</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578398400">- Add TimedOutMessage to config to share with go code
- Fix format string to limit the size of the string to 10
  characters</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1582286400">- Update to v2.0.10 (bsc#1160460, bsc#1164390, jsc#ECO-1048,
  jsc#SLE-11485, jsc#SLE-11331):
  - journal logging: write to /dev/null instead of -1</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
</package>
<package pkgid="5e1a3c1f2c21435f8775bef75ec75adab079dd4e6b0402693722467ea5611b34" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="lp152.4.3.1"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565956800">- Use `%make_build` macro instead of `%{__make}`
- Use `%make_install` macro instead of `%{__make} install`
- Use `%{_bindir}` macro instead of `%{_usr}/bin`
- Change `PREFIX` to not contain `%{buildroot}` and use the
  `$DESTDIR` variable</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Upstream has an actual description, use it instead of just
  duplicating the summary again.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568635200">- Set masterfd_stdout before registering ctrl_cb</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1572350400">- Add CONN_SOCK_BUF_SIZE to config
- Fix bug to close the sync pipe before exit command</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573732800">- Add log level trace
- Separate handling of log reopen events and terminal resize events</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1575892800">- Fix tight loop on OOM</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576065600">- Add --persist-dir to allow callers to specify a directory that
  conmon should mirror certain important files that should persist
  reboots (right now, just the container exit file)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576152000">- Kill the process group on timeout</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576238400">- Add --persist-dir flag to allow important container files to be
  written to a persistent directory
- Check OOM counter on cgroups v1 before writing OOM file
- Use splice(2) to copy from stdin</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Persist oom files on cgroup v2
- Revert the check for  the OOM counter on cgroups v1 before
  writing OOM file</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578398400">- Add TimedOutMessage to config to share with go code
- Fix format string to limit the size of the string to 10
  characters</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1582286400">- Update to v2.0.10 (bsc#1160460, bsc#1164390, jsc#ECO-1048,
  jsc#SLE-11485, jsc#SLE-11331):
  - journal logging: write to /dev/null instead of -1</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
</package>
<package pkgid="ad797b0b80b0e7974d655ce8d3df6615efad247a5ddffc5387d061bf1637ce5b" name="connman" arch="src">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="simon@simotek.net" date="1370088000">- Update to 1.15
- 1.12 never built (My Fault)
- Various bug fixes including to tethering, DHCPv6 and commandline
  client amoungst others</changelog>
  <changelog author="simon@simotek.net" date="1370692800">- Properly handle vpn service with systemd</changelog>
  <changelog author="guillaume@opensuse.org" date="1380024000">- Update to 1.18</changelog>
  <changelog author="sleep_walker@suse.cz" date="1387281600">- bump to 1.20
  ver 1.20:
    Fix issue with invalid cache of DNS proxy support.
    Fix issue with stopping DHCP for failed connections.
    Fix issue with not stopping IPv4 Link-Local state machine.
    Fix issue with service type handling for unknown interfaces.
    Fix issue with using interface names instead of indexes.
    Fix issue with resetting network retry counter on failure.
    Fix issue with using nameservers when its type is not enabled.
    Fix issue with fallback nameservers not being used.
    Add support for NTP version 3 protocol.
  ver 1.19:
    Fix issue with not correctly storing IPv4 method.
    Fix issue with changing the default service too early.
    Fix issue with service reference count and WISPr checks.
    Fix issue with service auto-connect handling and ordering.
    Fix issue with host and domain names when service changes.
    Fix issue with proxy result and WISPr handling.
    Fix issue with proxy reset when disconnecting.
    Fix issue with handling fallback nameservers.
    Add support for multiple agents.</changelog>
  <changelog author="simon@simotek.net" date="1392811200">- bump to 1.21
    Hidden SSID scanning works again and the security mode of the found WiFi network is checked against the one requested (Tomasz Bursztyka).
    Fix failure when enabling Bluetooth using Bluez 5.x (Zhang Zhengguang)
    GTK-doc generated documentation hasn't seen any use in a long time and has become sufficiently broken in order to be removed (Ross Burton). Notice that ConnMan documentation still continues to exist in the ./doc directory.
    Fix a few minor issues discovered by Coverity (Daniel Wagner) and add DNS buffer validation (Jaehyun Kim).
    Properly handle proxies whether they are IP addresses or host names (Sjoerd Simons)</changelog>
  <changelog author="jmatejka@suse.cz" date="1405425600">- Install connmanctl in connman-client package</changelog>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="7c36676cc8473b89f616db233a247f12ff15a1fce77573dbcd4c615c440dccfe" name="connman" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="75f81bbc5c88eb57a6ab3b7125a179e89d6b37d5ff81b7eb5c44cd750f705e4f" name="connman-client" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="de03c93ddceee65d3fed7960b33867bc5bc957581ae8d1d05daf29ead6731f8c" name="connman-devel" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="98525d5bf1bb6b4900e559f3c493ee68824a4ae7d4549776187039986d45d968" name="connman-doc" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="a9131c55bf88a07aef95a7f2faeeeeaa4b259df91df7668497cc0a74256851f2" name="connman-nmcompat" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="70aba0d59b96938c4b878b8b3d3a25dde15268569b9895b9fe56840192cc4bac" name="connman-plugin-hh2serial-gps" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="284275ce043d37dbf54db70cb2c5c1dc3689aea030e652f17963df982b3d9dbb" name="connman-plugin-iospm" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="6b277863235ff1f4b4f357fa6cbdcdce9f0a68eb08da6c148bcccbd57488331b" name="connman-plugin-l2tp" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="ddcceba53cbbeeb2fc78927eea7ad9ec3b544f3b8f993a37688cf508c3c63a13" name="connman-plugin-openconnect" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="fdf3e57eccb12be49d94e9162248e35e7a96dabe692e1af6f1db9df3a4c492d6" name="connman-plugin-openvpn" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="1ee877aafe0005e45f14ffcbec9231fd341b0d3ad58213f0d8bf265902785dc1" name="connman-plugin-polkit" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="ae10577b04983e237429c4181a9b635951f26dd0dd85f6379d3cd31beab54e11" name="connman-plugin-pptp" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="ded69f682d24293c6c823a0aaef6d0ba0e08313c72241c5de22c6cb0984182db" name="connman-plugin-tist" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="b4b1b3b77de4d7d2bde59677d1941f0c7ced6215c90b800fc75b931dbaeaf0ed" name="connman-plugin-vpnc" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="392ae1ad62c7d45d7a0a1cbc201d4da2cb0c5b007d43d6770c74e89f040759d0" name="connman-plugin-wireguard" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="b31a18c8ac4c69cf412654b498b92c95121a80bd1870a6ec47ab8bbc82c28e0c" name="connman-test" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="546b8eb747ba35aed679a7530e8dec594284f1c3da51052379eb89370a7cff65" name="containerd" arch="src">
  <version epoch="0" ver="1.3.9" rel="lp152.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
</package>
<package pkgid="8f291708bda7080f89e02c35e0217d4b04a5868bceb0c1128a9b85f482489840" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="lp152.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
</package>
<package pkgid="263d8235f7ed43cb7cf796e54736ef2311e10cee667b1b3f3f0a5cd9fd5fd46a" name="containerd" arch="src">
  <version epoch="0" ver="1.4.11" rel="lp152.2.12.1"/>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
</package>
<package pkgid="f7c88591d0a5b176e11c68825b929db2c1b7bc09b758e3b9ec603fec1844a2c6" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="lp152.2.12.1"/>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
</package>
<package pkgid="331467bd899618cb11eb708534597ccab6491544be3baef6fc2dceb3eb6f6001" name="containerd" arch="src">
  <version epoch="0" ver="1.4.4" rel="lp152.2.6.1"/>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="3d16d5afb798d03684d4d51886116c6898fcf53578d5d608bfcecc0afa6f2b94" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="lp152.2.6.1"/>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="6df502962dd0e4f6671040846e612d86a57a11a90857f935a162633389b7053a" name="containerd" arch="src">
  <version epoch="0" ver="1.4.4" rel="lp152.2.9.1"/>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1626264000">- Add patch for CVE-2021-32760. bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
</package>
<package pkgid="43f37cdd5f57bc8db020de261869c20acac5955d17c55caf96099bb8dbdea196" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="lp152.2.9.1"/>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1626264000">- Add patch for CVE-2021-32760. bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
</package>
<package pkgid="f7693ab319b034f636bd3b609b614a2e24923c28d8d29bb50fbc51b89916618e" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="lp152.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
</package>
<package pkgid="574db88002feec00f0b4e73e4feaae0fd247446278c835d408c00a7ff904d82d" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="lp152.2.12.1"/>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
</package>
<package pkgid="25d0e02a9585dbfb8d721cfca4636a3e38769811bfd80a9050e66a7fc8f03e4f" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="lp152.2.6.1"/>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="f7bd4a25b3924e53018178ca2cf376a9d1634b8618b1abcccedc3331aa2f0ab6" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="lp152.2.9.1"/>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1626264000">- Add patch for CVE-2021-32760. bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
</package>
<package pkgid="e617d7d4b9790708a53f451bd2d854f9e324eec08e749e7286fdcad5fc73f18d" name="corosync" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="c689e3fcdca42f8a5371c0127239ded5baf1e855d19b0723cf714e9b0318f4e8" name="corosync" arch="src">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="bf6c9377cefdd7fb89455ffec88d496b3384ce1c8530414bce263cdd66272b55" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="15e0d0d69d32efa339c35faa9e3186f63607c02ec061c3250c0b59d3eba5ec5b" name="corosync" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.6.1"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
  <changelog author="Emil Penchev &lt;emil.penchev@suse.com&gt;" date="1629806400">- corosync totem: bsc#1189680, Add cancel_token_hold_on_retransmit config option
  Added: bsc#1189680-cancel_token_hold_on_retransmit-option.patch</changelog>
</package>
<package pkgid="c4c5297e6c34f56c9597e6a8ad06363b750f691ab2e08381064665c8a2e590bb" name="corosync" arch="src">
  <version epoch="0" ver="2.4.5" rel="lp152.5.6.1"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
  <changelog author="Emil Penchev &lt;emil.penchev@suse.com&gt;" date="1629806400">- corosync totem: bsc#1189680, Add cancel_token_hold_on_retransmit config option
  Added: bsc#1189680-cancel_token_hold_on_retransmit-option.patch</changelog>
</package>
<package pkgid="944ba0afcd7030f05bd84212bdf2894e1a09c17a015e5e87ab19bd18765a586d" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.6.1"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
  <changelog author="Emil Penchev &lt;emil.penchev@suse.com&gt;" date="1629806400">- corosync totem: bsc#1189680, Add cancel_token_hold_on_retransmit config option
  Added: bsc#1189680-cancel_token_hold_on_retransmit-option.patch</changelog>
</package>
<package pkgid="01b8f7da2728cf843a596f922d5aad8c8fdfdf8d4c62f755df41950164749d2c" name="corosync-qdevice" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="e6966c853c6931f8c3cc96b118a485d49f088ee231f3d4f64ed72ea3c494ac6b" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="281120e10fc0695ba8c93aadb190185077477c18633e346f239ef0d767f606d8" name="corosync-qdevice" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.6.1"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
  <changelog author="Emil Penchev &lt;emil.penchev@suse.com&gt;" date="1629806400">- corosync totem: bsc#1189680, Add cancel_token_hold_on_retransmit config option
  Added: bsc#1189680-cancel_token_hold_on_retransmit-option.patch</changelog>
</package>
<package pkgid="7201ba34608ce9c4e0e0afcc803b5d168319025c5d1b294cc6dc7a2f9471505e" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.6.1"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
  <changelog author="Emil Penchev &lt;emil.penchev@suse.com&gt;" date="1629806400">- corosync totem: bsc#1189680, Add cancel_token_hold_on_retransmit config option
  Added: bsc#1189680-cancel_token_hold_on_retransmit-option.patch</changelog>
</package>
<package pkgid="1f23469fc50dfeb7975883686e7b3102f8062b17e7710f4f74525af660cae806" name="corosync-qnetd" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="d85adb2e502215f6b37043b065547bcd1880133fcd8cc62076f0da930ca7695e" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="3c563de148f2d7fdc2e4de8c45db9cc82b8387bb9650f71e4dfe5e2b1c0f2fcc" name="corosync-qnetd" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.6.1"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
  <changelog author="Emil Penchev &lt;emil.penchev@suse.com&gt;" date="1629806400">- corosync totem: bsc#1189680, Add cancel_token_hold_on_retransmit config option
  Added: bsc#1189680-cancel_token_hold_on_retransmit-option.patch</changelog>
</package>
<package pkgid="c8b3fda7bb3f37326ea231c0395f4e869b9a83ad4eccf2a05fcc559e3a354d64" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.6.1"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
  <changelog author="Emil Penchev &lt;emil.penchev@suse.com&gt;" date="1629806400">- corosync totem: bsc#1189680, Add cancel_token_hold_on_retransmit config option
  Added: bsc#1189680-cancel_token_hold_on_retransmit-option.patch</changelog>
</package>
<package pkgid="51f57e3cf10071ec107556578cd0fb9bd13ba69164cac152e0baaaf45ad090dd" name="corosync-testagents" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="fd1eb3798c897a879e562d1281b764f29db639c4eb1bb698e8a16afc42958270" name="corosync-testagents" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="63c3f1a73ace2030ed67c2a4ca8fb0e69c5f90eae1901830545ddd1f9afbd326" name="corosync-testagents" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.6.1"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
  <changelog author="Emil Penchev &lt;emil.penchev@suse.com&gt;" date="1629806400">- corosync totem: bsc#1189680, Add cancel_token_hold_on_retransmit config option
  Added: bsc#1189680-cancel_token_hold_on_retransmit-option.patch</changelog>
</package>
<package pkgid="cd886bc32b84e183f51e0a1c2e8bb13d1c245308aa0c5b9845e06c1e3282510d" name="corosync-testagents" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.6.1"/>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
  <changelog author="Emil Penchev &lt;emil.penchev@suse.com&gt;" date="1629806400">- corosync totem: bsc#1189680, Add cancel_token_hold_on_retransmit config option
  Added: bsc#1189680-cancel_token_hold_on_retransmit-option.patch</changelog>
</package>
<package pkgid="a2fb7d303dcdf5289de4aae2942d919859bb1f3aede95302494dadb5d93c80cd" name="coturn" arch="src">
  <version epoch="0" ver="4.5.1.3" rel="lp152.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
</package>
<package pkgid="a3f43435a7fc6f3e64bcd276e5b16f618a4e34510b1905bc4e8ccaa8bbfa94e1" name="coturn" arch="x86_64">
  <version epoch="0" ver="4.5.1.3" rel="lp152.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
</package>
<package pkgid="c04889176f96ecb3992a4cca0389178139d6e017535dfa7da5d3f0f2617559b7" name="coturn-devel" arch="x86_64">
  <version epoch="0" ver="4.5.1.3" rel="lp152.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
</package>
<package pkgid="6c73fdbe85e56d462745c7ed48f693e9f3fa52da855aff0b107842dc73586b0c" name="coturn-utils" arch="x86_64">
  <version epoch="0" ver="4.5.1.3" rel="lp152.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
</package>
<package pkgid="dec818706a20aaee6263623fade9388fea4baace1a8612cdef5f2b9974018819" name="cpio" arch="i586">
  <version epoch="0" ver="2.12" rel="lp152.5.5.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1629115200">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1629288000">- Add another patch to fix regression (bsc#1189465)
  * fix-CVE-2021-38185_3.patch</changelog>
</package>
<package pkgid="053976f6629effa16e7f6a836094652b2b2df98cfb715bcfdd2866f6300bf762" name="cpio" arch="src">
  <version epoch="0" ver="2.12" rel="lp152.5.5.1"/>
  <changelog author="vcizek@suse.com" date="1405598400">- prevent cpio from extracting over a symlink (bnc#658010)
  * added cpio-check_for_symlinks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1406635200">- fix a truncation check in mt
  * added cpio-fix_truncation_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1408622400">- drop cpio-dir_perm.patch
  * no longer needed since 2.11
  * it was dropped from Fedora too and only caused problems (bnc#889138)</changelog>
  <changelog author="jengelh@inai.de" date="1409313600">- Improve on RPM group classification (cpio does not compress
  on its own per se)
- Remove redundant %clean section</changelog>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1629115200">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1629288000">- Add another patch to fix regression (bsc#1189465)
  * fix-CVE-2021-38185_3.patch</changelog>
</package>
<package pkgid="a8b56d35e79b688a29706107e0520406a4342cc6bb7ad111466f69343974d394" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp152.5.5.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1629115200">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1629288000">- Add another patch to fix regression (bsc#1189465)
  * fix-CVE-2021-38185_3.patch</changelog>
</package>
<package pkgid="3a7e9d7333808e99f23558357d3f3210af45d411bde5f89b9b76951223f41af6" name="cpio-lang" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp152.5.5.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1629115200">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1629288000">- Add another patch to fix regression (bsc#1189465)
  * fix-CVE-2021-38185_3.patch</changelog>
</package>
<package pkgid="6511b3a1a2fe1a5c83c11dae8b3cdd75618cac019f052b832c85f0df6a78a5ad" name="cpio-mt" arch="i586">
  <version epoch="0" ver="2.12" rel="lp152.5.5.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1629115200">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1629288000">- Add another patch to fix regression (bsc#1189465)
  * fix-CVE-2021-38185_3.patch</changelog>
</package>
<package pkgid="42fb96dc0360aef40e4e00c8f600fc1ab1f34b1ed0bf96480e230af9d64cf4d9" name="cpio-mt" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp152.5.5.1"/>
  <changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Add gpg signature
- Correct info scriplet dependencies
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1444305600">- update to 2.12
  * Improved documentation
  * Manpages are installed by make install
  * New options for copy-out mode: --ignore-devno,
  - -renumber-inodes, --device-independent, --reproducible
  * update
  * cpio-use_new_ascii_format.patch
  * cpio-mt.patch
  * cpio-eof_tape_handling.patch
  * cpio-pattern-file-sigsegv.patch
  * cpio-check_for_symlinks.patch
  * remove (no longer needed)
  * cpio-stdio.in.patch
  * 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch
  * add
  * cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch to add missing
    return to the nonvoid get_inode_and_dev() function
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1629115200">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1629288000">- Add another patch to fix regression (bsc#1189465)
  * fix-CVE-2021-38185_3.patch</changelog>
</package>
<package pkgid="c8217c3d146ef30e3ee3fe3c14523428967c6f98678dc0dc14ca7f328b928705" name="cpp" arch="i586">
  <version epoch="0" ver="7" rel="lp152.5.3.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="d973cf452fd83c57d266a0ed9926e14e228d4efb9acc3030ea39eeb4da2f96fa" name="cpp" arch="x86_64">
  <version epoch="0" ver="7" rel="lp152.5.3.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="38843f9486cf934978c9aa03f2e70cda43aeb8f6d44d38c427cdbbc9a18eba1c" name="cpp" arch="i586">
  <version epoch="0" ver="7" rel="lp152.5.6.1"/>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1625832000">- With gcc-PIE add -pie even when -fPIC is specified but we are
  not linking a shared library.  [boo#1185348]
- Fix postun of gcc-go alternative.</changelog>
</package>
<package pkgid="7f6de2d106140e70990e07c69568d51ea7ef4f6d8b444f289200b5d6f379e97e" name="cpp" arch="x86_64">
  <version epoch="0" ver="7" rel="lp152.5.6.1"/>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1625832000">- With gcc-PIE add -pie even when -fPIC is specified but we are
  not linking a shared library.  [boo#1185348]
- Fix postun of gcc-go alternative.</changelog>
</package>
<package pkgid="3d1b3231c34960efda4d8f9e682e7cf152bc60587b41f4a33c2a5be292a0b884" name="cpp10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.2"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="f211226667077cfa5c862ab29478ccf1ae4d87110bb04fb7ecf6723bf4224cfc" name="cpp10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.4.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d1873e8efab1ca0ffeb4757c4d4315db8c3ccb1115c3f80321029b4c3ad4dc61" name="cpp7" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.12.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1626868800">- Add gcc7-sanitizer-cyclades.patch to remove cyclades.h use from
  libsanitizer fixing builds with recent kernels.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1632744000">- Add gcc7-ada-MINSTKSZ.patch to fix build with glibc 2.34.
- Add bits/unistd_ext.h to the list of removed fixed includes.</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1634731200">- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
  to add -fpatchable-function-entry feature to gcc-7.</changelog>
  <changelog author="Lukas Lansky &lt;lukas.lansky@suse.com&gt;" date="1635163200">- Add gcc7-pr55917.patch to do not handle exceptions in std::thread
  (jsc#CAR-1182)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1635249600">- Adjust some ambiguous SPDX license specifications to prevent
  spec-cleaner from messing up.</changelog>
</package>
<package pkgid="8f78eaee4de1bab8aa8263cd904f2930ff1b733db0a945622c3848cdd115e3a8" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.12.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1626868800">- Add gcc7-sanitizer-cyclades.patch to remove cyclades.h use from
  libsanitizer fixing builds with recent kernels.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1632744000">- Add gcc7-ada-MINSTKSZ.patch to fix build with glibc 2.34.
- Add bits/unistd_ext.h to the list of removed fixed includes.</changelog>
  <changelog author="Giuliano Belinassi &lt;giuliano.belinassi@suse.com&gt;" date="1634731200">- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
  to add -fpatchable-function-entry feature to gcc-7.</changelog>
  <changelog author="Lukas Lansky &lt;lukas.lansky@suse.com&gt;" date="1635163200">- Add gcc7-pr55917.patch to do not handle exceptions in std::thread
  (jsc#CAR-1182)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1635249600">- Adjust some ambiguous SPDX license specifications to prevent
  spec-cleaner from messing up.</changelog>
</package>
<package pkgid="17c99485d264d06d9313ddd2104eed320305ffc2701a64ce1174c2471710a57d" name="cpp7" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="87a57d11d6dbe47721808eb4ffb15d6ed083f2b14109d6d33463b0d0e9b60062" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="1239dedc8947cedceee1194edde3cc553b5adc488c8ce2c5f5f2bc1e8a86d4ce" name="cpp7" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="491e365455ff1f4b0e7ec6ef2ba160c6cf188099308d9a8bf805210cf6159cc4" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="10d71bf9b834a29ad95caee41176064ca5cddd057c462bd427147b4a6f5da902" name="cpp7" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="de83ae29b2221d089a82b9bd08f0a5620ba9ebf58f9b5d8e4e3f4ec1f937ff82" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="7b62ec440cf5dc6868165b329e09665b47046aeb743f29f740b1a734f804d5fa" name="cpp9" arch="i586">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="52133ad4f00eac5df5fe3ac2afb1e8d4acbcf13006fcdf16363bff53b3c554b2" name="cpp9" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="91dcc42e8c1394552f14300cb075bced528e1cd4a669d87a8079e0e948bfa40f" name="cpupower" arch="src">
  <version epoch="0" ver="5.5" rel="lp152.5.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1605614400">- Add AMD Fam 19h support (bsc#1177394)
  A tools-power-turbostat-Support-AMD-Family-19h.patch</changelog>
</package>
<package pkgid="99cc645c3c6369f505664481b3645b0717ee3074247fdd931a951e1d985458d0" name="cpupower" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp152.5.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1605614400">- Add AMD Fam 19h support (bsc#1177394)
  A tools-power-turbostat-Support-AMD-Family-19h.patch</changelog>
</package>
<package pkgid="805b6d004a8f3136f5e29eb976c1cde29d3486e1cf26011c39071ab534055a16" name="cpupower-bench" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp152.5.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1605614400">- Add AMD Fam 19h support (bsc#1177394)
  A tools-power-turbostat-Support-AMD-Family-19h.patch</changelog>
</package>
<package pkgid="3d72b84f8552a7e7e0ef18c8b96622a989559821d55fbdf9a96799898d97c5e1" name="cpupower-devel" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp152.5.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1605614400">- Add AMD Fam 19h support (bsc#1177394)
  A tools-power-turbostat-Support-AMD-Family-19h.patch</changelog>
</package>
<package pkgid="d9d94f704078457ed766c6bc67e26ac1190b8c10bc8387b7999fdf57badb3842" name="cracklib" arch="i586">
  <version epoch="0" ver="2.9.7" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 2.9.2
  + support build of python support outside of source tree
  + fix bug in Python string distance calculation
  + fix bug #16 / debian bug 724570 - broken optimization with packlib
    prevblock
- Adapt patch to upstream changes
  + cracklib-visibility.patch &gt; cracklib-2.9.2-visibility.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Cleanup spec file with spec-cleaner
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1439899200">- Update to 2.9.5
  * fix matching against first password in dictionary (Anton Dobkin)
- Changes for 2.9.4
  * remove doubled prototype
- Changes for 2.9.3
  * expose additional functions externally</changelog>
  <changelog author="hguo@suse.com" date="1471262400">- Relabel patches:
  cracklib-magic.diff -&gt; 0001-cracklib-magic.diff
  cracklib-2.9.2-visibility.patch -&gt; 0002-cracklib-2.9.2-visibility.patch
- Add patch 0003-overflow-processing-gecos.patch
  to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318)</changelog>
  <changelog author="hguo@suse.com" date="1471435200">- Add patch 0004-overflow-processing-long-words.patch
  to fix a new buffer overflow identified together with bsc#992966.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="pgajdos@suse.com" date="1636718400">- %check: really test the package [bsc#1191736]</changelog>
</package>
<package pkgid="b5adb5174e784b4603a2d3334e483bd8d5c47140bb6eb578df9c6fd17184a51e" name="cracklib" arch="src">
  <version epoch="0" ver="2.9.7" rel="lp152.2.3.1"/>
  <changelog author="cdenicolo@novell.com" date="1299499200">- license update: LGPLv2.1
  Project has changed license to LGPLv2.1</changelog>
  <changelog author="meissner@suse.de" date="1305720000">- ppc64 has different symbols in nm output.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add cracklib-devel to baselibs</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake and libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="meissner@suse.com" date="1325246400">- do not run update-po to make build-compare work.
  (Likely added for translation-update-upstream, but this should just
  change the .po files, no need for a .pot change?)</changelog>
  <changelog author="mc@suse.de" date="1325505600">- fix broken chinese translation (bnc#726059)</changelog>
  <changelog author="dmueller@suse.com" date="1359460800">- update to 2.8.22:
  - add words from "The Top 500 Worst Passwords of All Time"
  - python 3 support (not yet packaged)</changelog>
  <changelog author="mc@suse.com" date="1370692800">- update to version 2.9.0
  * add new FascistCheckUser function
- remove translation-fix.dif
  * text changed - get translation via translation-update-upstream</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 2.9.2
  + support build of python support outside of source tree
  + fix bug in Python string distance calculation
  + fix bug #16 / debian bug 724570 - broken optimization with packlib
    prevblock
- Adapt patch to upstream changes
  + cracklib-visibility.patch &gt; cracklib-2.9.2-visibility.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Cleanup spec file with spec-cleaner
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1439899200">- Update to 2.9.5
  * fix matching against first password in dictionary (Anton Dobkin)
- Changes for 2.9.4
  * remove doubled prototype
- Changes for 2.9.3
  * expose additional functions externally</changelog>
  <changelog author="hguo@suse.com" date="1471262400">- Relabel patches:
  cracklib-magic.diff -&gt; 0001-cracklib-magic.diff
  cracklib-2.9.2-visibility.patch -&gt; 0002-cracklib-2.9.2-visibility.patch
- Add patch 0003-overflow-processing-gecos.patch
  to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318)</changelog>
  <changelog author="hguo@suse.com" date="1471435200">- Add patch 0004-overflow-processing-long-words.patch
  to fix a new buffer overflow identified together with bsc#992966.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="pgajdos@suse.com" date="1636718400">- %check: really test the package [bsc#1191736]</changelog>
</package>
<package pkgid="61ddcb6f9cf7269bb6c7d06f0614262a43b2d33cce2bdb2eee7f9169fd5f0851" name="cracklib" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 2.9.2
  + support build of python support outside of source tree
  + fix bug in Python string distance calculation
  + fix bug #16 / debian bug 724570 - broken optimization with packlib
    prevblock
- Adapt patch to upstream changes
  + cracklib-visibility.patch &gt; cracklib-2.9.2-visibility.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Cleanup spec file with spec-cleaner
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1439899200">- Update to 2.9.5
  * fix matching against first password in dictionary (Anton Dobkin)
- Changes for 2.9.4
  * remove doubled prototype
- Changes for 2.9.3
  * expose additional functions externally</changelog>
  <changelog author="hguo@suse.com" date="1471262400">- Relabel patches:
  cracklib-magic.diff -&gt; 0001-cracklib-magic.diff
  cracklib-2.9.2-visibility.patch -&gt; 0002-cracklib-2.9.2-visibility.patch
- Add patch 0003-overflow-processing-gecos.patch
  to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318)</changelog>
  <changelog author="hguo@suse.com" date="1471435200">- Add patch 0004-overflow-processing-long-words.patch
  to fix a new buffer overflow identified together with bsc#992966.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="pgajdos@suse.com" date="1636718400">- %check: really test the package [bsc#1191736]</changelog>
</package>
<package pkgid="44c7a7d2c396e72e2d1783970ce4ddb1890a06b79151f4e68a739f26bc71182e" name="cracklib-devel" arch="i586">
  <version epoch="0" ver="2.9.7" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 2.9.2
  + support build of python support outside of source tree
  + fix bug in Python string distance calculation
  + fix bug #16 / debian bug 724570 - broken optimization with packlib
    prevblock
- Adapt patch to upstream changes
  + cracklib-visibility.patch &gt; cracklib-2.9.2-visibility.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Cleanup spec file with spec-cleaner
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1439899200">- Update to 2.9.5
  * fix matching against first password in dictionary (Anton Dobkin)
- Changes for 2.9.4
  * remove doubled prototype
- Changes for 2.9.3
  * expose additional functions externally</changelog>
  <changelog author="hguo@suse.com" date="1471262400">- Relabel patches:
  cracklib-magic.diff -&gt; 0001-cracklib-magic.diff
  cracklib-2.9.2-visibility.patch -&gt; 0002-cracklib-2.9.2-visibility.patch
- Add patch 0003-overflow-processing-gecos.patch
  to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318)</changelog>
  <changelog author="hguo@suse.com" date="1471435200">- Add patch 0004-overflow-processing-long-words.patch
  to fix a new buffer overflow identified together with bsc#992966.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="pgajdos@suse.com" date="1636718400">- %check: really test the package [bsc#1191736]</changelog>
</package>
<package pkgid="f0321a4ae51425e6dfb2978204e73d804752ca8ca268d9478ada6409d4411ddc" name="cracklib-devel" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 2.9.2
  + support build of python support outside of source tree
  + fix bug in Python string distance calculation
  + fix bug #16 / debian bug 724570 - broken optimization with packlib
    prevblock
- Adapt patch to upstream changes
  + cracklib-visibility.patch &gt; cracklib-2.9.2-visibility.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Cleanup spec file with spec-cleaner
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1439899200">- Update to 2.9.5
  * fix matching against first password in dictionary (Anton Dobkin)
- Changes for 2.9.4
  * remove doubled prototype
- Changes for 2.9.3
  * expose additional functions externally</changelog>
  <changelog author="hguo@suse.com" date="1471262400">- Relabel patches:
  cracklib-magic.diff -&gt; 0001-cracklib-magic.diff
  cracklib-2.9.2-visibility.patch -&gt; 0002-cracklib-2.9.2-visibility.patch
- Add patch 0003-overflow-processing-gecos.patch
  to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318)</changelog>
  <changelog author="hguo@suse.com" date="1471435200">- Add patch 0004-overflow-processing-long-words.patch
  to fix a new buffer overflow identified together with bsc#992966.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="pgajdos@suse.com" date="1636718400">- %check: really test the package [bsc#1191736]</changelog>
</package>
<package pkgid="7e60ac1c177255ebfcaaf3bb9da5b3b7fd9ae6541a75dfa61fae5d75ea23b8be" name="cracklib-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 2.9.2
  + support build of python support outside of source tree
  + fix bug in Python string distance calculation
  + fix bug #16 / debian bug 724570 - broken optimization with packlib
    prevblock
- Adapt patch to upstream changes
  + cracklib-visibility.patch &gt; cracklib-2.9.2-visibility.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Cleanup spec file with spec-cleaner
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1439899200">- Update to 2.9.5
  * fix matching against first password in dictionary (Anton Dobkin)
- Changes for 2.9.4
  * remove doubled prototype
- Changes for 2.9.3
  * expose additional functions externally</changelog>
  <changelog author="hguo@suse.com" date="1471262400">- Relabel patches:
  cracklib-magic.diff -&gt; 0001-cracklib-magic.diff
  cracklib-2.9.2-visibility.patch -&gt; 0002-cracklib-2.9.2-visibility.patch
- Add patch 0003-overflow-processing-gecos.patch
  to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318)</changelog>
  <changelog author="hguo@suse.com" date="1471435200">- Add patch 0004-overflow-processing-long-words.patch
  to fix a new buffer overflow identified together with bsc#992966.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="pgajdos@suse.com" date="1636718400">- %check: really test the package [bsc#1191736]</changelog>
</package>
<package pkgid="bf5bb914ca07b61057bfe10fd9ea62918b9815a4dd3e772a38dd628a04798b32" name="cracklib-dict-small" arch="i586">
  <version epoch="0" ver="2.9.7" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 2.9.2
  + support build of python support outside of source tree
  + fix bug in Python string distance calculation
  + fix bug #16 / debian bug 724570 - broken optimization with packlib
    prevblock
- Adapt patch to upstream changes
  + cracklib-visibility.patch &gt; cracklib-2.9.2-visibility.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Cleanup spec file with spec-cleaner
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1439899200">- Update to 2.9.5
  * fix matching against first password in dictionary (Anton Dobkin)
- Changes for 2.9.4
  * remove doubled prototype
- Changes for 2.9.3
  * expose additional functions externally</changelog>
  <changelog author="hguo@suse.com" date="1471262400">- Relabel patches:
  cracklib-magic.diff -&gt; 0001-cracklib-magic.diff
  cracklib-2.9.2-visibility.patch -&gt; 0002-cracklib-2.9.2-visibility.patch
- Add patch 0003-overflow-processing-gecos.patch
  to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318)</changelog>
  <changelog author="hguo@suse.com" date="1471435200">- Add patch 0004-overflow-processing-long-words.patch
  to fix a new buffer overflow identified together with bsc#992966.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="pgajdos@suse.com" date="1636718400">- %check: really test the package [bsc#1191736]</changelog>
</package>
<package pkgid="69a419e422718935e0b1d9b0bdd0611d4b4b1a233755cd4ea1f6ed87229efa2d" name="cracklib-dict-small" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 2.9.2
  + support build of python support outside of source tree
  + fix bug in Python string distance calculation
  + fix bug #16 / debian bug 724570 - broken optimization with packlib
    prevblock
- Adapt patch to upstream changes
  + cracklib-visibility.patch &gt; cracklib-2.9.2-visibility.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Cleanup spec file with spec-cleaner
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1439899200">- Update to 2.9.5
  * fix matching against first password in dictionary (Anton Dobkin)
- Changes for 2.9.4
  * remove doubled prototype
- Changes for 2.9.3
  * expose additional functions externally</changelog>
  <changelog author="hguo@suse.com" date="1471262400">- Relabel patches:
  cracklib-magic.diff -&gt; 0001-cracklib-magic.diff
  cracklib-2.9.2-visibility.patch -&gt; 0002-cracklib-2.9.2-visibility.patch
- Add patch 0003-overflow-processing-gecos.patch
  to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318)</changelog>
  <changelog author="hguo@suse.com" date="1471435200">- Add patch 0004-overflow-processing-long-words.patch
  to fix a new buffer overflow identified together with bsc#992966.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="pgajdos@suse.com" date="1636718400">- %check: really test the package [bsc#1191736]</changelog>
</package>
<package pkgid="1151a662f1b3a22c65b2101f339cbf898a83d6ca5c0f8de48977e8cd28fb4e38" name="crash" arch="src">
  <version epoch="0" ver="7.2.8" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="d1ed3b5ed186ea439518c96cb16d51b7dafb4adab263874a52254b71a8e2da56" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="a5be6e28dd0e4edf86a13486f1598ef79dfc48415e18d6f80a7cbdc82d577610" name="crash" arch="src">
  <version epoch="0" ver="7.2.8" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="21d6c062a6e305f8235ff3985d892ea9d69109dccabe79f79d3344d4a8bb3bef" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="8ec3c356d198ad9d15f65a18f3419c311fcf401d7cbf5d8c3fc428cf1cf84730" name="crash" arch="src">
  <version epoch="0" ver="7.2.8" rel="lp152.3.9.2"/>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1588075200">- Add crash-Define-fallback-PN_XNUM.patch
  Add a fallback PN_XNUM definition.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1588766400">- remove bypass lto and add -mfull-toc for ppc64le to check boo#1146646</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599134400">- Always build crash KMPs.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220800">- Add crash-fix-memory_driver-build-kernel-5.8.patch
  Fix memory driver build failure with kernels 5.8+.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220801">- Add eppic-remove-duplicate-symbols.patch
  Fix eppic extension build.</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1599652800">- Add crash-verify-exception-frame-accessible-for-all-verify-requests.patch
  In calls to search a stack for x86_64 exceptions a flag is used
  to request the stack be verified for room to contain saved
  registers. The verify is not performed if other flags are used
  in the same call. Fixing this exposes another bug where only a
  kernel stack is verified anyway, even if the exception is being
  searched for on a userspace stack. Patch fixes both problems.
  (bsc#1162297)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1602244800">- Fix build on aarch64:
  crash-gdb-fix-aarch64.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1607342400">- Corrected project URL in spec file to match the changed upstream
  location as-of May 30th 2020.
  Noted the project URL change in README.SUSE without removing the old URL
  because it represents the location the project source was obtained from.
  The next project source update is available from the new project URL. When
  the package is updated with that source all URL project references will be
  modified to only show the new URL.
  Add crash-update-whitepaper-URL.patch
  Note change of no longer valid old project whitepaper URL to current valid
  project whitepaper URL in help output. Leave the old one reported because it
  represents the location the project source was obtained from for this
  package version.
  (bsc#1179536)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1609934400">- Fix "kmem -i" option on Linux 5.9-rc1 and later kernels (bsc#1179970 ltc#188981).
  crash-Fix-kmem-i-option-on-Linux-5.9-rc1-and-later-kernels.patch
- Fix crash utility is taking forever to initialize a vmcore from large config
  system (bsc#1178827 ltc#189279).
  crash-task.c-avoid-unnecessary-cpu-cycles-in-stkptr_to_tas.patch</changelog>
  <changelog author="Jiri Bohac &lt;jbohac@suse.com&gt;" date="1611835200">- Added crash-xen-increase-__physical_mask_shift_xen-to-52.patch
  (bsc#1177050)</changelog>
</package>
<package pkgid="d7d86e65f4f1102792a412bcba1cb83b82f5c346dabc5636c730ac0840cdc4eb" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.9.2"/>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1588075200">- Add crash-Define-fallback-PN_XNUM.patch
  Add a fallback PN_XNUM definition.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1588766400">- remove bypass lto and add -mfull-toc for ppc64le to check boo#1146646</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599134400">- Always build crash KMPs.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220800">- Add crash-fix-memory_driver-build-kernel-5.8.patch
  Fix memory driver build failure with kernels 5.8+.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220801">- Add eppic-remove-duplicate-symbols.patch
  Fix eppic extension build.</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1599652800">- Add crash-verify-exception-frame-accessible-for-all-verify-requests.patch
  In calls to search a stack for x86_64 exceptions a flag is used
  to request the stack be verified for room to contain saved
  registers. The verify is not performed if other flags are used
  in the same call. Fixing this exposes another bug where only a
  kernel stack is verified anyway, even if the exception is being
  searched for on a userspace stack. Patch fixes both problems.
  (bsc#1162297)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1602244800">- Fix build on aarch64:
  crash-gdb-fix-aarch64.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1607342400">- Corrected project URL in spec file to match the changed upstream
  location as-of May 30th 2020.
  Noted the project URL change in README.SUSE without removing the old URL
  because it represents the location the project source was obtained from.
  The next project source update is available from the new project URL. When
  the package is updated with that source all URL project references will be
  modified to only show the new URL.
  Add crash-update-whitepaper-URL.patch
  Note change of no longer valid old project whitepaper URL to current valid
  project whitepaper URL in help output. Leave the old one reported because it
  represents the location the project source was obtained from for this
  package version.
  (bsc#1179536)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1609934400">- Fix "kmem -i" option on Linux 5.9-rc1 and later kernels (bsc#1179970 ltc#188981).
  crash-Fix-kmem-i-option-on-Linux-5.9-rc1-and-later-kernels.patch
- Fix crash utility is taking forever to initialize a vmcore from large config
  system (bsc#1178827 ltc#189279).
  crash-task.c-avoid-unnecessary-cpu-cycles-in-stkptr_to_tas.patch</changelog>
  <changelog author="Jiri Bohac &lt;jbohac@suse.com&gt;" date="1611835200">- Added crash-xen-increase-__physical_mask_shift_xen-to-52.patch
  (bsc#1177050)</changelog>
</package>
<package pkgid="3f31163981b7ed2e60c2cd252f964a61f7883aaaf7e38627419d9d4291689217" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="09af9e55d0a8436f32c4e1260bccb898e9886ad2c32e357ec04e68edafb2d1a9" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="0cb612133db06fa177ed9252efbd2ef1807fd85a224871de7ad06bff60e032da" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.9.2"/>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1588075200">- Add crash-Define-fallback-PN_XNUM.patch
  Add a fallback PN_XNUM definition.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1588766400">- remove bypass lto and add -mfull-toc for ppc64le to check boo#1146646</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599134400">- Always build crash KMPs.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220800">- Add crash-fix-memory_driver-build-kernel-5.8.patch
  Fix memory driver build failure with kernels 5.8+.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220801">- Add eppic-remove-duplicate-symbols.patch
  Fix eppic extension build.</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1599652800">- Add crash-verify-exception-frame-accessible-for-all-verify-requests.patch
  In calls to search a stack for x86_64 exceptions a flag is used
  to request the stack be verified for room to contain saved
  registers. The verify is not performed if other flags are used
  in the same call. Fixing this exposes another bug where only a
  kernel stack is verified anyway, even if the exception is being
  searched for on a userspace stack. Patch fixes both problems.
  (bsc#1162297)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1602244800">- Fix build on aarch64:
  crash-gdb-fix-aarch64.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1607342400">- Corrected project URL in spec file to match the changed upstream
  location as-of May 30th 2020.
  Noted the project URL change in README.SUSE without removing the old URL
  because it represents the location the project source was obtained from.
  The next project source update is available from the new project URL. When
  the package is updated with that source all URL project references will be
  modified to only show the new URL.
  Add crash-update-whitepaper-URL.patch
  Note change of no longer valid old project whitepaper URL to current valid
  project whitepaper URL in help output. Leave the old one reported because it
  represents the location the project source was obtained from for this
  package version.
  (bsc#1179536)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1609934400">- Fix "kmem -i" option on Linux 5.9-rc1 and later kernels (bsc#1179970 ltc#188981).
  crash-Fix-kmem-i-option-on-Linux-5.9-rc1-and-later-kernels.patch
- Fix crash utility is taking forever to initialize a vmcore from large config
  system (bsc#1178827 ltc#189279).
  crash-task.c-avoid-unnecessary-cpu-cycles-in-stkptr_to_tas.patch</changelog>
  <changelog author="Jiri Bohac &lt;jbohac@suse.com&gt;" date="1611835200">- Added crash-xen-increase-__physical_mask_shift_xen-to-52.patch
  (bsc#1177050)</changelog>
</package>
<package pkgid="2d9625f8ecb4e630e3bd0d8d96ed55276822c1e907a7402d61118b8262166cfe" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="2460e386299389141708d16bea2fcd89ce5657ce3db3a897e43163bf3cd5142b" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="62e77b88d052494fb0c05202f49c9fec3514525bb793a2b458ba41e6b2583caf" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.9.2"/>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1588075200">- Add crash-Define-fallback-PN_XNUM.patch
  Add a fallback PN_XNUM definition.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1588766400">- remove bypass lto and add -mfull-toc for ppc64le to check boo#1146646</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599134400">- Always build crash KMPs.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220800">- Add crash-fix-memory_driver-build-kernel-5.8.patch
  Fix memory driver build failure with kernels 5.8+.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220801">- Add eppic-remove-duplicate-symbols.patch
  Fix eppic extension build.</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1599652800">- Add crash-verify-exception-frame-accessible-for-all-verify-requests.patch
  In calls to search a stack for x86_64 exceptions a flag is used
  to request the stack be verified for room to contain saved
  registers. The verify is not performed if other flags are used
  in the same call. Fixing this exposes another bug where only a
  kernel stack is verified anyway, even if the exception is being
  searched for on a userspace stack. Patch fixes both problems.
  (bsc#1162297)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1602244800">- Fix build on aarch64:
  crash-gdb-fix-aarch64.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1607342400">- Corrected project URL in spec file to match the changed upstream
  location as-of May 30th 2020.
  Noted the project URL change in README.SUSE without removing the old URL
  because it represents the location the project source was obtained from.
  The next project source update is available from the new project URL. When
  the package is updated with that source all URL project references will be
  modified to only show the new URL.
  Add crash-update-whitepaper-URL.patch
  Note change of no longer valid old project whitepaper URL to current valid
  project whitepaper URL in help output. Leave the old one reported because it
  represents the location the project source was obtained from for this
  package version.
  (bsc#1179536)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1609934400">- Fix "kmem -i" option on Linux 5.9-rc1 and later kernels (bsc#1179970 ltc#188981).
  crash-Fix-kmem-i-option-on-Linux-5.9-rc1-and-later-kernels.patch
- Fix crash utility is taking forever to initialize a vmcore from large config
  system (bsc#1178827 ltc#189279).
  crash-task.c-avoid-unnecessary-cpu-cycles-in-stkptr_to_tas.patch</changelog>
  <changelog author="Jiri Bohac &lt;jbohac@suse.com&gt;" date="1611835200">- Added crash-xen-increase-__physical_mask_shift_xen-to-52.patch
  (bsc#1177050)</changelog>
</package>
<package pkgid="211f55e2442eed91cb57fab7181ca8589936512d4e854ac5f9a638a7a3f2088c" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="ce4211a54855628da69cff53e3cfa5fc0e08d0dff5ec31e8de157b22a7dc1975" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="fbd4012b8805786218212aa947fbadc5cb720afe7635d583338109e31ee4529c" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.9.2"/>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1588075200">- Add crash-Define-fallback-PN_XNUM.patch
  Add a fallback PN_XNUM definition.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1588766400">- remove bypass lto and add -mfull-toc for ppc64le to check boo#1146646</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599134400">- Always build crash KMPs.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220800">- Add crash-fix-memory_driver-build-kernel-5.8.patch
  Fix memory driver build failure with kernels 5.8+.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220801">- Add eppic-remove-duplicate-symbols.patch
  Fix eppic extension build.</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1599652800">- Add crash-verify-exception-frame-accessible-for-all-verify-requests.patch
  In calls to search a stack for x86_64 exceptions a flag is used
  to request the stack be verified for room to contain saved
  registers. The verify is not performed if other flags are used
  in the same call. Fixing this exposes another bug where only a
  kernel stack is verified anyway, even if the exception is being
  searched for on a userspace stack. Patch fixes both problems.
  (bsc#1162297)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1602244800">- Fix build on aarch64:
  crash-gdb-fix-aarch64.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1607342400">- Corrected project URL in spec file to match the changed upstream
  location as-of May 30th 2020.
  Noted the project URL change in README.SUSE without removing the old URL
  because it represents the location the project source was obtained from.
  The next project source update is available from the new project URL. When
  the package is updated with that source all URL project references will be
  modified to only show the new URL.
  Add crash-update-whitepaper-URL.patch
  Note change of no longer valid old project whitepaper URL to current valid
  project whitepaper URL in help output. Leave the old one reported because it
  represents the location the project source was obtained from for this
  package version.
  (bsc#1179536)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1609934400">- Fix "kmem -i" option on Linux 5.9-rc1 and later kernels (bsc#1179970 ltc#188981).
  crash-Fix-kmem-i-option-on-Linux-5.9-rc1-and-later-kernels.patch
- Fix crash utility is taking forever to initialize a vmcore from large config
  system (bsc#1178827 ltc#189279).
  crash-task.c-avoid-unnecessary-cpu-cycles-in-stkptr_to_tas.patch</changelog>
  <changelog author="Jiri Bohac &lt;jbohac@suse.com&gt;" date="1611835200">- Added crash-xen-increase-__physical_mask_shift_xen-to-52.patch
  (bsc#1177050)</changelog>
</package>
<package pkgid="a666cf578a415cccbbe607451860899c56bcd894e8ce231add94996ba97f222e" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="8c70c46eefce135c88582ac30b0df8000e3bc516127ae3d26efc0b8dad760681" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="84b243db2ef328f546faebf672349ed3d94bd73fafb7feffd5cea346d6e75c6b" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.9.2"/>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1588075200">- Add crash-Define-fallback-PN_XNUM.patch
  Add a fallback PN_XNUM definition.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1588766400">- remove bypass lto and add -mfull-toc for ppc64le to check boo#1146646</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599134400">- Always build crash KMPs.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220800">- Add crash-fix-memory_driver-build-kernel-5.8.patch
  Fix memory driver build failure with kernels 5.8+.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220801">- Add eppic-remove-duplicate-symbols.patch
  Fix eppic extension build.</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1599652800">- Add crash-verify-exception-frame-accessible-for-all-verify-requests.patch
  In calls to search a stack for x86_64 exceptions a flag is used
  to request the stack be verified for room to contain saved
  registers. The verify is not performed if other flags are used
  in the same call. Fixing this exposes another bug where only a
  kernel stack is verified anyway, even if the exception is being
  searched for on a userspace stack. Patch fixes both problems.
  (bsc#1162297)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1602244800">- Fix build on aarch64:
  crash-gdb-fix-aarch64.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1607342400">- Corrected project URL in spec file to match the changed upstream
  location as-of May 30th 2020.
  Noted the project URL change in README.SUSE without removing the old URL
  because it represents the location the project source was obtained from.
  The next project source update is available from the new project URL. When
  the package is updated with that source all URL project references will be
  modified to only show the new URL.
  Add crash-update-whitepaper-URL.patch
  Note change of no longer valid old project whitepaper URL to current valid
  project whitepaper URL in help output. Leave the old one reported because it
  represents the location the project source was obtained from for this
  package version.
  (bsc#1179536)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1609934400">- Fix "kmem -i" option on Linux 5.9-rc1 and later kernels (bsc#1179970 ltc#188981).
  crash-Fix-kmem-i-option-on-Linux-5.9-rc1-and-later-kernels.patch
- Fix crash utility is taking forever to initialize a vmcore from large config
  system (bsc#1178827 ltc#189279).
  crash-task.c-avoid-unnecessary-cpu-cycles-in-stkptr_to_tas.patch</changelog>
  <changelog author="Jiri Bohac &lt;jbohac@suse.com&gt;" date="1611835200">- Added crash-xen-increase-__physical_mask_shift_xen-to-52.patch
  (bsc#1177050)</changelog>
</package>
<package pkgid="bc5cee3a436cc2335839f9b05d56fe456c54fc65dd1a41b458fc12fd36ef5897" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.8_k5.3.18_lp152.36" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="4560fd7347c12faa2271ab1f1ca3e2fc8daeed7b22dcb07c5cd561ca50765e5b" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.8_k5.3.18_lp152.69" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="00a2689a95700b6c3b00f83362ceac049baeea1b304dcea05faaed0fac5d5822" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.8_k5.3.18_lp152.84" rel="lp152.3.9.2"/>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1588075200">- Add crash-Define-fallback-PN_XNUM.patch
  Add a fallback PN_XNUM definition.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1588766400">- remove bypass lto and add -mfull-toc for ppc64le to check boo#1146646</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599134400">- Always build crash KMPs.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220800">- Add crash-fix-memory_driver-build-kernel-5.8.patch
  Fix memory driver build failure with kernels 5.8+.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220801">- Add eppic-remove-duplicate-symbols.patch
  Fix eppic extension build.</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1599652800">- Add crash-verify-exception-frame-accessible-for-all-verify-requests.patch
  In calls to search a stack for x86_64 exceptions a flag is used
  to request the stack be verified for room to contain saved
  registers. The verify is not performed if other flags are used
  in the same call. Fixing this exposes another bug where only a
  kernel stack is verified anyway, even if the exception is being
  searched for on a userspace stack. Patch fixes both problems.
  (bsc#1162297)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1602244800">- Fix build on aarch64:
  crash-gdb-fix-aarch64.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1607342400">- Corrected project URL in spec file to match the changed upstream
  location as-of May 30th 2020.
  Noted the project URL change in README.SUSE without removing the old URL
  because it represents the location the project source was obtained from.
  The next project source update is available from the new project URL. When
  the package is updated with that source all URL project references will be
  modified to only show the new URL.
  Add crash-update-whitepaper-URL.patch
  Note change of no longer valid old project whitepaper URL to current valid
  project whitepaper URL in help output. Leave the old one reported because it
  represents the location the project source was obtained from for this
  package version.
  (bsc#1179536)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1609934400">- Fix "kmem -i" option on Linux 5.9-rc1 and later kernels (bsc#1179970 ltc#188981).
  crash-Fix-kmem-i-option-on-Linux-5.9-rc1-and-later-kernels.patch
- Fix crash utility is taking forever to initialize a vmcore from large config
  system (bsc#1178827 ltc#189279).
  crash-task.c-avoid-unnecessary-cpu-cycles-in-stkptr_to_tas.patch</changelog>
  <changelog author="Jiri Bohac &lt;jbohac@suse.com&gt;" date="1611835200">- Added crash-xen-increase-__physical_mask_shift_xen-to-52.patch
  (bsc#1177050)</changelog>
</package>
<package pkgid="abe8cd07bcfe5651466e01f9cca360ad0ee383c15f2b452626733273da2b1d96" name="crash-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="7.2.8_k5.3.18_lp152.36" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="0b3234d3a4df2e368d3243eaee2df372deb1f2e421489d8d920ba5ec209ccf82" name="crash-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="7.2.8_k5.3.18_lp152.69" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="017f12db8351abf1b7740739c5f56c42b63f66154e82de6860828daa417d39c5" name="crash-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="7.2.8_k5.3.18_lp152.84" rel="lp152.3.9.2"/>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1588075200">- Add crash-Define-fallback-PN_XNUM.patch
  Add a fallback PN_XNUM definition.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1588766400">- remove bypass lto and add -mfull-toc for ppc64le to check boo#1146646</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599134400">- Always build crash KMPs.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220800">- Add crash-fix-memory_driver-build-kernel-5.8.patch
  Fix memory driver build failure with kernels 5.8+.</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1599220801">- Add eppic-remove-duplicate-symbols.patch
  Fix eppic extension build.</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1599652800">- Add crash-verify-exception-frame-accessible-for-all-verify-requests.patch
  In calls to search a stack for x86_64 exceptions a flag is used
  to request the stack be verified for room to contain saved
  registers. The verify is not performed if other flags are used
  in the same call. Fixing this exposes another bug where only a
  kernel stack is verified anyway, even if the exception is being
  searched for on a userspace stack. Patch fixes both problems.
  (bsc#1162297)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1602244800">- Fix build on aarch64:
  crash-gdb-fix-aarch64.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1607342400">- Corrected project URL in spec file to match the changed upstream
  location as-of May 30th 2020.
  Noted the project URL change in README.SUSE without removing the old URL
  because it represents the location the project source was obtained from.
  The next project source update is available from the new project URL. When
  the package is updated with that source all URL project references will be
  modified to only show the new URL.
  Add crash-update-whitepaper-URL.patch
  Note change of no longer valid old project whitepaper URL to current valid
  project whitepaper URL in help output. Leave the old one reported because it
  represents the location the project source was obtained from for this
  package version.
  (bsc#1179536)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1609934400">- Fix "kmem -i" option on Linux 5.9-rc1 and later kernels (bsc#1179970 ltc#188981).
  crash-Fix-kmem-i-option-on-Linux-5.9-rc1-and-later-kernels.patch
- Fix crash utility is taking forever to initialize a vmcore from large config
  system (bsc#1178827 ltc#189279).
  crash-task.c-avoid-unnecessary-cpu-cycles-in-stkptr_to_tas.patch</changelog>
  <changelog author="Jiri Bohac &lt;jbohac@suse.com&gt;" date="1611835200">- Added crash-xen-increase-__physical_mask_shift_xen-to-52.patch
  (bsc#1177050)</changelog>
</package>
<package pkgid="2474a01bf9a3605811d27435d2ba8091466552ce30bfb1ef8b3b8a4224d71aa4" name="createrepo_c" arch="i586">
  <version epoch="0" ver="0.15.4" rel="lp152.3.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1516622400">- Switch to singlespec buidling of python bindings
- Make sure to use cmake macros to have it easier to gork what is
  happending by overriding %__builddir
- Sort out with spec-cleaner
- Fix embedding of date and time to documentation</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1518523200">- Disable tests on SLE12 due to the python-nose requirements</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1519214400">- [bnc#1075670] changed to provide createrepo as update-alternative
  because createrepo_c will replace createrepo because of switch to
  python3
- also provide createrepo-implementation</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1522929600">- fix spelling of old weakdeps feature switch (bsc#1088328)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1533124800">- Update to 0.11.1
  + Add support for RPMs with large files
  + Identify Requires(missingok) as Recommends correctly
  + Enable legacy tags by default
  + Fix missing packages in mergerepo_c with multiple VR of same name
  + Add mergerepo_c --repo-prefix-search and --repo-prefix-replace
  + Build against Python 3 by default for bindings
- Drop snapshot source service and snapshot tarball
- Use license macro for license file
- Drop trailing whitespace
- Fix comment about drpm support
- [boo#1125044] fix for huge rpm packages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281600">- Update to 0.12.0
  + Add basic support for zchunk metadata
  + Add support for building wheels to upload to PyPI
- Drop Python 2 subpackage
- Enable drpm support
- Enable zchunk for openSUSE Leap 15.1+ and Tumbleweed
- Adjust changes entries to use full author identities</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281601">- Backport fixes from upstream
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1551441600">- Added upstream patches
  * 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  * 0002-fix-linking-when-Wl-no-undefined-is-set.patch
- Drop included patches
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch
- Disable drpm support
- Update to version 0.12.1:
  * Release 0.12.1
  * For make test, xz and zchunk (not just *-devel) are required.
  * Make cmake variable PYTHON_EXECUTABLE global
  * Add zchunk support already to Fedora 29
  * [spec] Fix spec to work for epel 7
  * Add CMake support for python interpreter path
  * Add space after if statement
  * Fix misc test
  * Add missing sentinal
  * Add zchunk support to mergerepo_c for extra files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Use noun phrase in summary.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556971200">- Update to 0.13.0
  + Add support for handling modulemd
  + Add support for Koji simple merge mode
  + Add support for zchunked modulemd
  + Fixed --keep-all-metadata to keep all additional metadata
- Disable tests if modulemd support is not enabled to prevent wrong failures
- Drop patches included in this release
  + 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  + 0002-fix-linking-when-Wl-no-undefined-is-set.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556971201">- Update to 0.13.1
  + Fix tests to work properly when modulemd support is not enabled
- Enable modulemd support on openSUSE Leap 15.1+ and Tumbleweed</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557921600">- Update to 0.14.0
  + Fix crash when dumping updateinfo and module is omitted (rh#1707981)
  + Add --pkgorigins mode</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561809600">- Update to 0.14.2
  + Fix issue with createrepo_c hanging at the end (rh#1714666)
  + Don't include packages with forbidden control chars in repodata (boo#1110914)
  + Correct pkg count in headers if there were invalid pkgs (rh#1596211)
  + Prevent exiting with 0 if errors occur while finalizing repodata</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1568721600">- Update to version 0.15.1:
  * Release 0.15.1
  * Fix null pointer crash in cr_dumper_thread() if it fails to get checksum
  * Fix search in string with missing terminating zero (rh#1750673)
  * Depend on DRPM minimum version 0.4.0
  * Release 0.15.0
  * Revise drpm dependency check and bump the minimum version to 0.3.0
  * Release 0.14.4
  * Update documentation and regenerate man pages to sync up
  * Use drpm_make from drpm instead of deltarpm (rh#1687843)
  * Fix some DEBUG build warnings
  * Switch off html timestamps on documentation (rh#1731050)
  * Update documentation for mergerepo_c merge methods (rh#1722803)
  * Update documentation for --retain-old-md and --compatibility
  * Fix --read-pkgs-list to only list actually read packages
  * Release 0.14.3
  * Add missing python metadata to python2/3-createrepo_c (rh#1695677)
  * detect plain tar file as non compressed</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1568721601">- fix build by adding missing tarball and updating filelist</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1574078400">- Add BuildRequires on python3, it won't be pulled in side effect of
  requiring python3-nose</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1574683200">- Update to 0.15.2
  + Fix file mode for cache (rh#1686812)
  + Honor umask on cache files (rh#1686812)
- Enable DeltaRPM support for openSUSE targets on Leap 15.2+ and TW</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Update to 0.15.3
  + Export all changelog entries in compatibility mode
  + Libmagic to follow symlinks (rh#1776399)
  + Add shortcut to detect *.yaml files as not compressed
- Ensure createrepo_c fully replaces createrepo on Tumbleweed
- Remove old and now unused dependency on deltarpm as drpm is used now</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575633600">- Update to 0.15.4
  + Add reboot_suggested field to UpdateRecord (rh#1772466)
  + Skip directory matching --exclude right away
  + Add restart_suggested to updatecollectionpackage</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1625054400">- [boo#1187811] fix segfaults when metadata loading fails
  + added 0001-set-proper-error-on-failed-loading-of-metadata.patch</changelog>
</package>
<package pkgid="cd6cab68ce15935daaaaff1ce2ce5cbd03f41569a12a58dd46aa8f4124aacf69" name="createrepo_c" arch="src">
  <version epoch="0" ver="0.15.4" rel="lp152.3.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1516622400">- Switch to singlespec buidling of python bindings
- Make sure to use cmake macros to have it easier to gork what is
  happending by overriding %__builddir
- Sort out with spec-cleaner
- Fix embedding of date and time to documentation</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1518523200">- Disable tests on SLE12 due to the python-nose requirements</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1519214400">- [bnc#1075670] changed to provide createrepo as update-alternative
  because createrepo_c will replace createrepo because of switch to
  python3
- also provide createrepo-implementation</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1522929600">- fix spelling of old weakdeps feature switch (bsc#1088328)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1533124800">- Update to 0.11.1
  + Add support for RPMs with large files
  + Identify Requires(missingok) as Recommends correctly
  + Enable legacy tags by default
  + Fix missing packages in mergerepo_c with multiple VR of same name
  + Add mergerepo_c --repo-prefix-search and --repo-prefix-replace
  + Build against Python 3 by default for bindings
- Drop snapshot source service and snapshot tarball
- Use license macro for license file
- Drop trailing whitespace
- Fix comment about drpm support
- [boo#1125044] fix for huge rpm packages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281600">- Update to 0.12.0
  + Add basic support for zchunk metadata
  + Add support for building wheels to upload to PyPI
- Drop Python 2 subpackage
- Enable drpm support
- Enable zchunk for openSUSE Leap 15.1+ and Tumbleweed
- Adjust changes entries to use full author identities</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281601">- Backport fixes from upstream
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1551441600">- Added upstream patches
  * 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  * 0002-fix-linking-when-Wl-no-undefined-is-set.patch
- Drop included patches
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch
- Disable drpm support
- Update to version 0.12.1:
  * Release 0.12.1
  * For make test, xz and zchunk (not just *-devel) are required.
  * Make cmake variable PYTHON_EXECUTABLE global
  * Add zchunk support already to Fedora 29
  * [spec] Fix spec to work for epel 7
  * Add CMake support for python interpreter path
  * Add space after if statement
  * Fix misc test
  * Add missing sentinal
  * Add zchunk support to mergerepo_c for extra files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Use noun phrase in summary.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556971200">- Update to 0.13.0
  + Add support for handling modulemd
  + Add support for Koji simple merge mode
  + Add support for zchunked modulemd
  + Fixed --keep-all-metadata to keep all additional metadata
- Disable tests if modulemd support is not enabled to prevent wrong failures
- Drop patches included in this release
  + 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  + 0002-fix-linking-when-Wl-no-undefined-is-set.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556971201">- Update to 0.13.1
  + Fix tests to work properly when modulemd support is not enabled
- Enable modulemd support on openSUSE Leap 15.1+ and Tumbleweed</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557921600">- Update to 0.14.0
  + Fix crash when dumping updateinfo and module is omitted (rh#1707981)
  + Add --pkgorigins mode</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561809600">- Update to 0.14.2
  + Fix issue with createrepo_c hanging at the end (rh#1714666)
  + Don't include packages with forbidden control chars in repodata (boo#1110914)
  + Correct pkg count in headers if there were invalid pkgs (rh#1596211)
  + Prevent exiting with 0 if errors occur while finalizing repodata</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1568721600">- Update to version 0.15.1:
  * Release 0.15.1
  * Fix null pointer crash in cr_dumper_thread() if it fails to get checksum
  * Fix search in string with missing terminating zero (rh#1750673)
  * Depend on DRPM minimum version 0.4.0
  * Release 0.15.0
  * Revise drpm dependency check and bump the minimum version to 0.3.0
  * Release 0.14.4
  * Update documentation and regenerate man pages to sync up
  * Use drpm_make from drpm instead of deltarpm (rh#1687843)
  * Fix some DEBUG build warnings
  * Switch off html timestamps on documentation (rh#1731050)
  * Update documentation for mergerepo_c merge methods (rh#1722803)
  * Update documentation for --retain-old-md and --compatibility
  * Fix --read-pkgs-list to only list actually read packages
  * Release 0.14.3
  * Add missing python metadata to python2/3-createrepo_c (rh#1695677)
  * detect plain tar file as non compressed</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1568721601">- fix build by adding missing tarball and updating filelist</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1574078400">- Add BuildRequires on python3, it won't be pulled in side effect of
  requiring python3-nose</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1574683200">- Update to 0.15.2
  + Fix file mode for cache (rh#1686812)
  + Honor umask on cache files (rh#1686812)
- Enable DeltaRPM support for openSUSE targets on Leap 15.2+ and TW</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Update to 0.15.3
  + Export all changelog entries in compatibility mode
  + Libmagic to follow symlinks (rh#1776399)
  + Add shortcut to detect *.yaml files as not compressed
- Ensure createrepo_c fully replaces createrepo on Tumbleweed
- Remove old and now unused dependency on deltarpm as drpm is used now</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575633600">- Update to 0.15.4
  + Add reboot_suggested field to UpdateRecord (rh#1772466)
  + Skip directory matching --exclude right away
  + Add restart_suggested to updatecollectionpackage</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1625054400">- [boo#1187811] fix segfaults when metadata loading fails
  + added 0001-set-proper-error-on-failed-loading-of-metadata.patch</changelog>
</package>
<package pkgid="1bb69cbdbd27c74e4cd11a497751e698f8887219a664fab3a6eda48c62dac2fe" name="createrepo_c" arch="x86_64">
  <version epoch="0" ver="0.15.4" rel="lp152.3.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1516622400">- Switch to singlespec buidling of python bindings
- Make sure to use cmake macros to have it easier to gork what is
  happending by overriding %__builddir
- Sort out with spec-cleaner
- Fix embedding of date and time to documentation</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1518523200">- Disable tests on SLE12 due to the python-nose requirements</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1519214400">- [bnc#1075670] changed to provide createrepo as update-alternative
  because createrepo_c will replace createrepo because of switch to
  python3
- also provide createrepo-implementation</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1522929600">- fix spelling of old weakdeps feature switch (bsc#1088328)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1533124800">- Update to 0.11.1
  + Add support for RPMs with large files
  + Identify Requires(missingok) as Recommends correctly
  + Enable legacy tags by default
  + Fix missing packages in mergerepo_c with multiple VR of same name
  + Add mergerepo_c --repo-prefix-search and --repo-prefix-replace
  + Build against Python 3 by default for bindings
- Drop snapshot source service and snapshot tarball
- Use license macro for license file
- Drop trailing whitespace
- Fix comment about drpm support
- [boo#1125044] fix for huge rpm packages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281600">- Update to 0.12.0
  + Add basic support for zchunk metadata
  + Add support for building wheels to upload to PyPI
- Drop Python 2 subpackage
- Enable drpm support
- Enable zchunk for openSUSE Leap 15.1+ and Tumbleweed
- Adjust changes entries to use full author identities</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281601">- Backport fixes from upstream
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1551441600">- Added upstream patches
  * 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  * 0002-fix-linking-when-Wl-no-undefined-is-set.patch
- Drop included patches
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch
- Disable drpm support
- Update to version 0.12.1:
  * Release 0.12.1
  * For make test, xz and zchunk (not just *-devel) are required.
  * Make cmake variable PYTHON_EXECUTABLE global
  * Add zchunk support already to Fedora 29
  * [spec] Fix spec to work for epel 7
  * Add CMake support for python interpreter path
  * Add space after if statement
  * Fix misc test
  * Add missing sentinal
  * Add zchunk support to mergerepo_c for extra files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Use noun phrase in summary.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556971200">- Update to 0.13.0
  + Add support for handling modulemd
  + Add support for Koji simple merge mode
  + Add support for zchunked modulemd
  + Fixed --keep-all-metadata to keep all additional metadata
- Disable tests if modulemd support is not enabled to prevent wrong failures
- Drop patches included in this release
  + 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  + 0002-fix-linking-when-Wl-no-undefined-is-set.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556971201">- Update to 0.13.1
  + Fix tests to work properly when modulemd support is not enabled
- Enable modulemd support on openSUSE Leap 15.1+ and Tumbleweed</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557921600">- Update to 0.14.0
  + Fix crash when dumping updateinfo and module is omitted (rh#1707981)
  + Add --pkgorigins mode</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561809600">- Update to 0.14.2
  + Fix issue with createrepo_c hanging at the end (rh#1714666)
  + Don't include packages with forbidden control chars in repodata (boo#1110914)
  + Correct pkg count in headers if there were invalid pkgs (rh#1596211)
  + Prevent exiting with 0 if errors occur while finalizing repodata</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1568721600">- Update to version 0.15.1:
  * Release 0.15.1
  * Fix null pointer crash in cr_dumper_thread() if it fails to get checksum
  * Fix search in string with missing terminating zero (rh#1750673)
  * Depend on DRPM minimum version 0.4.0
  * Release 0.15.0
  * Revise drpm dependency check and bump the minimum version to 0.3.0
  * Release 0.14.4
  * Update documentation and regenerate man pages to sync up
  * Use drpm_make from drpm instead of deltarpm (rh#1687843)
  * Fix some DEBUG build warnings
  * Switch off html timestamps on documentation (rh#1731050)
  * Update documentation for mergerepo_c merge methods (rh#1722803)
  * Update documentation for --retain-old-md and --compatibility
  * Fix --read-pkgs-list to only list actually read packages
  * Release 0.14.3
  * Add missing python metadata to python2/3-createrepo_c (rh#1695677)
  * detect plain tar file as non compressed</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1568721601">- fix build by adding missing tarball and updating filelist</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1574078400">- Add BuildRequires on python3, it won't be pulled in side effect of
  requiring python3-nose</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1574683200">- Update to 0.15.2
  + Fix file mode for cache (rh#1686812)
  + Honor umask on cache files (rh#1686812)
- Enable DeltaRPM support for openSUSE targets on Leap 15.2+ and TW</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Update to 0.15.3
  + Export all changelog entries in compatibility mode
  + Libmagic to follow symlinks (rh#1776399)
  + Add shortcut to detect *.yaml files as not compressed
- Ensure createrepo_c fully replaces createrepo on Tumbleweed
- Remove old and now unused dependency on deltarpm as drpm is used now</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575633600">- Update to 0.15.4
  + Add reboot_suggested field to UpdateRecord (rh#1772466)
  + Skip directory matching --exclude right away
  + Add restart_suggested to updatecollectionpackage</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1625054400">- [boo#1187811] fix segfaults when metadata loading fails
  + added 0001-set-proper-error-on-failed-loading-of-metadata.patch</changelog>
</package>
<package pkgid="6b3909485ef5fe62d595f167ccc6be4cbbcb7935b445c859ef0e2bb1af25036f" name="createrepo_c" arch="i586">
  <version epoch="0" ver="0.16.0" rel="lp152.3.6.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1533124800">- Update to 0.11.1
  + Add support for RPMs with large files
  + Identify Requires(missingok) as Recommends correctly
  + Enable legacy tags by default
  + Fix missing packages in mergerepo_c with multiple VR of same name
  + Add mergerepo_c --repo-prefix-search and --repo-prefix-replace
  + Build against Python 3 by default for bindings
- Drop snapshot source service and snapshot tarball
- Use license macro for license file
- Drop trailing whitespace
- Fix comment about drpm support
- [boo#1125044] fix for huge rpm packages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281600">- Update to 0.12.0
  + Add basic support for zchunk metadata
  + Add support for building wheels to upload to PyPI
- Drop Python 2 subpackage
- Enable drpm support
- Enable zchunk for openSUSE Leap 15.1+ and Tumbleweed
- Adjust changes entries to use full author identities</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281601">- Backport fixes from upstream
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1551441600">- Added upstream patches
  * 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  * 0002-fix-linking-when-Wl-no-undefined-is-set.patch
- Drop included patches
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch
- Disable drpm support
- Update to version 0.12.1:
  * Release 0.12.1
  * For make test, xz and zchunk (not just *-devel) are required.
  * Make cmake variable PYTHON_EXECUTABLE global
  * Add zchunk support already to Fedora 29
  * [spec] Fix spec to work for epel 7
  * Add CMake support for python interpreter path
  * Add space after if statement
  * Fix misc test
  * Add missing sentinal
  * Add zchunk support to mergerepo_c for extra files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Use noun phrase in summary.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556971200">- Update to 0.13.0
  + Add support for handling modulemd
  + Add support for Koji simple merge mode
  + Add support for zchunked modulemd
  + Fixed --keep-all-metadata to keep all additional metadata
- Disable tests if modulemd support is not enabled to prevent wrong failures
- Drop patches included in this release
  + 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  + 0002-fix-linking-when-Wl-no-undefined-is-set.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556971201">- Update to 0.13.1
  + Fix tests to work properly when modulemd support is not enabled
- Enable modulemd support on openSUSE Leap 15.1+ and Tumbleweed</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557921600">- Update to 0.14.0
  + Fix crash when dumping updateinfo and module is omitted (rh#1707981)
  + Add --pkgorigins mode</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561809600">- Update to 0.14.2
  + Fix issue with createrepo_c hanging at the end (rh#1714666)
  + Don't include packages with forbidden control chars in repodata (boo#1110914)
  + Correct pkg count in headers if there were invalid pkgs (rh#1596211)
  + Prevent exiting with 0 if errors occur while finalizing repodata</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1568721600">- Update to version 0.15.1:
  * Release 0.15.1
  * Fix null pointer crash in cr_dumper_thread() if it fails to get checksum
  * Fix search in string with missing terminating zero (rh#1750673)
  * Depend on DRPM minimum version 0.4.0
  * Release 0.15.0
  * Revise drpm dependency check and bump the minimum version to 0.3.0
  * Release 0.14.4
  * Update documentation and regenerate man pages to sync up
  * Use drpm_make from drpm instead of deltarpm (rh#1687843)
  * Fix some DEBUG build warnings
  * Switch off html timestamps on documentation (rh#1731050)
  * Update documentation for mergerepo_c merge methods (rh#1722803)
  * Update documentation for --retain-old-md and --compatibility
  * Fix --read-pkgs-list to only list actually read packages
  * Release 0.14.3
  * Add missing python metadata to python2/3-createrepo_c (rh#1695677)
  * detect plain tar file as non compressed</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1568721601">- fix build by adding missing tarball and updating filelist</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1574078400">- Add BuildRequires on python3, it won't be pulled in side effect of
  requiring python3-nose</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1574683200">- Update to 0.15.2
  + Fix file mode for cache (rh#1686812)
  + Honor umask on cache files (rh#1686812)
- Enable DeltaRPM support for openSUSE targets on Leap 15.2+ and TW</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Update to 0.15.3
  + Export all changelog entries in compatibility mode
  + Libmagic to follow symlinks (rh#1776399)
  + Add shortcut to detect *.yaml files as not compressed
- Ensure createrepo_c fully replaces createrepo on Tumbleweed
- Remove old and now unused dependency on deltarpm as drpm is used now</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575633600">- Update to 0.15.4
  + Add reboot_suggested field to UpdateRecord (rh#1772466)
  + Skip directory matching --exclude right away
  + Add restart_suggested to updatecollectionpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Update to 0.15.6
  + Set global_exit_status on sigint so that .repodata are cleaned up
  + Fix various issues discovered by covscans (rh#1789707)
  + Enhance error handling when locating repositories (rh#1762697)
  + Switch updateinfo to explicitly include bool values (rh#1772466)
  + add --recycle-pkglist option
  + use pkg href for cache lookup with --update
  + Sync --excludes matching for dir-walk vs. --pkglist</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1582027200">- Update to 0.15.7
  + Add relogin_suggested to updatecollectionpackage (rh#1779751)
  + Support issued date in epoch format in Python API (rh#1779751)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1593518400">- Update to 0.15.11
  + Add python unittest for invalid date in updateinfo record get_datetime
  + Simplify case when attr is empty (prevents covscan warnings)
  + Fix couple of memory leaks, some mistakenly dead code and error handling
  + Add --arch-expand option
  + Fix spelling errors.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to 0.16.0
  + Never do dir walk when --recycle-pkglist specified
  + Add automatic module metadata handling for repos (rh#1795936)</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1614340800">- removed %is_opensuse (CtLG)
- disabled drpm for SLE/Leap 15.3</changelog>
</package>
<package pkgid="b7e940acf9cc7980fd3d634b7ccc113f238e6cbf0f1b9d1a769b2d5addb00817" name="createrepo_c" arch="src">
  <version epoch="0" ver="0.16.0" rel="lp152.3.6.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1533124800">- Update to 0.11.1
  + Add support for RPMs with large files
  + Identify Requires(missingok) as Recommends correctly
  + Enable legacy tags by default
  + Fix missing packages in mergerepo_c with multiple VR of same name
  + Add mergerepo_c --repo-prefix-search and --repo-prefix-replace
  + Build against Python 3 by default for bindings
- Drop snapshot source service and snapshot tarball
- Use license macro for license file
- Drop trailing whitespace
- Fix comment about drpm support
- [boo#1125044] fix for huge rpm packages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281600">- Update to 0.12.0
  + Add basic support for zchunk metadata
  + Add support for building wheels to upload to PyPI
- Drop Python 2 subpackage
- Enable drpm support
- Enable zchunk for openSUSE Leap 15.1+ and Tumbleweed
- Adjust changes entries to use full author identities</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281601">- Backport fixes from upstream
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1551441600">- Added upstream patches
  * 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  * 0002-fix-linking-when-Wl-no-undefined-is-set.patch
- Drop included patches
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch
- Disable drpm support
- Update to version 0.12.1:
  * Release 0.12.1
  * For make test, xz and zchunk (not just *-devel) are required.
  * Make cmake variable PYTHON_EXECUTABLE global
  * Add zchunk support already to Fedora 29
  * [spec] Fix spec to work for epel 7
  * Add CMake support for python interpreter path
  * Add space after if statement
  * Fix misc test
  * Add missing sentinal
  * Add zchunk support to mergerepo_c for extra files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Use noun phrase in summary.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556971200">- Update to 0.13.0
  + Add support for handling modulemd
  + Add support for Koji simple merge mode
  + Add support for zchunked modulemd
  + Fixed --keep-all-metadata to keep all additional metadata
- Disable tests if modulemd support is not enabled to prevent wrong failures
- Drop patches included in this release
  + 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  + 0002-fix-linking-when-Wl-no-undefined-is-set.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556971201">- Update to 0.13.1
  + Fix tests to work properly when modulemd support is not enabled
- Enable modulemd support on openSUSE Leap 15.1+ and Tumbleweed</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557921600">- Update to 0.14.0
  + Fix crash when dumping updateinfo and module is omitted (rh#1707981)
  + Add --pkgorigins mode</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561809600">- Update to 0.14.2
  + Fix issue with createrepo_c hanging at the end (rh#1714666)
  + Don't include packages with forbidden control chars in repodata (boo#1110914)
  + Correct pkg count in headers if there were invalid pkgs (rh#1596211)
  + Prevent exiting with 0 if errors occur while finalizing repodata</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1568721600">- Update to version 0.15.1:
  * Release 0.15.1
  * Fix null pointer crash in cr_dumper_thread() if it fails to get checksum
  * Fix search in string with missing terminating zero (rh#1750673)
  * Depend on DRPM minimum version 0.4.0
  * Release 0.15.0
  * Revise drpm dependency check and bump the minimum version to 0.3.0
  * Release 0.14.4
  * Update documentation and regenerate man pages to sync up
  * Use drpm_make from drpm instead of deltarpm (rh#1687843)
  * Fix some DEBUG build warnings
  * Switch off html timestamps on documentation (rh#1731050)
  * Update documentation for mergerepo_c merge methods (rh#1722803)
  * Update documentation for --retain-old-md and --compatibility
  * Fix --read-pkgs-list to only list actually read packages
  * Release 0.14.3
  * Add missing python metadata to python2/3-createrepo_c (rh#1695677)
  * detect plain tar file as non compressed</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1568721601">- fix build by adding missing tarball and updating filelist</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1574078400">- Add BuildRequires on python3, it won't be pulled in side effect of
  requiring python3-nose</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1574683200">- Update to 0.15.2
  + Fix file mode for cache (rh#1686812)
  + Honor umask on cache files (rh#1686812)
- Enable DeltaRPM support for openSUSE targets on Leap 15.2+ and TW</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Update to 0.15.3
  + Export all changelog entries in compatibility mode
  + Libmagic to follow symlinks (rh#1776399)
  + Add shortcut to detect *.yaml files as not compressed
- Ensure createrepo_c fully replaces createrepo on Tumbleweed
- Remove old and now unused dependency on deltarpm as drpm is used now</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575633600">- Update to 0.15.4
  + Add reboot_suggested field to UpdateRecord (rh#1772466)
  + Skip directory matching --exclude right away
  + Add restart_suggested to updatecollectionpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Update to 0.15.6
  + Set global_exit_status on sigint so that .repodata are cleaned up
  + Fix various issues discovered by covscans (rh#1789707)
  + Enhance error handling when locating repositories (rh#1762697)
  + Switch updateinfo to explicitly include bool values (rh#1772466)
  + add --recycle-pkglist option
  + use pkg href for cache lookup with --update
  + Sync --excludes matching for dir-walk vs. --pkglist</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1582027200">- Update to 0.15.7
  + Add relogin_suggested to updatecollectionpackage (rh#1779751)
  + Support issued date in epoch format in Python API (rh#1779751)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1593518400">- Update to 0.15.11
  + Add python unittest for invalid date in updateinfo record get_datetime
  + Simplify case when attr is empty (prevents covscan warnings)
  + Fix couple of memory leaks, some mistakenly dead code and error handling
  + Add --arch-expand option
  + Fix spelling errors.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to 0.16.0
  + Never do dir walk when --recycle-pkglist specified
  + Add automatic module metadata handling for repos (rh#1795936)</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1614340800">- removed %is_opensuse (CtLG)
- disabled drpm for SLE/Leap 15.3</changelog>
</package>
<package pkgid="99b9cf001f981cf068aa7704e9e0301c6a79673c8763fc32c4c537804d4e3d31" name="createrepo_c" arch="x86_64">
  <version epoch="0" ver="0.16.0" rel="lp152.3.6.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1533124800">- Update to 0.11.1
  + Add support for RPMs with large files
  + Identify Requires(missingok) as Recommends correctly
  + Enable legacy tags by default
  + Fix missing packages in mergerepo_c with multiple VR of same name
  + Add mergerepo_c --repo-prefix-search and --repo-prefix-replace
  + Build against Python 3 by default for bindings
- Drop snapshot source service and snapshot tarball
- Use license macro for license file
- Drop trailing whitespace
- Fix comment about drpm support
- [boo#1125044] fix for huge rpm packages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281600">- Update to 0.12.0
  + Add basic support for zchunk metadata
  + Add support for building wheels to upload to PyPI
- Drop Python 2 subpackage
- Enable drpm support
- Enable zchunk for openSUSE Leap 15.1+ and Tumbleweed
- Adjust changes entries to use full author identities</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281601">- Backport fixes from upstream
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1551441600">- Added upstream patches
  * 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  * 0002-fix-linking-when-Wl-no-undefined-is-set.patch
- Drop included patches
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch
- Disable drpm support
- Update to version 0.12.1:
  * Release 0.12.1
  * For make test, xz and zchunk (not just *-devel) are required.
  * Make cmake variable PYTHON_EXECUTABLE global
  * Add zchunk support already to Fedora 29
  * [spec] Fix spec to work for epel 7
  * Add CMake support for python interpreter path
  * Add space after if statement
  * Fix misc test
  * Add missing sentinal
  * Add zchunk support to mergerepo_c for extra files</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Use noun phrase in summary.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556971200">- Update to 0.13.0
  + Add support for handling modulemd
  + Add support for Koji simple merge mode
  + Add support for zchunked modulemd
  + Fixed --keep-all-metadata to keep all additional metadata
- Disable tests if modulemd support is not enabled to prevent wrong failures
- Drop patches included in this release
  + 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  + 0002-fix-linking-when-Wl-no-undefined-is-set.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1556971201">- Update to 0.13.1
  + Fix tests to work properly when modulemd support is not enabled
- Enable modulemd support on openSUSE Leap 15.1+ and Tumbleweed</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557921600">- Update to 0.14.0
  + Fix crash when dumping updateinfo and module is omitted (rh#1707981)
  + Add --pkgorigins mode</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1561809600">- Update to 0.14.2
  + Fix issue with createrepo_c hanging at the end (rh#1714666)
  + Don't include packages with forbidden control chars in repodata (boo#1110914)
  + Correct pkg count in headers if there were invalid pkgs (rh#1596211)
  + Prevent exiting with 0 if errors occur while finalizing repodata</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1568721600">- Update to version 0.15.1:
  * Release 0.15.1
  * Fix null pointer crash in cr_dumper_thread() if it fails to get checksum
  * Fix search in string with missing terminating zero (rh#1750673)
  * Depend on DRPM minimum version 0.4.0
  * Release 0.15.0
  * Revise drpm dependency check and bump the minimum version to 0.3.0
  * Release 0.14.4
  * Update documentation and regenerate man pages to sync up
  * Use drpm_make from drpm instead of deltarpm (rh#1687843)
  * Fix some DEBUG build warnings
  * Switch off html timestamps on documentation (rh#1731050)
  * Update documentation for mergerepo_c merge methods (rh#1722803)
  * Update documentation for --retain-old-md and --compatibility
  * Fix --read-pkgs-list to only list actually read packages
  * Release 0.14.3
  * Add missing python metadata to python2/3-createrepo_c (rh#1695677)
  * detect plain tar file as non compressed</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1568721601">- fix build by adding missing tarball and updating filelist</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1574078400">- Add BuildRequires on python3, it won't be pulled in side effect of
  requiring python3-nose</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1574683200">- Update to 0.15.2
  + Fix file mode for cache (rh#1686812)
  + Honor umask on cache files (rh#1686812)
- Enable DeltaRPM support for openSUSE targets on Leap 15.2+ and TW</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575028800">- Update to 0.15.3
  + Export all changelog entries in compatibility mode
  + Libmagic to follow symlinks (rh#1776399)
  + Add shortcut to detect *.yaml files as not compressed
- Ensure createrepo_c fully replaces createrepo on Tumbleweed
- Remove old and now unused dependency on deltarpm as drpm is used now</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575633600">- Update to 0.15.4
  + Add reboot_suggested field to UpdateRecord (rh#1772466)
  + Skip directory matching --exclude right away
  + Add restart_suggested to updatecollectionpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Update to 0.15.6
  + Set global_exit_status on sigint so that .repodata are cleaned up
  + Fix various issues discovered by covscans (rh#1789707)
  + Enhance error handling when locating repositories (rh#1762697)
  + Switch updateinfo to explicitly include bool values (rh#1772466)
  + add --recycle-pkglist option
  + use pkg href for cache lookup with --update
  + Sync --excludes matching for dir-walk vs. --pkglist</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1582027200">- Update to 0.15.7
  + Add relogin_suggested to updatecollectionpackage (rh#1779751)
  + Support issued date in epoch format in Python API (rh#1779751)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1593518400">- Update to 0.15.11
  + Add python unittest for invalid date in updateinfo record get_datetime
  + Simplify case when attr is empty (prevents covscan warnings)
  + Fix couple of memory leaks, some mistakenly dead code and error handling
  + Add --arch-expand option
  + Fix spelling errors.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Update to 0.16.0
  + Never do dir walk when --recycle-pkglist specified
  + Add automatic module metadata handling for repos (rh#1795936)</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1614340800">- removed %is_opensuse (CtLG)
- disabled drpm for SLE/Leap 15.3</changelog>
</package>
<package pkgid="8f5a7ff6423ebceeb7846a0fab34af1e586d9ea25db0eb3c87fd1456d0b5011b" name="criu" arch="src">
  <version epoch="0" ver="3.15" rel="lp152.4.3.1"/>
  <changelog author="tiwai@suse.de" date="1497960000">- update to criu 3.1:
  New features:
  * Each boolean option now has the --no-$option pair
  * RSS explorer in CRIT
  * Multiple plugins in compel
  * Run-time check of 32-mmap BUG on x86
  * C/R of 32-bit futex robust list on x86
  Optimizations/improvements:
  * Start time is improved significantly with kerndat cache
  * Sigaction image is merged into Core
  * Unneeded stages are skipped during restore
  * Restore w/o namespaces uses host /proc
  * Restore w/o namespaces doesn't parse host mounts (not needed)
  * Single-threaded tasks do not parse /proc/pid/task/ in vain
  * BFD engine is used for more /proc files
  * More verbosity in libsoccr
  * Fsnotify dump w/o namespaces doesn't walk mounts tree
  Bugfixes:
  * Python bindings left zombie in self-dump mode
  * The last_pid sys-control was reset by restore
  * Threads caps were compared with mistake
  * make install put crit/pycriu to wrong place if DESTDIR was not set
  * Fsnotifies C/R w/o namespaces restored with errors
  * Inherited control terminal restore was failed (but dump succeeded)
- update to criu 3.2:
  Optimizations/improvements:
  * Invisible files restore is de-serialized
  * VMAs restore performance is improved significantly
  - Mappings of the same file re-use the descriptor, not re-open it
    every time
  - Not-COW-ed mappings are restored in-place and are not mremmap()ed
  - Empty RO mappings are mmap()ed as such and thus not re-mprotect()ed
    at the end
  * More verbosity in case TCP locking fails (#292)
  * More verbosity in case VDSO magic mismatch
  * Restore or legacy epoll target descriptors and fsnotify marks is
    unified with common case
  Bugfixes:
  * Restoring fanotify marks from old images (&lt;1.3) dropped the mark
  * Binfmt_misc mount could be mounted into wrong place
  * Compilation failed with gcc 6.3.0 (#315)
  * Waiting helpers could race with sigchild handler and would result
    in restore failure
  * Missing VVAR page in 32bit tasks wasn't skipped and resulted in
    restore failure
  * After restore consumption of files is increased (was fixed as
    side effect of mmap optimization)
  Deprecation/Removal:
  * Deprecated separate images for fsnotify marks
- Fix the installation of python stuff:
  criu-py-install-fix.diff
- Fix the build for ppc64:
  criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498824000">- update to criu 3.2.1: bug fix release,
  * Restoring a stack fails on recent kernels due to kernel changes
  * Restoring on a host with LSM profiles failed</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- update to criu 3.3
  * Add --tcp-close option to help migration of Docker containers
  * Allow to override build time to fix build-compare (boo#1047218)</changelog>
  <changelog author="tiwai@suse.de" date="1503403200">- update to criu 3.4:
  New features:
  * Support for s390x architecture
  Improvements:
  * Unexpected death of restored tasks is reported with more
    details in logs
  * Merged many images containing info about files into one big
    files.img
  * When helper utility fails (ip, iptables, tar) its name is
    printed in logs
  Bugfixes:
  * Compilation failed on newer glibcs (ucontext_t)
  * Dying helper task could deadlock the restore process
  * Install-related makefile variables weren't configurable for
    distro build
  * SIT (ipv6-to-v4 tunnel) presence on host blocked dump of any
    containers
  * Potential NULL dereference when dumping net namespace
  * Dump via page server might not work across different criu
    versions
  * Failure to restore a subtask could be ignored by the restore
    command
  * EOF on page-server socket wasn't handled
- Dropped obsoleted patch:
  criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch
- Add s390x to exclusivearch</changelog>
  <changelog author="aavindraa@gmail.com" date="1509883200">- update to criu 3.6:
  New features
  * C/R for files (except for unix sockets, ttys and epolls) sent
    over unix sockets
  * C/R for threads with different creds
  * Ipv6 over ipv4 tunnel (SIT device)
  Bugfixes
  * Some s390x registers were not restored by native sigrestore way
  * Overflow when parsing autofs info from /proc file
  * Dumps of anon shared memory with sysvipc one raced with each
    other clashing and corrupting image file names
  * The "dumpable" flag was not restore on shmem regions
  * Trash bits leaked into image when dumping fsnotify on some
    kernels
  * Lock/unlock of iptables from different criu processes raced with
    each other
  * Closed TCP connection with non-empty send queue blocked the dump
  * When --empty-ns for netns was set on dump only, the restore
    failed (Docker case)
- includes changes from 3.5:
  see https://criu.org/Download/criu/3.5 for details</changelog>
  <changelog author="aavindraa@gmail.com" date="1510488000">- add 0001-images.py-remove-shebang.patch
  * fixes a lint warning about a non-executable python file being
    executable due to a superfluous shebang
  * upstream: https://lists.openvz.org/pipermail/criu/2017-November/039907.html
- run spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1514030400">- update to criu 3.7:
  New features
  * Pipes usage statistics
  * Run page server as non-daemon via RPC
  * C/R of
  - SO_REUSEPORT option
  - IPv4-mapped inet sockets
  - Net_prio CGroups
  - Overmounted shared mountpoints
  - Non-broken and breaking leases
  Improvements
  * Show criu and kernel versions in logs
  * CRIT decodes socket families, protocols and types
  * Much less pipes is needed for pre-dump, which is especially
    useful for big mem migration
  Bugfixes
  * Files in /proc/pid/map_file could be opened by non-exiting
    name (with 0x prefix) and it was fixed in kernel
  * CRIU log levels were used to configure logging for libsoccr
    thus breaking its logs
  * Overflow in various IDs caused bad image names
  * Compat (32bit) syscalls lost signedness in compel
  * Corked sockets lost cork flag
  * Preadv() syscall was declared with error which resulted in
    dump errors on 32-bit processors
  * Musl compilation failed
  * Ghost files in / dump failed
  * Crash when releasing context for ghost files, due to free()-ing
    shmalloc()-ed area
  * Lazy restore could receive partial page and crashed
  * Erroneous closing of lazy pages connection caused restore to
    hang
  * Lazy memory fetch restore could start before tasks are restored
- Remove 0001-images.py-remove-shebang.patch
  * upstreamed in 8e45ce4905d186abafb7c20abb3b00207fefdb53</changelog>
  <changelog author="avindra@opensuse.org" date="1520942400">- update to criu 3.8:
  New features
  * C/R of
  - Multiple network namespaces
  - Overmounted tmpfs mounts
  - Unix sockets and epoll descriptors in SCM messages
  Improvements
  * Rework service descriptors not to cause fdtable enormous grows
  Bugfixes
  * FP state wasn't reported on Skylake due to a kernel bug
  * gcc 8 warning fixes
  * Resource leaked on error paths
  * Attributes of sit devices with value 0 were not saved into
    images (and were restored into default values)
  * Tasks with pgid of a zombie hung the resture
  * Ghost files on RO bind-mounts of an RW mount couldn't be
    restored
  * Random memory corruptions during lazy restore
- cleanup with spec-cleaner
- switch to https urls
- list binaries and man pages explicitly
- remove rest of static libs to fix rpm lint errors</changelog>
  <changelog author="tiwai@suse.de" date="1521547200">- Add python-devel to BuildReq explicitly, as a preparation for
  fallback to asciidoctor (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1522929600">- update to criu 3.8.1: a bug-fix release
  FDstore was initialized twice (re-initialized) causing e.g.
  - -shell-job restore to fail</changelog>
  <changelog author="avindra@opensuse.org" date="1527508800">- update to criu 3.9:
  New features
  - C/R of
    + Tun-Tap devices in sub-netns
    + File descriptors which were opened with O_TMPFILE
  Improvements
  - Restore of inotify watchers
  - Restore unix sockets in proper mount namespaces
  - Print CRIU and kernel version also in RPC mode
  Bugfixes
  - Random memory corruptions during lazy restore
  - Workaround the iptables issue
  - Don't use standard descriptors when tar is running to dump
    tmpfs mounts
  - Fail dump if dump_one_file() fails
  - Fill kerndat with zero-s before reading it from cache
- cleanup with spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1542628800">- Update to criu 3.10:
  New features:
  * Support Python3 in ZDTM and CRIT
  * Keep names for UNIX sockets, that are unlinked from the FS
  * IPVv6 support for page server
  * Set page server socket fd via CLI
  * Large pages support for aarch64/ppc64
  * C/R of Per-thread seccomp chains
  Bugfixes:
  * Failed non-container restore could kill random task on the host
  * Failure to dump namespaces was erroneously ignored
  * CRIT didn't show cpuinfo image file
  * Tasks that got PID-reuse couldn't be dumped iteratively because
    previous images were missing
- Update to criu 3.11:
  New features:
  * cpuinfo: Detect compact frames and handle noxsaves
  * Add support for configuration files
  * Add support for external net namespaces
  * Punch holes in input files when restoring anonymous non-shared
    memory ( --auto-dedup )
  * C/R of
    + epoll: Add support for duped targets
    + tun: Add support for multiple net ns
    + x86: Support extendable fpu frames
  Bugfixes:
  * mount: Better handling of mount points propagation
  * nmk: Make collect-deps to be more precise about targets
  * lazy-pages: Don't mark current stack page as lazy
  * x86: CPU -- Rework feature testing
  * files: Fix O(n^2) restore in terms of the number of fds
  * fdstore: Unlimit fdstore queue on start
  * mount: Fix regression where open_mountpoint failed on readonly fs
  * page server: Handle partial splicing
  * ... lots of small fixes here and there
  Improvements:
  * Remove all magic of service descriptors when it isn't required
- Switch to python3
- Use asciidoctor instead of asciidoc for formatting manuals:
  criu-asciidoctor.patch</changelog>
  <changelog author="tiwai@suse.de" date="1557144000">- Update to criu 3.12:
  New features:
  * build CRIU with Android NDK
  * C/R of IP RAW sockets
  * lsm: dump and restore any SELinux process label
  * support restoring ghost files on readonly mounts
  Bugfixes:
  * Do not lock network if running in the host network namespace
  * Fix RPC configuration file handling
  * util: don't leak file descriprots to third-party tools
  * small fixes here and there
  Improvements:
  * travis: switch to the Ubuntu Xenial
  * travis-ci: Enable ia32 tests
  * Many improvements and bug fixes in the libcriu
  * Changes in the API and ABI (SONAME increased from 1 to 2)
- Updated to libcriu2 subpackage to follow SONAME 2
- Dropped obsoleted patch:
  criu-asciidoctor.patch</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1567598400">- Fix build on Tumbleweed: Add -ffat-lto-objects to lto cflags.</changelog>
  <changelog author="tiwai@suse.de" date="1574078400">- Update to criu 3.13:
  New features:
  * VDSO: arm32 support
  * Add TLS support for page server communications
  * "Ignore" mode for --manage-cgroups
  * Restore SO_BROADCAST option for inet sockets
  Bugfixes:
  * Auxiliary events were left in inotify queues
  * Lazy-pages daemon didn't detect stack pages and surrounders
    properly and marked them as "lazy"
  * Memory and resource leakage were detected by coverity, cppcheck
    and clang
  Improvements:
  * Use gettimeofday() directly from vdso for restore timings
  * Reformat all .py code into pep8 style</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589371200">- Disable LTO on aarch64 and armv7
- Add '-Wno-error=deprecated' to fix build on armv7
- Exclude armv6 since criu/arch/arm/bitops.S uses 'dmb ish' which
  is armv7+</changelog>
  <changelog author="tiwai@suse.de" date="1589976000">- Update to criu 3.14:
  New features:
  * C/R of memfd memory mappings and file descriptors
  * Add time namespace support
  * Add the read pre-dump mode which uses process_vm_readv
  * Add --cgroup-yard option
  * Add support of the cgroup v2 freezer
  * Add support of opened O_PATH fds
  Bugfixes:
  * Fix C/R ia32 processes on AMD #398
  * Fix cross-compilation
  * Many fixes here and there
  Improvements:
  * Use clone3() with set_tid to restore processes
  * Clean up compel headers
  * Use the new mount API
- Add libgnutls-devel to buildreq</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1600862400">- fix filelist mismatch after libexecdir change</changelog>
  <changelog author="tiwai@suse.de" date="1606824000">- Update to criu 3.15:
  see details at https://criu.org/Download/criu/3.15
  New features:
  * Introduced criu-image-streamer
  * Added MIPS support
  * Allow checkpointing out of existing PID namespace and restoring
    into existing PID namespace
  * Added additional file validation mechanisms
  * Added support to checkpoint and restore BPF hash maps
  (BPF_MAP_TYPE_HASH) and array maps (BPF_MAP_TYPE_ARRAY)
  * Initial cgroups v2 support
- Fix build with nftables package:
  0002-Fix-build-with-nftables-installed-in-different-direc.patch</changelog>
  <changelog author="tiwai@suse.de" date="1622030400">- Fix the build with protobuf-c 1.4:
  criu-protobuf-c-1.4-underscore-fix.patch</changelog>
</package>
<package pkgid="1495a594fee2dd98a3dd72837e3c54fb897952c809236819bffbfdd624c1b5c6" name="criu" arch="x86_64">
  <version epoch="0" ver="3.15" rel="lp152.4.3.1"/>
  <changelog author="tiwai@suse.de" date="1497960000">- update to criu 3.1:
  New features:
  * Each boolean option now has the --no-$option pair
  * RSS explorer in CRIT
  * Multiple plugins in compel
  * Run-time check of 32-mmap BUG on x86
  * C/R of 32-bit futex robust list on x86
  Optimizations/improvements:
  * Start time is improved significantly with kerndat cache
  * Sigaction image is merged into Core
  * Unneeded stages are skipped during restore
  * Restore w/o namespaces uses host /proc
  * Restore w/o namespaces doesn't parse host mounts (not needed)
  * Single-threaded tasks do not parse /proc/pid/task/ in vain
  * BFD engine is used for more /proc files
  * More verbosity in libsoccr
  * Fsnotify dump w/o namespaces doesn't walk mounts tree
  Bugfixes:
  * Python bindings left zombie in self-dump mode
  * The last_pid sys-control was reset by restore
  * Threads caps were compared with mistake
  * make install put crit/pycriu to wrong place if DESTDIR was not set
  * Fsnotifies C/R w/o namespaces restored with errors
  * Inherited control terminal restore was failed (but dump succeeded)
- update to criu 3.2:
  Optimizations/improvements:
  * Invisible files restore is de-serialized
  * VMAs restore performance is improved significantly
  - Mappings of the same file re-use the descriptor, not re-open it
    every time
  - Not-COW-ed mappings are restored in-place and are not mremmap()ed
  - Empty RO mappings are mmap()ed as such and thus not re-mprotect()ed
    at the end
  * More verbosity in case TCP locking fails (#292)
  * More verbosity in case VDSO magic mismatch
  * Restore or legacy epoll target descriptors and fsnotify marks is
    unified with common case
  Bugfixes:
  * Restoring fanotify marks from old images (&lt;1.3) dropped the mark
  * Binfmt_misc mount could be mounted into wrong place
  * Compilation failed with gcc 6.3.0 (#315)
  * Waiting helpers could race with sigchild handler and would result
    in restore failure
  * Missing VVAR page in 32bit tasks wasn't skipped and resulted in
    restore failure
  * After restore consumption of files is increased (was fixed as
    side effect of mmap optimization)
  Deprecation/Removal:
  * Deprecated separate images for fsnotify marks
- Fix the installation of python stuff:
  criu-py-install-fix.diff
- Fix the build for ppc64:
  criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498824000">- update to criu 3.2.1: bug fix release,
  * Restoring a stack fails on recent kernels due to kernel changes
  * Restoring on a host with LSM profiles failed</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- update to criu 3.3
  * Add --tcp-close option to help migration of Docker containers
  * Allow to override build time to fix build-compare (boo#1047218)</changelog>
  <changelog author="tiwai@suse.de" date="1503403200">- update to criu 3.4:
  New features:
  * Support for s390x architecture
  Improvements:
  * Unexpected death of restored tasks is reported with more
    details in logs
  * Merged many images containing info about files into one big
    files.img
  * When helper utility fails (ip, iptables, tar) its name is
    printed in logs
  Bugfixes:
  * Compilation failed on newer glibcs (ucontext_t)
  * Dying helper task could deadlock the restore process
  * Install-related makefile variables weren't configurable for
    distro build
  * SIT (ipv6-to-v4 tunnel) presence on host blocked dump of any
    containers
  * Potential NULL dereference when dumping net namespace
  * Dump via page server might not work across different criu
    versions
  * Failure to restore a subtask could be ignored by the restore
    command
  * EOF on page-server socket wasn't handled
- Dropped obsoleted patch:
  criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch
- Add s390x to exclusivearch</changelog>
  <changelog author="aavindraa@gmail.com" date="1509883200">- update to criu 3.6:
  New features
  * C/R for files (except for unix sockets, ttys and epolls) sent
    over unix sockets
  * C/R for threads with different creds
  * Ipv6 over ipv4 tunnel (SIT device)
  Bugfixes
  * Some s390x registers were not restored by native sigrestore way
  * Overflow when parsing autofs info from /proc file
  * Dumps of anon shared memory with sysvipc one raced with each
    other clashing and corrupting image file names
  * The "dumpable" flag was not restore on shmem regions
  * Trash bits leaked into image when dumping fsnotify on some
    kernels
  * Lock/unlock of iptables from different criu processes raced with
    each other
  * Closed TCP connection with non-empty send queue blocked the dump
  * When --empty-ns for netns was set on dump only, the restore
    failed (Docker case)
- includes changes from 3.5:
  see https://criu.org/Download/criu/3.5 for details</changelog>
  <changelog author="aavindraa@gmail.com" date="1510488000">- add 0001-images.py-remove-shebang.patch
  * fixes a lint warning about a non-executable python file being
    executable due to a superfluous shebang
  * upstream: https://lists.openvz.org/pipermail/criu/2017-November/039907.html
- run spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1514030400">- update to criu 3.7:
  New features
  * Pipes usage statistics
  * Run page server as non-daemon via RPC
  * C/R of
  - SO_REUSEPORT option
  - IPv4-mapped inet sockets
  - Net_prio CGroups
  - Overmounted shared mountpoints
  - Non-broken and breaking leases
  Improvements
  * Show criu and kernel versions in logs
  * CRIT decodes socket families, protocols and types
  * Much less pipes is needed for pre-dump, which is especially
    useful for big mem migration
  Bugfixes
  * Files in /proc/pid/map_file could be opened by non-exiting
    name (with 0x prefix) and it was fixed in kernel
  * CRIU log levels were used to configure logging for libsoccr
    thus breaking its logs
  * Overflow in various IDs caused bad image names
  * Compat (32bit) syscalls lost signedness in compel
  * Corked sockets lost cork flag
  * Preadv() syscall was declared with error which resulted in
    dump errors on 32-bit processors
  * Musl compilation failed
  * Ghost files in / dump failed
  * Crash when releasing context for ghost files, due to free()-ing
    shmalloc()-ed area
  * Lazy restore could receive partial page and crashed
  * Erroneous closing of lazy pages connection caused restore to
    hang
  * Lazy memory fetch restore could start before tasks are restored
- Remove 0001-images.py-remove-shebang.patch
  * upstreamed in 8e45ce4905d186abafb7c20abb3b00207fefdb53</changelog>
  <changelog author="avindra@opensuse.org" date="1520942400">- update to criu 3.8:
  New features
  * C/R of
  - Multiple network namespaces
  - Overmounted tmpfs mounts
  - Unix sockets and epoll descriptors in SCM messages
  Improvements
  * Rework service descriptors not to cause fdtable enormous grows
  Bugfixes
  * FP state wasn't reported on Skylake due to a kernel bug
  * gcc 8 warning fixes
  * Resource leaked on error paths
  * Attributes of sit devices with value 0 were not saved into
    images (and were restored into default values)
  * Tasks with pgid of a zombie hung the resture
  * Ghost files on RO bind-mounts of an RW mount couldn't be
    restored
  * Random memory corruptions during lazy restore
- cleanup with spec-cleaner
- switch to https urls
- list binaries and man pages explicitly
- remove rest of static libs to fix rpm lint errors</changelog>
  <changelog author="tiwai@suse.de" date="1521547200">- Add python-devel to BuildReq explicitly, as a preparation for
  fallback to asciidoctor (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1522929600">- update to criu 3.8.1: a bug-fix release
  FDstore was initialized twice (re-initialized) causing e.g.
  - -shell-job restore to fail</changelog>
  <changelog author="avindra@opensuse.org" date="1527508800">- update to criu 3.9:
  New features
  - C/R of
    + Tun-Tap devices in sub-netns
    + File descriptors which were opened with O_TMPFILE
  Improvements
  - Restore of inotify watchers
  - Restore unix sockets in proper mount namespaces
  - Print CRIU and kernel version also in RPC mode
  Bugfixes
  - Random memory corruptions during lazy restore
  - Workaround the iptables issue
  - Don't use standard descriptors when tar is running to dump
    tmpfs mounts
  - Fail dump if dump_one_file() fails
  - Fill kerndat with zero-s before reading it from cache
- cleanup with spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1542628800">- Update to criu 3.10:
  New features:
  * Support Python3 in ZDTM and CRIT
  * Keep names for UNIX sockets, that are unlinked from the FS
  * IPVv6 support for page server
  * Set page server socket fd via CLI
  * Large pages support for aarch64/ppc64
  * C/R of Per-thread seccomp chains
  Bugfixes:
  * Failed non-container restore could kill random task on the host
  * Failure to dump namespaces was erroneously ignored
  * CRIT didn't show cpuinfo image file
  * Tasks that got PID-reuse couldn't be dumped iteratively because
    previous images were missing
- Update to criu 3.11:
  New features:
  * cpuinfo: Detect compact frames and handle noxsaves
  * Add support for configuration files
  * Add support for external net namespaces
  * Punch holes in input files when restoring anonymous non-shared
    memory ( --auto-dedup )
  * C/R of
    + epoll: Add support for duped targets
    + tun: Add support for multiple net ns
    + x86: Support extendable fpu frames
  Bugfixes:
  * mount: Better handling of mount points propagation
  * nmk: Make collect-deps to be more precise about targets
  * lazy-pages: Don't mark current stack page as lazy
  * x86: CPU -- Rework feature testing
  * files: Fix O(n^2) restore in terms of the number of fds
  * fdstore: Unlimit fdstore queue on start
  * mount: Fix regression where open_mountpoint failed on readonly fs
  * page server: Handle partial splicing
  * ... lots of small fixes here and there
  Improvements:
  * Remove all magic of service descriptors when it isn't required
- Switch to python3
- Use asciidoctor instead of asciidoc for formatting manuals:
  criu-asciidoctor.patch</changelog>
  <changelog author="tiwai@suse.de" date="1557144000">- Update to criu 3.12:
  New features:
  * build CRIU with Android NDK
  * C/R of IP RAW sockets
  * lsm: dump and restore any SELinux process label
  * support restoring ghost files on readonly mounts
  Bugfixes:
  * Do not lock network if running in the host network namespace
  * Fix RPC configuration file handling
  * util: don't leak file descriprots to third-party tools
  * small fixes here and there
  Improvements:
  * travis: switch to the Ubuntu Xenial
  * travis-ci: Enable ia32 tests
  * Many improvements and bug fixes in the libcriu
  * Changes in the API and ABI (SONAME increased from 1 to 2)
- Updated to libcriu2 subpackage to follow SONAME 2
- Dropped obsoleted patch:
  criu-asciidoctor.patch</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1567598400">- Fix build on Tumbleweed: Add -ffat-lto-objects to lto cflags.</changelog>
  <changelog author="tiwai@suse.de" date="1574078400">- Update to criu 3.13:
  New features:
  * VDSO: arm32 support
  * Add TLS support for page server communications
  * "Ignore" mode for --manage-cgroups
  * Restore SO_BROADCAST option for inet sockets
  Bugfixes:
  * Auxiliary events were left in inotify queues
  * Lazy-pages daemon didn't detect stack pages and surrounders
    properly and marked them as "lazy"
  * Memory and resource leakage were detected by coverity, cppcheck
    and clang
  Improvements:
  * Use gettimeofday() directly from vdso for restore timings
  * Reformat all .py code into pep8 style</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589371200">- Disable LTO on aarch64 and armv7
- Add '-Wno-error=deprecated' to fix build on armv7
- Exclude armv6 since criu/arch/arm/bitops.S uses 'dmb ish' which
  is armv7+</changelog>
  <changelog author="tiwai@suse.de" date="1589976000">- Update to criu 3.14:
  New features:
  * C/R of memfd memory mappings and file descriptors
  * Add time namespace support
  * Add the read pre-dump mode which uses process_vm_readv
  * Add --cgroup-yard option
  * Add support of the cgroup v2 freezer
  * Add support of opened O_PATH fds
  Bugfixes:
  * Fix C/R ia32 processes on AMD #398
  * Fix cross-compilation
  * Many fixes here and there
  Improvements:
  * Use clone3() with set_tid to restore processes
  * Clean up compel headers
  * Use the new mount API
- Add libgnutls-devel to buildreq</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1600862400">- fix filelist mismatch after libexecdir change</changelog>
  <changelog author="tiwai@suse.de" date="1606824000">- Update to criu 3.15:
  see details at https://criu.org/Download/criu/3.15
  New features:
  * Introduced criu-image-streamer
  * Added MIPS support
  * Allow checkpointing out of existing PID namespace and restoring
    into existing PID namespace
  * Added additional file validation mechanisms
  * Added support to checkpoint and restore BPF hash maps
  (BPF_MAP_TYPE_HASH) and array maps (BPF_MAP_TYPE_ARRAY)
  * Initial cgroups v2 support
- Fix build with nftables package:
  0002-Fix-build-with-nftables-installed-in-different-direc.patch</changelog>
  <changelog author="tiwai@suse.de" date="1622030400">- Fix the build with protobuf-c 1.4:
  criu-protobuf-c-1.4-underscore-fix.patch</changelog>
</package>
<package pkgid="334100a5399060eedbada9d2489fd7d247277c4342a6308b38641241f7f44b81" name="criu-devel" arch="x86_64">
  <version epoch="0" ver="3.15" rel="lp152.4.3.1"/>
  <changelog author="tiwai@suse.de" date="1497960000">- update to criu 3.1:
  New features:
  * Each boolean option now has the --no-$option pair
  * RSS explorer in CRIT
  * Multiple plugins in compel
  * Run-time check of 32-mmap BUG on x86
  * C/R of 32-bit futex robust list on x86
  Optimizations/improvements:
  * Start time is improved significantly with kerndat cache
  * Sigaction image is merged into Core
  * Unneeded stages are skipped during restore
  * Restore w/o namespaces uses host /proc
  * Restore w/o namespaces doesn't parse host mounts (not needed)
  * Single-threaded tasks do not parse /proc/pid/task/ in vain
  * BFD engine is used for more /proc files
  * More verbosity in libsoccr
  * Fsnotify dump w/o namespaces doesn't walk mounts tree
  Bugfixes:
  * Python bindings left zombie in self-dump mode
  * The last_pid sys-control was reset by restore
  * Threads caps were compared with mistake
  * make install put crit/pycriu to wrong place if DESTDIR was not set
  * Fsnotifies C/R w/o namespaces restored with errors
  * Inherited control terminal restore was failed (but dump succeeded)
- update to criu 3.2:
  Optimizations/improvements:
  * Invisible files restore is de-serialized
  * VMAs restore performance is improved significantly
  - Mappings of the same file re-use the descriptor, not re-open it
    every time
  - Not-COW-ed mappings are restored in-place and are not mremmap()ed
  - Empty RO mappings are mmap()ed as such and thus not re-mprotect()ed
    at the end
  * More verbosity in case TCP locking fails (#292)
  * More verbosity in case VDSO magic mismatch
  * Restore or legacy epoll target descriptors and fsnotify marks is
    unified with common case
  Bugfixes:
  * Restoring fanotify marks from old images (&lt;1.3) dropped the mark
  * Binfmt_misc mount could be mounted into wrong place
  * Compilation failed with gcc 6.3.0 (#315)
  * Waiting helpers could race with sigchild handler and would result
    in restore failure
  * Missing VVAR page in 32bit tasks wasn't skipped and resulted in
    restore failure
  * After restore consumption of files is increased (was fixed as
    side effect of mmap optimization)
  Deprecation/Removal:
  * Deprecated separate images for fsnotify marks
- Fix the installation of python stuff:
  criu-py-install-fix.diff
- Fix the build for ppc64:
  criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch</changelog>
  <changelog author="tiwai@suse.de" date="1498824000">- update to criu 3.2.1: bug fix release,
  * Restoring a stack fails on recent kernels due to kernel changes
  * Restoring on a host with LSM profiles failed</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- update to criu 3.3
  * Add --tcp-close option to help migration of Docker containers
  * Allow to override build time to fix build-compare (boo#1047218)</changelog>
  <changelog author="tiwai@suse.de" date="1503403200">- update to criu 3.4:
  New features:
  * Support for s390x architecture
  Improvements:
  * Unexpected death of restored tasks is reported with more
    details in logs
  * Merged many images containing info about files into one big
    files.img
  * When helper utility fails (ip, iptables, tar) its name is
    printed in logs
  Bugfixes:
  * Compilation failed on newer glibcs (ucontext_t)
  * Dying helper task could deadlock the restore process
  * Install-related makefile variables weren't configurable for
    distro build
  * SIT (ipv6-to-v4 tunnel) presence on host blocked dump of any
    containers
  * Potential NULL dereference when dumping net namespace
  * Dump via page server might not work across different criu
    versions
  * Failure to restore a subtask could be ignored by the restore
    command
  * EOF on page-server socket wasn't handled
- Dropped obsoleted patch:
  criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch
- Add s390x to exclusivearch</changelog>
  <changelog author="aavindraa@gmail.com" date="1509883200">- update to criu 3.6:
  New features
  * C/R for files (except for unix sockets, ttys and epolls) sent
    over unix sockets
  * C/R for threads with different creds
  * Ipv6 over ipv4 tunnel (SIT device)
  Bugfixes
  * Some s390x registers were not restored by native sigrestore way
  * Overflow when parsing autofs info from /proc file
  * Dumps of anon shared memory with sysvipc one raced with each
    other clashing and corrupting image file names
  * The "dumpable" flag was not restore on shmem regions
  * Trash bits leaked into image when dumping fsnotify on some
    kernels
  * Lock/unlock of iptables from different criu processes raced with
    each other
  * Closed TCP connection with non-empty send queue blocked the dump
  * When --empty-ns for netns was set on dump only, the restore
    failed (Docker case)
- includes changes from 3.5:
  see https://criu.org/Download/criu/3.5 for details</changelog>
  <changelog author="aavindraa@gmail.com" date="1510488000">- add 0001-images.py-remove-shebang.patch
  * fixes a lint warning about a non-executable python file being
    executable due to a superfluous shebang
  * upstream: https://lists.openvz.org/pipermail/criu/2017-November/039907.html
- run spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1514030400">- update to criu 3.7:
  New features
  * Pipes usage statistics
  * Run page server as non-daemon via RPC
  * C/R of
  - SO_REUSEPORT option
  - IPv4-mapped inet sockets
  - Net_prio CGroups
  - Overmounted shared mountpoints
  - Non-broken and breaking leases
  Improvements
  * Show criu and kernel versions in logs
  * CRIT decodes socket families, protocols and types
  * Much less pipes is needed for pre-dump, which is especially
    useful for big mem migration
  Bugfixes
  * Files in /proc/pid/map_file could be opened by non-exiting
    name (with 0x prefix) and it was fixed in kernel
  * CRIU log levels were used to configure logging for libsoccr
    thus breaking its logs
  * Overflow in various IDs caused bad image names
  * Compat (32bit) syscalls lost signedness in compel
  * Corked sockets lost cork flag
  * Preadv() syscall was declared with error which resulted in
    dump errors on 32-bit processors
  * Musl compilation failed
  * Ghost files in / dump failed
  * Crash when releasing context for ghost files, due to free()-ing
    shmalloc()-ed area
  * Lazy restore could receive partial page and crashed
  * Erroneous closing of lazy pages connection caused restore to
    hang
  * Lazy memory fetch restore could start before tasks are restored
- Remove 0001-images.py-remove-shebang.patch
  * upstreamed in 8e45ce4905d186abafb7c20abb3b00207fefdb53</changelog>
  <changelog author="avindra@opensuse.org" date="1520942400">- update to criu 3.8:
  New features
  * C/R of
  - Multiple network namespaces
  - Overmounted tmpfs mounts
  - Unix sockets and epoll descriptors in SCM messages
  Improvements
  * Rework service descriptors not to cause fdtable enormous grows
  Bugfixes
  * FP state wasn't reported on Skylake due to a kernel bug
  * gcc 8 warning fixes
  * Resource leaked on error paths
  * Attributes of sit devices with value 0 were not saved into
    images (and were restored into default values)
  * Tasks with pgid of a zombie hung the resture
  * Ghost files on RO bind-mounts of an RW mount couldn't be
    restored
  * Random memory corruptions during lazy restore
- cleanup with spec-cleaner
- switch to https urls
- list binaries and man pages explicitly
- remove rest of static libs to fix rpm lint errors</changelog>
  <changelog author="tiwai@suse.de" date="1521547200">- Add python-devel to BuildReq explicitly, as a preparation for
  fallback to asciidoctor (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1522929600">- update to criu 3.8.1: a bug-fix release
  FDstore was initialized twice (re-initialized) causing e.g.
  - -shell-job restore to fail</changelog>
  <changelog author="avindra@opensuse.org" date="1527508800">- update to criu 3.9:
  New features
  - C/R of
    + Tun-Tap devices in sub-netns
    + File descriptors which were opened with O_TMPFILE
  Improvements
  - Restore of inotify watchers
  - Restore unix sockets in proper mount namespaces
  - Print CRIU and kernel version also in RPC mode
  Bugfixes
  - Random memory corruptions during lazy restore
  - Workaround the iptables issue
  - Don't use standard descriptors when tar is running to dump
    tmpfs mounts
  - Fail dump if dump_one_file() fails
  - Fill kerndat with zero-s before reading it from cache
- cleanup with spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1542628800">- Update to criu 3.10:
  New features:
  * Support Python3 in ZDTM and CRIT
  * Keep names for UNIX sockets, that are unlinked from the FS
  * IPVv6 support for page server
  * Set page server socket fd via CLI
  * Large pages support for aarch64/ppc64
  * C/R of Per-thread seccomp chains
  Bugfixes:
  * Failed non-container restore could kill random task on the host
  * Failure to dump namespaces was erroneously ignored
  * CRIT didn't show cpuinfo image file
  * Tasks that got PID-reuse couldn't be dumped iteratively because
    previous images were missing
- Update to criu 3.11:
  New features:
  * cpuinfo: Detect compact frames and handle noxsaves
  * Add support for configuration files
  * Add support for external net namespaces
  * Punch holes in input files when restoring anonymous non-shared
    memory ( --auto-dedup )
  * C/R of
    + epoll: Add support for duped targets
    + tun: Add support for multiple net ns
    + x86: Support extendable fpu frames
  Bugfixes:
  * mount: Better handling of mount points propagation
  * nmk: Make collect-deps to be more precise about targets
  * lazy-pages: Don't mark current stack page as lazy
  * x86: CPU -- Rework feature testing
  * files: Fix O(n^2) restore in terms of the number of fds
  * fdstore: Unlimit fdstore queue on start
  * mount: Fix regression where open_mountpoint failed on readonly fs
  * page server: Handle partial splicing
  * ... lots of small fixes here and there
  Improvements:
  * Remove all magic of service descriptors when it isn't required
- Switch to python3
- Use asciidoctor instead of asciidoc for formatting manuals:
  criu-asciidoctor.patch</changelog>
  <changelog author="tiwai@suse.de" date="1557144000">- Update to criu 3.12:
  New features:
  * build CRIU with Android NDK
  * C/R of IP RAW sockets
  * lsm: dump and restore any SELinux process label
  * support restoring ghost files on readonly mounts
  Bugfixes:
  * Do not lock network if running in the host network namespace
  * Fix RPC configuration file handling
  * util: don't leak file descriprots to third-party tools
  * small fixes here and there
  Improvements:
  * travis: switch to the Ubuntu Xenial
  * travis-ci: Enable ia32 tests
  * Many improvements and bug fixes in the libcriu
  * Changes in the API and ABI (SONAME increased from 1 to 2)
- Updated to libcriu2 subpackage to follow SONAME 2
- Dropped obsoleted patch:
  criu-asciidoctor.patch</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1567598400">- Fix build on Tumbleweed: Add -ffat-lto-objects to lto cflags.</changelog>
  <changelog author="tiwai@suse.de" date="1574078400">- Update to criu 3.13:
  New features:
  * VDSO: arm32 support
  * Add TLS support for page server communications
  * "Ignore" mode for --manage-cgroups
  * Restore SO_BROADCAST option for inet sockets
  Bugfixes:
  * Auxiliary events were left in inotify queues
  * Lazy-pages daemon didn't detect stack pages and surrounders
    properly and marked them as "lazy"
  * Memory and resource leakage were detected by coverity, cppcheck
    and clang
  Improvements:
  * Use gettimeofday() directly from vdso for restore timings
  * Reformat all .py code into pep8 style</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1589371200">- Disable LTO on aarch64 and armv7
- Add '-Wno-error=deprecated' to fix build on armv7
- Exclude armv6 since criu/arch/arm/bitops.S uses 'dmb ish' which
  is armv7+</changelog>
  <changelog author="tiwai@suse.de" date="1589976000">- Update to criu 3.14:
  New features:
  * C/R of memfd memory mappings and file descriptors
  * Add time namespace support
  * Add the read pre-dump mode which uses process_vm_readv
  * Add --cgroup-yard option
  * Add support of the cgroup v2 freezer
  * Add support of opened O_PATH fds
  Bugfixes:
  * Fix C/R ia32 processes on AMD #398
  * Fix cross-compilation
  * Many fixes here and there
  Improvements:
  * Use clone3() with set_tid to restore processes
  * Clean up compel headers
  * Use the new mount API
- Add libgnutls-devel to buildreq</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1600862400">- fix filelist mismatch after libexecdir change</changelog>
  <changelog author="tiwai@suse.de" date="1606824000">- Update to criu 3.15:
  see details at https://criu.org/Download/criu/3.15
  New features:
  * Introduced criu-image-streamer
  * Added MIPS support
  * Allow checkpointing out of existing PID namespace and restoring
    into existing PID namespace
  * Added additional file validation mechanisms
  * Added support to checkpoint and restore BPF hash maps
  (BPF_MAP_TYPE_HASH) and array maps (BPF_MAP_TYPE_ARRAY)
  * Initial cgroups v2 support
- Fix build with nftables package:
  0002-Fix-build-with-nftables-installed-in-different-direc.patch</changelog>
  <changelog author="tiwai@suse.de" date="1622030400">- Fix the build with protobuf-c 1.4:
  criu-protobuf-c-1.4-underscore-fix.patch</changelog>
</package>
<package pkgid="2691a11cfc06491826ba971649fefa16b4780b6ec41304fdca872d9856dd4944" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1594286044.7a596d12" rel="lp152.4.3.1"/>
  <changelog author="XLiang@suse.com" date="1575892800">- Update to version 4.1.0+git.1575875711.41d65be4:
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: corosync: add log and debug messages on each certificate steps
  * Dev: Improvements on naming and class constants
  * Dev: behave: functional test for qdevice setup and options
  * Dev: behave: improve functional test for bootstrap process
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: utils: add is_unicast function to check transport type
  * Dev: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Dev: unittests: test corosync.Qdevice class
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Low: utils: refactor parallax_copy, parallax_call and parallax_slurp
  * Dev: bootstrap: remove qnetd
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: make update_expected_votes as outer function for reuse
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * Dev: bootstrap: adjust corosync configuration for qdevice
  * Dev: bootstrap: make qdevice process as a bootstrap stage
  * Dev: bootstrap: manage qnetd node
  * Dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1576065600">- Update to version 4.1.0+git.1576047267.d87652bb:
  * Dev: behave: functional test for resource failcount set subcommand
  * Low: unittest: add ut for utils.get_nodeid_from_name
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1576238400">- Update to version 4.1.0+git.1576228931.ae559358:
  * Dev: bootstrap: support multi disk sbd configure</changelog>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
</package>
<package pkgid="1ca3e80ffe5e584ec064c5bc61e4155b8cd6fd214812a6af872a6c823d6fddd1" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1594286044.7a596d12" rel="lp152.4.3.1"/>
  <changelog author="XLiang@suse.com" date="1575892800">- Update to version 4.1.0+git.1575875711.41d65be4:
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: corosync: add log and debug messages on each certificate steps
  * Dev: Improvements on naming and class constants
  * Dev: behave: functional test for qdevice setup and options
  * Dev: behave: improve functional test for bootstrap process
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: utils: add is_unicast function to check transport type
  * Dev: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Dev: unittests: test corosync.Qdevice class
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Low: utils: refactor parallax_copy, parallax_call and parallax_slurp
  * Dev: bootstrap: remove qnetd
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: make update_expected_votes as outer function for reuse
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * Dev: bootstrap: adjust corosync configuration for qdevice
  * Dev: bootstrap: make qdevice process as a bootstrap stage
  * Dev: bootstrap: manage qnetd node
  * Dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1576065600">- Update to version 4.1.0+git.1576047267.d87652bb:
  * Dev: behave: functional test for resource failcount set subcommand
  * Low: unittest: add ut for utils.get_nodeid_from_name
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1576238400">- Update to version 4.1.0+git.1576228931.ae559358:
  * Dev: bootstrap: support multi disk sbd configure</changelog>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
</package>
<package pkgid="2290e06a16cff389efb514dc6ec7c573a35d7f2e2062037ebb4d9123c85eb3a0" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1595517298.a06e892f" rel="lp152.4.7.1"/>
  <changelog author="XLiang@suse.com" date="1576065600">- Update to version 4.1.0+git.1576047267.d87652bb:
  * Dev: behave: functional test for resource failcount set subcommand
  * Low: unittest: add ut for utils.get_nodeid_from_name
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1576238400">- Update to version 4.1.0+git.1576228931.ae559358:
  * Dev: bootstrap: support multi disk sbd configure</changelog>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
</package>
<package pkgid="5182e3bad8186ebb3e83e928520a47ffedc55bfd22050f30e37bed204c1db9aa" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1595517298.a06e892f" rel="lp152.4.7.1"/>
  <changelog author="XLiang@suse.com" date="1576065600">- Update to version 4.1.0+git.1576047267.d87652bb:
  * Dev: behave: functional test for resource failcount set subcommand
  * Low: unittest: add ut for utils.get_nodeid_from_name
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1576238400">- Update to version 4.1.0+git.1576228931.ae559358:
  * Dev: bootstrap: support multi disk sbd configure</changelog>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
</package>
<package pkgid="9549d19015b7e33d3a6f11f69fc2563781d1895b115c01cc66f979fe785bc541" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1595940615.c452cc00" rel="lp152.4.11.1"/>
  <changelog author="XLiang@suse.com" date="1576238400">- Update to version 4.1.0+git.1576228931.ae559358:
  * Dev: bootstrap: support multi disk sbd configure</changelog>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
</package>
<package pkgid="f8a2568b4747c19ea1e2129f6807db0a40d4509eac6498ae1e4ec81cfeb26f0a" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1595940615.c452cc00" rel="lp152.4.11.1"/>
  <changelog author="XLiang@suse.com" date="1576238400">- Update to version 4.1.0+git.1576228931.ae559358:
  * Dev: bootstrap: support multi disk sbd configure</changelog>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
</package>
<package pkgid="fc1170aa9f010a83c2a0c906abbf1dd9af3a98d7e5205c1846bb413edcfcfda3" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1598257562.570eb99d" rel="lp152.4.15.1"/>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
</package>
<package pkgid="7b6e5b492ae580b020565f28863bf92b5ce0425f943d6679ed1f783ce22d8634" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1598257562.570eb99d" rel="lp152.4.15.1"/>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
</package>
<package pkgid="8b55616f9e66dbb9f89105122ecb35f222932a15171600533a37f10fb9aa7187" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1599702667.157fc6b5" rel="lp152.4.19.1"/>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
</package>
<package pkgid="37138a2ab539e52c6280c2b6ce90131f30d2c13a5f4cbaaef275f9f63152cec0" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1599702667.157fc6b5" rel="lp152.4.19.1"/>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
</package>
<package pkgid="dbf50304db1d3f6825cf4eb02d0c1e5942fa1e7cdbd887ec5ec86ae679d2bfa1" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1599810948.3db12a7a" rel="lp152.4.23.1"/>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
</package>
<package pkgid="7cb156151e5c5e87ca5cbcf8cd519671137c611286a38d110c0b006fd778fa26" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1599810948.3db12a7a" rel="lp152.4.23.1"/>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
</package>
<package pkgid="b1d0de545a62e19c85ab76d3a4637c9e5769871a59b8d3177ad2e9774038b8ab" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1602225426.5f84efb5" rel="lp152.4.27.1"/>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
</package>
<package pkgid="45a006df65721942dc9eceea3d9ed03646ca29e8e686db52486a1df8a9296ed6" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1602225426.5f84efb5" rel="lp152.4.27.1"/>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
</package>
<package pkgid="d21e79f37a117e5b6da21b59a48ee7526efde66631f2f7bab9e215046afb378c" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1604052559.2a348644" rel="lp152.4.31.1"/>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
</package>
<package pkgid="7198af21c9c105dc848b49543e3bf076f4e1490a289fc5d46c779dd4cbeda16b" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1604052559.2a348644" rel="lp152.4.31.1"/>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
</package>
<package pkgid="425e7d25cf1f5c000c782e478e9ebcb3ae17cb1dda7b12300e082ab8c8ddd866" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1607075079.a25648d8" rel="lp152.4.35.1"/>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
</package>
<package pkgid="927b95e2525d889152f03946294fad6573396a392679ecbffbb53760a94ffe12" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1607075079.a25648d8" rel="lp152.4.35.1"/>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
</package>
<package pkgid="1f86a10f58c5713fe64e1eec225bf12207368c4bba040919c62f96c0b8a767f7" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1607075079.a25648d8" rel="lp152.4.39.1"/>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
</package>
<package pkgid="2e34e1d894b8f601ffc5ae65d4bf3777108b661f4da63cc42b741f44526e02df" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1607075079.a25648d8" rel="lp152.4.39.1"/>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
</package>
<package pkgid="7420828b99a260551d170830a83488223549d207a925788e5cc1b55d6021fe93" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1609987436.0d3a9bf5" rel="lp152.4.43.1"/>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
</package>
<package pkgid="340633e7dff91d8279a4d5aa061ccb8d2e9aaae53d4bd11713d6f4e966c0a111" name="crmsh" arch="src">
  <version epoch="0" ver="4.2.0+git.1609987436.0d3a9bf5" rel="lp152.4.43.1"/>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
</package>
<package pkgid="693495da3b9b0564273f9d249832077f0624e00c4ca51ff3a4d79cf634a3c5e1" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.0+20210305.9db5c9a8" rel="lp152.4.47.1"/>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
</package>
<package pkgid="7ba45773093deb5071576995881ec6669a74dc7a6da958d8a6bc36968abb573c" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.0+20210305.9db5c9a8" rel="lp152.4.47.1"/>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
</package>
<package pkgid="bfba012daf73b681c9b971952ce00b5916c2c2cd0eef4257e8b705f3044bae38" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.0+20210315.5d07d43e" rel="lp152.4.51.1"/>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
</package>
<package pkgid="8ef5526ecb14d6ba7e8eb62527b8376930c16ecea99a6e1da0dbd06fa67c8ead" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.0+20210315.5d07d43e" rel="lp152.4.51.1"/>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
</package>
<package pkgid="9667ba2f7035b2205be64807fb52fbcd2dae217ceb15c389062d99fe63325378" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="lp152.4.55.1"/>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="e899db74bf5c8849c62d25d1e9071dd14290ebe1d60e85548e6404934c1a8ffa" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="lp152.4.55.1"/>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="95e12a26e83c6a2f59ce0bc20e77120b7e5981beffe9a026f8dcfd345999c5fa" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.1+20210702.4e0ee8fb" rel="lp152.4.59.1"/>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
</package>
<package pkgid="54bf4520760fedb0a6305e77ca1714f49cea463cd38aedaee11b4509b0b1e921" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.1+20210702.4e0ee8fb" rel="lp152.4.59.1"/>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
</package>
<package pkgid="868c561dee742f6214fdec0aa5aa8337827e15d02ce123d3a3169255f97a6aab" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.1+20210811.2a30e37e" rel="lp152.4.63.1"/>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
</package>
<package pkgid="a6cab1bcb214acf92bf9580e9dc772810e33013ac885ffcd69e5fb40d49fe506" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.1+20210811.2a30e37e" rel="lp152.4.63.1"/>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
</package>
<package pkgid="f8dee5f2e626fff374504b46bdd26b9226fbd32ffabff5dc1a20bf15bdef1236" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.1+20210827.4fb174c4" rel="lp152.4.67.1"/>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
  <changelog author="XLiang@suse.com" date="1631188800">- Update to version 4.3.1+20210827.4fb174c4:
  * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
  * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)</changelog>
</package>
<package pkgid="2fdfd0b5d2f5acc49601ce0a76450552e14377070c132d79ec67a11c63592164" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.1+20210827.4fb174c4" rel="lp152.4.67.1"/>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
  <changelog author="XLiang@suse.com" date="1631188800">- Update to version 4.3.1+20210827.4fb174c4:
  * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
  * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)</changelog>
</package>
<package pkgid="2f3e172d8c6152cf1c5c87f53fe05bbd1720ab5e78397d7cc843329f440cd9b0" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.1+20211012.52d4086a" rel="lp152.4.71.1"/>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
  <changelog author="XLiang@suse.com" date="1631188800">- Update to version 4.3.1+20210827.4fb174c4:
  * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
  * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)</changelog>
  <changelog author="XLiang@suse.com" date="1634040000">- Update to version 4.3.1+20211012.52d4086a:
  * Fix: ui_resource: Parse lifetime option correctly (bsc#1191508)
  * Fix: utils: Improve detect_cloud function and support non-Hyper-V in Azure</changelog>
</package>
<package pkgid="0241e017996426fd29077bbbfc37ea1bc2a34c8d9d991e7cd62df7f0f3d2ecef" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.1+20211012.52d4086a" rel="lp152.4.71.1"/>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
  <changelog author="XLiang@suse.com" date="1631188800">- Update to version 4.3.1+20210827.4fb174c4:
  * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
  * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)</changelog>
  <changelog author="XLiang@suse.com" date="1634040000">- Update to version 4.3.1+20211012.52d4086a:
  * Fix: ui_resource: Parse lifetime option correctly (bsc#1191508)
  * Fix: utils: Improve detect_cloud function and support non-Hyper-V in Azure</changelog>
</package>
<package pkgid="9cb4232ec9033d8697f182136364aff35cb0883ea2dd94fca9f35f49ecfe145f" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.1+20211119.97feb471" rel="lp152.4.75.1"/>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
  <changelog author="XLiang@suse.com" date="1631188800">- Update to version 4.3.1+20210827.4fb174c4:
  * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
  * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)</changelog>
  <changelog author="XLiang@suse.com" date="1634040000">- Update to version 4.3.1+20211012.52d4086a:
  * Fix: ui_resource: Parse lifetime option correctly (bsc#1191508)
  * Fix: utils: Improve detect_cloud function and support non-Hyper-V in Azure</changelog>
  <changelog author="XLiang@suse.com" date="1637323200">- Update to version 4.3.1+20211119.97feb471:
  * Fix: ui_resource: Parse node and lifetime correctly (bsc#1192618)</changelog>
</package>
<package pkgid="9eca31652cebf826241648d4d6b5b310c7eb950afae903bbc98c4187aa80b86f" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.1+20211119.97feb471" rel="lp152.4.75.1"/>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
  <changelog author="XLiang@suse.com" date="1631188800">- Update to version 4.3.1+20210827.4fb174c4:
  * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
  * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)</changelog>
  <changelog author="XLiang@suse.com" date="1634040000">- Update to version 4.3.1+20211012.52d4086a:
  * Fix: ui_resource: Parse lifetime option correctly (bsc#1191508)
  * Fix: utils: Improve detect_cloud function and support non-Hyper-V in Azure</changelog>
  <changelog author="XLiang@suse.com" date="1637323200">- Update to version 4.3.1+20211119.97feb471:
  * Fix: ui_resource: Parse node and lifetime correctly (bsc#1192618)</changelog>
</package>
<package pkgid="d3e44619afb57158c5fc9485c95f9a2d1ec2f9acc008357e74ab1eb10b13cd0f" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1594286044.7a596d12" rel="lp152.4.3.1"/>
  <changelog author="XLiang@suse.com" date="1575892800">- Update to version 4.1.0+git.1575875711.41d65be4:
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: corosync: add log and debug messages on each certificate steps
  * Dev: Improvements on naming and class constants
  * Dev: behave: functional test for qdevice setup and options
  * Dev: behave: improve functional test for bootstrap process
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: utils: add is_unicast function to check transport type
  * Dev: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Dev: unittests: test corosync.Qdevice class
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Low: utils: refactor parallax_copy, parallax_call and parallax_slurp
  * Dev: bootstrap: remove qnetd
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: make update_expected_votes as outer function for reuse
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * Dev: bootstrap: adjust corosync configuration for qdevice
  * Dev: bootstrap: make qdevice process as a bootstrap stage
  * Dev: bootstrap: manage qnetd node
  * Dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1576065600">- Update to version 4.1.0+git.1576047267.d87652bb:
  * Dev: behave: functional test for resource failcount set subcommand
  * Low: unittest: add ut for utils.get_nodeid_from_name
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1576238400">- Update to version 4.1.0+git.1576228931.ae559358:
  * Dev: bootstrap: support multi disk sbd configure</changelog>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
</package>
<package pkgid="6ee558c4ed59793de0a2e857c72e9cf1c1fe081c1409347eb34d3ed0bce7a21c" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1595517298.a06e892f" rel="lp152.4.7.1"/>
  <changelog author="XLiang@suse.com" date="1576065600">- Update to version 4.1.0+git.1576047267.d87652bb:
  * Dev: behave: functional test for resource failcount set subcommand
  * Low: unittest: add ut for utils.get_nodeid_from_name
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1576238400">- Update to version 4.1.0+git.1576228931.ae559358:
  * Dev: bootstrap: support multi disk sbd configure</changelog>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
</package>
<package pkgid="8ba4c54ac152c81a965cb67010569bb9579895cfa9f0f576b4db0e1c71105123" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1595940615.c452cc00" rel="lp152.4.11.1"/>
  <changelog author="XLiang@suse.com" date="1576238400">- Update to version 4.1.0+git.1576228931.ae559358:
  * Dev: bootstrap: support multi disk sbd configure</changelog>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
</package>
<package pkgid="2ec6d8c884ba3b71c28a41b55f84c28256691013d8f9fea97f40e53b2e6c078e" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1598257562.570eb99d" rel="lp152.4.15.1"/>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
</package>
<package pkgid="8bfa814516b83f17eeeb80cd0b31418eca524730ed325dadef6d1858fe184e3b" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1599702667.157fc6b5" rel="lp152.4.19.1"/>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
</package>
<package pkgid="7e0f528ac008f91aab6692198e86e695a8621389746e3a85321a827e693ce2f2" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1599810948.3db12a7a" rel="lp152.4.23.1"/>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
</package>
<package pkgid="4ce15aa1840203997221c28a2f935d350bce5334f3ae5ab97a07019031ff75b9" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1602225426.5f84efb5" rel="lp152.4.27.1"/>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
</package>
<package pkgid="976541547c4aa9193434ede0d84b9b6a4b5be077a0cf7dbe515ea88ab3fb490e" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1604052559.2a348644" rel="lp152.4.31.1"/>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
</package>
<package pkgid="14cf90ea0ecaf715d49f487096e7e34ae13535237a7f31fe9fc1fde8b4ab95eb" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1607075079.a25648d8" rel="lp152.4.35.1"/>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
</package>
<package pkgid="2974d3408f5045b2063f7fadc1a91e259849a009357e4609b887ea312c6ea987" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1607075079.a25648d8" rel="lp152.4.39.1"/>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
</package>
<package pkgid="54c8230993d1f76a91ea530d3c614244e3f13693cc8a1fd0d9f67d9cb4d579a0" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1609987436.0d3a9bf5" rel="lp152.4.43.1"/>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
</package>
<package pkgid="30ec3ab119393c3da0398f1ae0661ccb5766d75f48348449a0609f79e6221482" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.0+20210305.9db5c9a8" rel="lp152.4.47.1"/>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
</package>
<package pkgid="fca1a1366b73dde783292a7a81168b4afd0788a9c9fa8867846acf8f6e44f827" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.0+20210315.5d07d43e" rel="lp152.4.51.1"/>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
</package>
<package pkgid="c7763e503837ffad12a113648b463641bbdef6dd5f23cc3db130267ba989d6f7" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="lp152.4.55.1"/>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="47490002bd8f0f5b7600ed58fe92999730db56ee85a45135a20cc91b9a7f822d" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.1+20210702.4e0ee8fb" rel="lp152.4.59.1"/>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
</package>
<package pkgid="f1b317c8082eed4c7bda5bb2421a10155de00b3cd9e935aa7be3151e5420c3d6" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.1+20210811.2a30e37e" rel="lp152.4.63.1"/>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
</package>
<package pkgid="6afcda6048a00ca5ac8e766a2932dcc483244f8d48eea7aae5789c434de6b649" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.1+20210827.4fb174c4" rel="lp152.4.67.1"/>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
  <changelog author="XLiang@suse.com" date="1631188800">- Update to version 4.3.1+20210827.4fb174c4:
  * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
  * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)</changelog>
</package>
<package pkgid="2e6864bcd13286732d0b433fce610ecbe3245d248463aaca1718e25cbd9a845b" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.1+20211012.52d4086a" rel="lp152.4.71.1"/>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
  <changelog author="XLiang@suse.com" date="1631188800">- Update to version 4.3.1+20210827.4fb174c4:
  * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
  * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)</changelog>
  <changelog author="XLiang@suse.com" date="1634040000">- Update to version 4.3.1+20211012.52d4086a:
  * Fix: ui_resource: Parse lifetime option correctly (bsc#1191508)
  * Fix: utils: Improve detect_cloud function and support non-Hyper-V in Azure</changelog>
</package>
<package pkgid="443e6454265a11aeabe634dfae44a8a53bdc426935b5422b8ce485ad10aea396" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.1+20211119.97feb471" rel="lp152.4.75.1"/>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
  <changelog author="XLiang@suse.com" date="1631188800">- Update to version 4.3.1+20210827.4fb174c4:
  * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
  * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)</changelog>
  <changelog author="XLiang@suse.com" date="1634040000">- Update to version 4.3.1+20211012.52d4086a:
  * Fix: ui_resource: Parse lifetime option correctly (bsc#1191508)
  * Fix: utils: Improve detect_cloud function and support non-Hyper-V in Azure</changelog>
  <changelog author="XLiang@suse.com" date="1637323200">- Update to version 4.3.1+20211119.97feb471:
  * Fix: ui_resource: Parse node and lifetime correctly (bsc#1192618)</changelog>
</package>
<package pkgid="f4aad668ec973960a9e4fab69d1b2a6452c12443359b3832f3c67c74ed39c92b" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1594286044.7a596d12" rel="lp152.4.3.1"/>
  <changelog author="XLiang@suse.com" date="1575892800">- Update to version 4.1.0+git.1575875711.41d65be4:
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: corosync: add log and debug messages on each certificate steps
  * Dev: Improvements on naming and class constants
  * Dev: behave: functional test for qdevice setup and options
  * Dev: behave: improve functional test for bootstrap process
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: utils: add is_unicast function to check transport type
  * Dev: corosync: use custom exception IPAlreadyConfiguredError for add_node_ucast
  * Dev: unittests: test corosync.Qdevice class
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Low: utils: refactor parallax_copy, parallax_call and parallax_slurp
  * Dev: bootstrap: remove qnetd
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: make update_expected_votes as outer function for reuse
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * Dev: bootstrap: adjust corosync configuration for qdevice
  * Dev: bootstrap: make qdevice process as a bootstrap stage
  * Dev: bootstrap: manage qnetd node
  * Dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1576065600">- Update to version 4.1.0+git.1576047267.d87652bb:
  * Dev: behave: functional test for resource failcount set subcommand
  * Low: unittest: add ut for utils.get_nodeid_from_name
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1576238400">- Update to version 4.1.0+git.1576228931.ae559358:
  * Dev: bootstrap: support multi disk sbd configure</changelog>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
</package>
<package pkgid="be49720a2bdc4e0d3bf13e9c3f5bfcc726b3d101b89219b8eb91a60fb6c5cf28" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1595517298.a06e892f" rel="lp152.4.7.1"/>
  <changelog author="XLiang@suse.com" date="1576065600">- Update to version 4.1.0+git.1576047267.d87652bb:
  * Dev: behave: functional test for resource failcount set subcommand
  * Low: unittest: add ut for utils.get_nodeid_from_name
  * Fix: ui_resource: set resource failcount correctly(bsc#1144241)</changelog>
  <changelog author="XLiang@suse.com" date="1576238400">- Update to version 4.1.0+git.1576228931.ae559358:
  * Dev: bootstrap: support multi disk sbd configure</changelog>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
</package>
<package pkgid="a610830a4f18e987cc865babd89a3a4f7ac1e89ff3c7ea63d443896cacc6c90c" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1595940615.c452cc00" rel="lp152.4.11.1"/>
  <changelog author="XLiang@suse.com" date="1576238400">- Update to version 4.1.0+git.1576228931.ae559358:
  * Dev: bootstrap: support multi disk sbd configure</changelog>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
</package>
<package pkgid="64995356075eb61e8d3258c88526822fa823f74b84ecde8f4fafba3158540f98" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1598257562.570eb99d" rel="lp152.4.15.1"/>
  <changelog author="XLiang@suse.com" date="1577102400">- Update to version 4.2.0+git.1577086871.f544180c:
  * Update ChangeLog for 4.2.0</changelog>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
</package>
<package pkgid="4083bd029151853514c73fadfad4b6766f9e57ad45b76f1fd87592f1e1276db8" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1599702667.157fc6b5" rel="lp152.4.19.1"/>
  <changelog author="XLiang@suse.com" date="1578052800">- Update to version 4.2.0+git.1578030883.465b4212:
  * dev: unittest: fix test_report.py failing in 2020</changelog>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
</package>
<package pkgid="735750e9e9f87535fb7b984c5a8e59e7e9fc503336b3926226d3f1b8fbc23c61" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1599810948.3db12a7a" rel="lp152.4.23.1"/>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578387778.867a085b:
  * Dev: bootstrap: Maximum number of SBD device is 3
  * Dev: bootstrap: improve multi disk sbd usability support both '-s device1 -s device2' and '-s "device1;device2"' improve the logic of code</changelog>
  <changelog author="XLiang@suse.com" date="1578398401">- Update to version 4.2.0+git.1578389070.fb171448:
  * Fix: crmsh.spec: using mktemp to create tmp file(bsc#1154163)</changelog>
  <changelog author="XLiang@suse.com" date="1578398402">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
</package>
<package pkgid="be1457d83115b3701adb2eb5d84a574ac2505e4cc5a538cebab66b176ad1b348" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1602225426.5f84efb5" rel="lp152.4.27.1"/>
  <changelog author="XLiang@suse.com" date="1578398400">- Update to version 4.2.0+git.1578400179.830baba1:
  * Dev: unittest: remove "placement-strategy=balanced" in ut codes
  * Dev: behave: test placement-strategy value is "default"
  * Fix: bootstrap: set placement-strategy value as "default"(bsc#1129462)</changelog>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
</package>
<package pkgid="35288a7a9d97f7408a10277fe5ce74756143c3428111cd15b2173f294e2d75fd" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1604052559.2a348644" rel="lp152.4.31.1"/>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578641542.ddda681c:
  * Dev: behave: varify help output for commands which replace as argparse
  * Dev: replace optparse with argparse</changelog>
  <changelog author="XLiang@suse.com" date="1578657601">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
</package>
<package pkgid="fd7b0e8a5b936208993fd09af4bad113152e29a97d28fa5562209f647ad78ee9" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1607075079.a25648d8" rel="lp152.4.35.1"/>
  <changelog author="XLiang@suse.com" date="1578657600">- Update to version 4.2.0+git.1578645670.4df2f015:
  * Dev: unittest: add unit test for dump_D_process function
  * Fix: hb_report: disable dump all tasks stack into dmesg(bsc#1158060)</changelog>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
</package>
<package pkgid="a0a318fa8b7e067581fb1b343c20e36ac3bf51c07327222d34914164c7bf03c4" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1607075079.a25648d8" rel="lp152.4.39.1"/>
  <changelog author="XLiang@suse.com" date="1578916800">- Update to version 4.2.0+git.1578911004.c1a33535:
  * Dev: behave: Not allowed space value for option
  * Fix: ui_cluster: Not allowed space value for option (bsc#1141976)</changelog>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
</package>
<package pkgid="ce8c73511cd8a5b38b58e624f6f6a2b64871804862f0df8bdba96e3a98b4bee2" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.2.0+git.1609987436.0d3a9bf5" rel="lp152.4.43.1"/>
  <changelog author="XLiang@suse.com" date="1579521600">- Update to version 4.2.0+git.1579517638.06d53d8a:
  * Low: doc: update configure.set documentation
  * Low: behave: functional test for configure.set subcommand
  * Feature: configure: make configure.set to update operation</changelog>
  <changelog author="XLiang@suse.com" date="1579694400">- Update to version 4.2.0+git.1579603179.bf924b8b:
  * Low: testcases: adjust testcases based on related upstream version
  * Low: unittest: replace nose with pytest
  * Low: replace configparser.SafeConfigParser as configparser.ConfigParser</changelog>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
</package>
<package pkgid="951d83614d0638b6dace8557c64887532684145311246cfae4d3d1c0f13a0b80" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.0+20210305.9db5c9a8" rel="lp152.4.47.1"/>
  <changelog author="XLiang@suse.com" date="1580299200">- Update to version 4.2.0+git.1580263559.a2b0f500:
  * scripts: python3.8 unittest compatibility</changelog>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
</package>
<package pkgid="13cba5000c852f344c36ad2a07ab845be523fc040509b28a507369d7678f2911" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.0+20210315.5d07d43e" rel="lp152.4.51.1"/>
  <changelog author="XLiang@suse.com" date="1580472000">- Update to version 4.2.0+git.1580467952.1931808d:
  * Low: utils: update detect_cloud pattern for aws</changelog>
  <changelog author="XLiang@suse.com" date="1580558400">- Update to version 4.2.0+git.1580544897.c42c9530:
  * Low: unittest: add unit test to detect_cloud</changelog>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
</package>
<package pkgid="b92bbf68f3551f86a9972a48adc2bc80ae0ea743ca7e1708b37baa5e3a739ee0" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="lp152.4.55.1"/>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="7605576182e281587be7aa835dfc5628beb7bba32b29d0966d53be020ee97b34" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.1+20210702.4e0ee8fb" rel="lp152.4.59.1"/>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
</package>
<package pkgid="42ecaab737631f2454bb7029515b457431ac9e609fb1aa1115f0173c115ddfff" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.1+20210811.2a30e37e" rel="lp152.4.63.1"/>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
</package>
<package pkgid="96848812d3f7f2bc6e68744fc2c5acd0ba16c6dd2203f49afe1260ddb599a469" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.1+20210827.4fb174c4" rel="lp152.4.67.1"/>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
  <changelog author="XLiang@suse.com" date="1631188800">- Update to version 4.3.1+20210827.4fb174c4:
  * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
  * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)</changelog>
</package>
<package pkgid="c9d36cba3ca3e0906337cdeb55fd2290486dafcef703a0aecffb56cd389271a0" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.1+20211012.52d4086a" rel="lp152.4.71.1"/>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
  <changelog author="XLiang@suse.com" date="1631188800">- Update to version 4.3.1+20210827.4fb174c4:
  * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
  * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)</changelog>
  <changelog author="XLiang@suse.com" date="1634040000">- Update to version 4.3.1+20211012.52d4086a:
  * Fix: ui_resource: Parse lifetime option correctly (bsc#1191508)
  * Fix: utils: Improve detect_cloud function and support non-Hyper-V in Azure</changelog>
</package>
<package pkgid="ca82390914bb6d73c6f1b547bd164f6b45775fb5d53118e6acff05338d92d841" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.1+20211119.97feb471" rel="lp152.4.75.1"/>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
  <changelog author="XLiang@suse.com" date="1623844800">- Update to version 4.3.0+20210616.cdcfe52e:
  * Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
  * Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
  * Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
  * Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
  * Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
  * Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
  * Fix: help: show help message from argparse(bsc#1175982)
- Remove patches:
  0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1624536000">- Update to version 4.3.1+20210624.67223df2:
  * Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)</changelog>
  <changelog author="XLiang@suse.com" date="1625227200">- Update to version 4.3.1+20210702.4e0ee8fb:
  * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
  * Fix: resource: make untrace consistent with trace (bsc#1187396)
  * Dev: sbd: enable SBD_DELAY_START in virtualization environment</changelog>
  <changelog author="XLiang@suse.com" date="1628683200">- Update to version 4.3.1+20210811.2a30e37e:
  * Dev: ui_resource: Enhancement trace output
  * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
  * Medium: ra: performance/usability improvement (avoid systemd)
  * Dev: ui_context: Add info when spell-corrections happen
  * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)</changelog>
  <changelog author="XLiang@suse.com" date="1631188800">- Update to version 4.3.1+20210827.4fb174c4:
  * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
  * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)</changelog>
  <changelog author="XLiang@suse.com" date="1634040000">- Update to version 4.3.1+20211012.52d4086a:
  * Fix: ui_resource: Parse lifetime option correctly (bsc#1191508)
  * Fix: utils: Improve detect_cloud function and support non-Hyper-V in Azure</changelog>
  <changelog author="XLiang@suse.com" date="1637323200">- Update to version 4.3.1+20211119.97feb471:
  * Fix: ui_resource: Parse node and lifetime correctly (bsc#1192618)</changelog>
</package>
<package pkgid="00b3b498b16aa815e41e5b72a2d7e5cd0e6b6f77670a1831d21c4189d78e9bb1" name="cron" arch="i586">
  <version epoch="0" ver="4.2" rel="lp152.7.3.1"/>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628251200">- Increase limit of allowed entries in crontab files to fix bsc#1187508
  * cronie-1.5.1-increase_crontab_limit.patch</changelog>
</package>
<package pkgid="82d72ffadf4e06e0333fcf7dd4c6cfa1bed4bb5fd73ba0f9eac993a722fc4484" name="cron" arch="x86_64">
  <version epoch="0" ver="4.2" rel="lp152.7.3.1"/>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628251200">- Increase limit of allowed entries in crontab files to fix bsc#1187508
  * cronie-1.5.1-increase_crontab_limit.patch</changelog>
</package>
<package pkgid="4c713dd34305a31a64bf86a890f3d925f81872a22cce5e21463dfcc6ab421272" name="cronie" arch="i586">
  <version epoch="0" ver="1.5.1" rel="lp152.7.3.1"/>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628251200">- Increase limit of allowed entries in crontab files to fix bsc#1187508
  * cronie-1.5.1-increase_crontab_limit.patch</changelog>
</package>
<package pkgid="f6b819d9a36107b171d2a540d601c06af083d373da7aefd53c2aae8375a7ba22" name="cronie" arch="src">
  <version epoch="0" ver="1.5.1" rel="lp152.7.3.1"/>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628251200">- Increase limit of allowed entries in crontab files to fix bsc#1187508
  * cronie-1.5.1-increase_crontab_limit.patch</changelog>
</package>
<package pkgid="cd5ec73d187150922d874a1725a67078202a31c43d535599043af649391a20be" name="cronie" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp152.7.3.1"/>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628251200">- Increase limit of allowed entries in crontab files to fix bsc#1187508
  * cronie-1.5.1-increase_crontab_limit.patch</changelog>
</package>
<package pkgid="c82ee0597d681a3a50a91aeec7d205213f545b0b45074e934e20ce040e10ac46" name="cronie-anacron" arch="i586">
  <version epoch="0" ver="1.5.1" rel="lp152.7.3.1"/>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628251200">- Increase limit of allowed entries in crontab files to fix bsc#1187508
  * cronie-1.5.1-increase_crontab_limit.patch</changelog>
</package>
<package pkgid="d90bf5047f79d36d3b505ac389087373489663c69045db612e44cc8834e0ea4d" name="cronie-anacron" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp152.7.3.1"/>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1572955200">- update cronie-nheader_lines.diff so it doesn't print the first 3
  crontab lines (static comments) with the 'crontab -l' command
  [bsc#1155114]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1574251200">- drop 'checkproc' line from the run-crons as the usage is bogus
  [bsc#1155929]</changelog>
  <changelog author="Danilo Spinella &lt;danilo.spinella@suse.com&gt;" date="1628251200">- Increase limit of allowed entries in crontab files to fix bsc#1187508
  * cronie-1.5.1-increase_crontab_limit.patch</changelog>
</package>
<package pkgid="ac302e4c8b2b7966a2e37cac45f1a12af649f284d056086e6935f72fbb36137e" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="db7d27ef1f73ab15f7cb9f93901ad38f72c02b0cbc754d73b13b6888d48570be" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="cbef8279eb0498a5843da9c3c6220d58da3e512ad18243860b150c5f69ede532" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="9e9cc1db749fd25e861d1c32b4cc689b9845abc8dc362014aed7f4127cf8963e" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="1598d1438a4fa1a513801b1575d436cded4b4bdece86042a6f44b006cebfd5f2" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="fa38e624300c6d7f30b8ca20168786265e28a4d91ffda4321f07ceba29dee30b" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="83da14b837291ff3bd5c4bda038335c66f419458518498e49af178ecc11d1e74" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="faef57b115a5dd18b0b2176498dc32befa465dfcd3bce7871a99342a7de4accf" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="23b9fb8abc96118a4ca74fa0b345c453dc1829a96b8e20a58733f1d85798bab8" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="9f936fb6464e31910550f2353c8f4c3d8e668e3253edb7bb0a91a18b766f3251" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="096759b0422d63400d82044180f2aafa82d442c561e61efb32949061afe96bd0" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="ba7b00f4910a0d47fce95354c1a85a36329579cb308071e993851e6ca2c8205c" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="aa52bb71de9844bf154c8d854da485f75871e9055b226d78381871a3ebc24bd4" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="90d30490dd29aeca28d01a099ed9f72cbfc4719ec82b096e3554928b0b71bd86" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="751175ff2418620b517e6d2075b8d6d3622d33bb17b667fd81995ef12a19c077" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="304884fc2cd298098c7fd13f44f7246b2043b01b01c6974f7a56e3afcab15858" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="e6b73ef5a7f6d104a807521f11221874663dfa4026ed1c91344304b6d28e4091" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="150ccd2672795ef08572e091c6a4ef402155299cd88f53457969e4c42b2d22df" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="66a48070385d05decafb9934d4e8e979feaa8aaacfbd41a2055b79b3eec8494d" name="cross-epiphany-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="bffde11bbb393944b6548a2ebc7fbefb54d0ba4d89bc73a94e7fd9e3da69997c" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="b5a34db6a2119baf17c697341f0b622a52f90e6908827575abdb916f87551ecb" name="cross-epiphany-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="eff33b5b9fde2d31be10e32acf36ec91baef85b2ebbdbbe9e33e2f480b39112e" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="4f51016e684eb445a2263e627d03c1b729b83f29c7539b819eb90c834cbda6db" name="cross-epiphany-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="6dec4d10f6f676368d0e753251043ed10c2b1361f8f1e85440b6795c48a02574" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="64ac807dda2ca22d043067ee5ad25ec1cad0949aeec0f06205655259ef89d9e1" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="4b1584d47b4276a756ee4abbbb5fe75b937d9ba083e0deba2e2c9116a6b06c78" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="d0724ac58dec0bbc3533663f85e2ad3e747318fbd83318db86339766eeab4717" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="0e099357ed2e852ca0008f4fd4c7c009eeecd3c2753821df92078f36e238fceb" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="676daa207a550752dc970eb55e1ddc41eea6048ca058965f388c2efe29f8b4f3" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="85c978842f643c9241a5c72574f0c07d8fe6a8679145ac92599689acb410e199" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="2845863eed41ee22d0dad1f1fdb40d5b67356267cecbc8adb4400a8e1a5f144e" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="156bcc32217b035d9c4260bb6e031bc8dc9b92cf6a28b41f6ff8f06d2040a0a4" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="f72116902e7927b2ba671c4ae810e3b5c4fbeec544e79168b9ec3722e8f1032c" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="4f68ce8301bc96a8e733c963731ae99b9bd0cc8132a8c6009975350888b91077" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="8c245d7f945bdfb5faf13494d9708ba5315cee4f79e5d12e5b63c0eaf5167847" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="00b775b2b29d592fb4c5426a484d1773f93ebfeb46bc09d706c3a294e1b39c33" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="c5df20813bea4508c13c1206243832431749c664273a90a6a06df0a57374e30a" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="2aa37726d392340fa08c636f54a08f64c7a30af160f1705c0d0043de8fe3f2ca" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="5724bad61d48e72c7cc60107db5a5408e0d1f7895ba0225dd81002683a029e08" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="c91733c2f652828c7b724dbe07b8a2a68731f5f8b414b14a6984fd311fdc173e" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="0609edeed254038dd09d877495a2ccbbf2b3711115e36caa65bd968117b4c0b0" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="c3fa0bbc86f054a6ff52728f95e1b325c8de76a877ac7958d6bdddecdbe1f79e" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="b1d4f4e02545397e96f5e0fe15446c0fcc4d3e72dd51669802282a3a1ce4d7e2" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="56b782f241debed9b5b43fb46b34f02cb34b3b2afef5ee106ca17dfb0d09c961" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="79e460634739740f8b30c3ee1ad5da9abf89c901aad5d87b355ad4b76de91185" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="cde7a460a6b56e78b96839c73d1edfb495c6cdd6999fb9aa9718337f84dedf7b" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="90195591d52fdfceffb863596d0b2039e6a2c1de85640f7638a08c93747f7a60" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="1c86303504b5bfd33269f8ddeb06ea5e462bc2988ded058713208943d3b08e79" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="0a1f40c66ebab155acc94bc0235c2205779c6c5afa2f37f89c2628f88265e981" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="e5d698e1ec477ca202bb7cfdbfd70782b6f1705575ac9c0a017b61427350dcbd" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="07f58856b379613458fd7cd254c92a0dc13c4a40b2f9353a1128821b54eb666d" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="f5bbb80cca2a514131d75d77132192f2ce3ca549cc89f4b31f39d995a53bc860" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="4a7b5f6a019c0dda36816c5e634d0c8573e283c0270bb99ab4731d71ac783bbc" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="b0deb88a8218c5105d542442393e0530427b8724152ec70fc163e1901cf3d097" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="8075e0f5b97793e99b335880ad16a7a53ee0ae0ba6559120cdc10013dde786c8" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="1c3af1cea9b9a7fec9c29d1c9134128a0312e620c18e5264d897852e5523fb45" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="cac7385e3534729e3b45b6578e643cb5fd7d28295eda0f6e6f8c934ac675442b" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="bf78a5ea1185e1793ec18cd068cfa33e7823ff39372a57677366b4b52124b334" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="a40a41db9cb6b268a78ec32e6fc0755307f6c9701b5bade16d9675378b8fcba2" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="103062edaba0778a53c4760d693847ad023cd3607c7855bd2dcc0d4ea289e212" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="6c0edec470b21130da8e7207e42f0f9810af53ba2bd02bf34d4d5d75ccb96e6d" name="cross-nvptx-gcc10" arch="src">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="7c657e6635bcdd1a54ea65fcc00b7f74337368fc584e992c8e2784140facf0ec" name="cross-nvptx-gcc10" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="9d34bcf9fc3463fbc4f9f6de0e5d7db03d28aceb6a9525431ace2bd650cdd78b" name="cross-nvptx-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="lp152.5.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="Matthew Trescott &lt;matthewtrescott@gmail.com&gt;" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="77a492ca784d150fdb97bfa3e8e4c1040dc33a602e1f73c820a1e2ea3fcd78e5" name="cross-nvptx-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="lp152.5.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="Matthew Trescott &lt;matthewtrescott@gmail.com&gt;" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a929fe9cf78aa7c3104b1a98fd189dd4a02b0f9542c2e6157350f314305d07b5" name="cross-nvptx-gcc9" arch="src">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="73f2e0325a30104d01a2d8457cc741c256d88447d84bff863ba1021fc00118f5" name="cross-nvptx-gcc9" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="85ebcf50a4504fcc78f0ff4a564715246a9371bb481f9c6d0a9bb6493512952a" name="cross-nvptx-newlib10-devel" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="617c700f675caec82b4fd030535a10cc55c9d7ad43e285fb2d811c1d4a87738f" name="cross-nvptx-newlib10-devel" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="lp152.5.1"/>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="Matthew Trescott &lt;matthewtrescott@gmail.com&gt;" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d720336596b3f07a1adbb7444d371e7ee6f4eed47365b5f4ee81e832b1685c5e" name="cross-nvptx-newlib9-devel" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="0f0a93b1be8c1c9d6c8219d81b9c2bf3574b2642cc7e6fdf5a5b7812d05ae5a2" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="00ea90058b960c6673bd3b94ca2a4e9ea8cc091fea51b5bb5163693774e3d129" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="f5b207a4907980ac46b1adfa34aafde3c0530382bf166dd3ce65710ec6449e17" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="41550457403a4ca130b34629c49862fea165f403e64f17e86b9850c534775089" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="a0fb3ab94ac5aec5c4e0e95a9701ce7d44d57f353b43bc1114796b2779d5fa0a" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="8535e1d552b2379b1330beed99adf3f698981855cd09998d9aac9e8da72570fd" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="9fa062f40eb69ed33434103c58d192a011a59927bc44ebc0bf05f76179a15269" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="0649ada04b2159cf30b7050e87283c2c309653097bd716a36c0ec2b7e282e460" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="30df6db2d553ad59c755c6cb8a5ca1aed4c647eb94d9029c3e01ac148bc611e9" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="3c034088a8995145b1f23b6b0a3edb6b5218f8d357a1447d2c840edc42fc6719" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="598af9d217c9040a2d5e64803af620fcb7c9e72a7caae79efd19b9071e2b90f7" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="25e59867efda5cd6a8943554823acea9fbc4662f3780c22d43e7980d39b079cc" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="f6c80d093ac8ca57a73ccbd51413e772ee004a0687589d0cd677701cf1265206" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="a715c735e5658ec87a75f1c69b8381491920b7990cab56d96b421f366e1b3104" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="7ed42e00c2e42cf76c15d9f329aebb9f323dff649510edd7c6d0533e66ae9706" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="8904d67e0e7036bee6dd2cb258ee503271459f781621eeeb4d5212e658072a32" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="a172e2b60e2d293af4e12fbce8677dd0aa80b42d0210f348554027dbcd612e67" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="b1428289db63da7eb3838adc412f607565ae2368058f00ccac4478cf99d4cf3c" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="1bb7b1760c935ab5d97492e70de798d2b03ad1fda481e9fff2bf320a93ee8221" name="cross-riscv64-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="6573bbf6ccdf9732fbf7e839e497949876f5678163367dd3cd62ea6d492b08b1" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="4fe27f6ea63b6f8b1b91daf2d3f5e9b34ba4a66b2b3c68a04d643404c70876a4" name="cross-riscv64-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="6ed6e4812915732c49a0c230e498e345adebdfe6ab605d1074f0c45c5f8163c1" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="cf8a445e8fdaea14b94146e327f5d5e6ca6e3ec13aa255926ff5b07f3caaeb4e" name="cross-riscv64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="341e71cd85d643a3924f6a19dd33702fa47269fdbdf8ca3117cabe1fb511c578" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="5b8ab9d2ecb829475687e0b2cc345513eee2163d4a81abc3e27181f1b703a61f" name="cross-rx-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="88487761df77feeefa77721a2291f021c6599b700e573619b7edc68f3da4c514" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="e492ae6cbfc0c3e3c8304a0197dff06ac79fea39864ace102d90216d1dbc6f55" name="cross-rx-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="b6ce2d1cd23c6f639d66a7ba2e9a0d1d57fcbf7c136c2ab257b79b5bf8bba60a" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="fd54b643c7cbc007f65741a6876ed775030c79b21da42a226c974dde50619bb8" name="cross-rx-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="cd17692f7b85b32caf6d7577b3c1476f1c41fa5dbfe01c938de42510bd8e2ea9" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="85f0401fcacd49269440b73abd5e1c7129253ba5f8953b31dbd37f376b61e772" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="c1ad9e406a1cd48892f8b9cc83670b9e6f52b20c5627f5c5a4cf07d383ee1460" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="8bd4dc92b613294f285c21840257aed7663bfd46f42ec3abb989a703da1d433f" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="b248fe53ead55ef8bbc02be7d141831c75e1fe33df14e613c93c0d7fc0f141e3" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="a8a691b492688db7d046e3b415a6a7f3fb2c8b5d39d6e3b8e68885bf163b691f" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="516417e2c696d0de3231fe395fad6e4dde1de9a043260e1aa05a61d636a4e57a" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="c77b372a7040d0d4913a9f585f54761b2a11c9dae1e73ba2321e13b1abe8cd62" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="82d00a7a4d8bfca3ef7f363fefdb110bf0893a40cb719164b20a1111f43bf8f1" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="62418b25a5277da89aa63a5238e2cb0a23e39e8fa880b5e990e09e450c11eede" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="e45d31e907a5fc0f04df9aff7d901da77c31941feb222741224c10edd82908cf" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="78f671fc8c3ac2bdfa10da0be35f34e47dfbc9aea413afb2df7655e52668d9a8" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="6c6abefc4030ad544205c5de32d62240b9054cf3089be9148badb6add7d597bd" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="75f251630759c2be514e1272f76d52212aff0c5417de09a584dde7487d51a39b" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="889fcb2ad6ad975870c71ddf96137cf99f25f1d350e2fa968b01c089d62808ef" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="66d8b6b954b8362e8fc1d9ffb618334117385fd6ad9ac7e5df28f12a689b700e" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="4da6306223c7c02e9c292cf222c2f0c98510e33b49963dff5eafa011129db73c" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="3371a8107a6ff6ef90ad714c8987593ed6e0e3927497b60892234957000ae27b" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="5dc01bf933106bbbe5fbff39a49a8e46e71c35eddca8d01732b62406717813fb" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="20e1fdc0666a73523490a323d139f4f6dc6b8ad66628ac0c9e1857d4ad3a0670" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="998936a1809cb8c2af39ccfcd04246b18d753e9e5ccca04781103817fe1ebfda" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="f949aac9763a57c0f0828c8e7f0d6efbb87a166f67431032afdb371647958ce0" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="9b5b326b9187125c71bbf3316ad27a9359cf2b4013ca35f1b65f7c1166b279f0" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="981ebe566e7478100fc27925c924d5a0afb03ab28a6c7913dfee92825e8a0bf1" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="f0643465426844afa7dc6dd5cc1b17f8d1f8ee3fc0379b5b48f3bbb71617fbb3" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="306ce5bb3e352f70f3f429e8a254cc5c7a024c9d2fde51a24cffda82630f8b85" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="9d81bf4acbedcdda5a3edea8ba5bb5bb042f1d02f506dd623c885c02362a0717" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="5baec5904755fe050dbaabee478727b1e65e9f90902ed0b90cdfec4feacfa0ef" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="0bb0f5ec495304fd874338eef84a802bc1890455511b4c63f8e4f0614974672e" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="304dbfc74c06f7ab64b3aaf23fb4374c9e2922f78aec7cc3449afa308e8687a3" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="69aec679066e30053028d28b78cdea5d72ca8336f4a311d2e930157eb831c5f3" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="79366e43a4c525a31a0ba9d1801d19a9fd2c9d109b3a86d962b2ad6d071ff194" name="cross-xtensa-binutils" arch="src">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="5e49ad2863080d6ac1570d8090bac9e29832c1ab2fc1700f03e03407fb6c225c" name="cross-xtensa-binutils" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="98d2f7e391720b5ac959d5996c8b2b830f4f8c6bd25db1d9be95c03b416402a2" name="cross-xtensa-binutils" arch="src">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="235449397d362c0e170d02c501663981070b02ea01bd3b1259c70d52f00ae974" name="cross-xtensa-binutils" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="99a61154d4cfdf9e07c591e7ee7530f3527ec23b4cf96c280894dc3c40cef0a4" name="cross-xtensa-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="816756e0637b3074d47b24068965a7c5186089aef2697c778c0238f214969de0" name="cross-xtensa-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="lp152.4.9.1"/>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
</package>
<package pkgid="526c749c2de0ddb3a114605aec410f6a5ee2b3465ab6fd2ba05904b54d79c8fc" name="cryptctl" arch="src">
  <version epoch="0" ver="2.4" rel="lp152.5.3.1"/>
  <changelog author="hguo@suse.com" date="1465387200">- First version, only to help with building ISOs.
  Implement fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1467374400">- A preview version with most of the desired functions implemented:
  * Key database
  * Key RPC server
  * Client encryption and decryption routines
  Bump version to 1.1
  fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1468238400">- Implement mandatory features:
  * List and edit key records
  * Unlock file system via key record file
  * Use custom options to mount unlocked file system
  Enhance usability:
  * Make encryption procedure's pre-check more thorough
  * Improve overall command prompts
- Bump version to 1.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470052800">- Implement mandatory features:
  * Encrypt empty directory skips backup steps.
  * Explain key revocation and TLS mechanisms in manual page.
- Bump version to 1.2.1 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Upon request, generate a self-signed TLS certificate for
  experimental purposes.
- Bump version to 1.2.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1471521600">- Implement mandatory enhancements:
  * Remove necessity for a backup directory to be involved for
    encryption routine.
  * Optimise certificate generation prompts.
  * Remove unused error messages and fix several of their typos.
  * Remove unnecessary safety checks.
  * Make the encryption routine work with btrfs and LVM.
- Bump version to 1.2.3 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1472817600">- Implement mandatory enhancements:
  * Make workflow across all sub-commands consistent in invocation
    style.
  * Implement auto-unlocking of encrypted disks.
  * Show key record usage and details on demand.
- Bump version to 1.2.4 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1474027200">- Implement mandatory enhancements:
  * Do not allow encrypting a remote file system.
  * Implement command for erasing an encrypted file system.
- Bump version to 1.2.5 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1479297600">- Upgrade to 1.2.6 for accumulated bug fixes (bsc#1006219):
  * Prevent user from attempting to encrypt a disk with mounted
    partitions, or an existing encrypted+opened disk.
  * Ensure CA path input is an absolute path.
  * Fix two mistakes in handling of timeout input.
  * Fix minor formatting issue in manual page.
  * Suppress consecutive failure messages in the journal of
    ReportAlive and AutoOnlineUnlockFS routines.</changelog>
  <changelog author="hguo@suse.com" date="1493380800">- Upgrade to 1.99pre that introduces a library for decoding, encoding,
  and serialisation operations of KMIP v1.3 for fate#322979.</changelog>
  <changelog author="hguo@suse.com" date="1494504000">- Upgrade to upstream release 2.0 that brings a protocol evolution
  together with several new features:
  * Optionally utilise an external KMIP-v1.3 compatible service to
    store actual encryption key.
  * Optionally verify client identity before serving its key requests.
  * Password is hashed before transmitting over TLS-secured channel.
  * Fix an issue that previously allowed a malicious administrator
    to craft RPC request to overwrite files outside of key database.
  Implemented accordint to fate#322979 and fate#322293.</changelog>
  <changelog author="hguo@suse.com" date="1496318400">- Upgrade to upstream release 2.1 that brings important enhancements
  in effort of implementing fate#322979:
  * Improve KMIP compatibility with key prefix names and proper
    serialisation of authentication header.
  * Fail over KMIP connection using a server list.
  * Destroy key on KMIP after its tracking record is erased from DB.</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Upgrade to upstream release 2.2 that brings important enhancements
  in effort of implementing fate#322979:
  * System administrator may now optionally turn off TLS certificate
    verification on KMIP server. Note that, certificate verification
    is enforced by default.
  * Improve handling of boolean answers from interactive command line.
  * Improve error handling in KMIP client.</changelog>
  <changelog author="hguo@suse.com" date="1503921600">- Upgrade to upstream release 2.3 that brings a new feature to allow
  system administrators to issue mount/umount commands to client
  computers via key server. (bsc#1056082)</changelog>
  <changelog author="hguo@suse.com" date="1508760000">- Add previously missing systemd service cryptctl-client.service
  into RPM content, continue with bsc#1056082.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1623412800">- Update to version 2.4:
  * (bsc#1186226) - (CVE-2019-18906) client side password hashing is equivalent to clear text password storage
  * Fix authentication on all places.
  * Fix sysconfig variable name.
  * First step to use plain text password instead of hashed password.
  * Move repository into the SUSE github organization
  * decorate readme with more usage instructions
  * in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address
  * Test clear expired commands in TestDB_UpdateSeenFlag
  * tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case
  * avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server.</changelog>
</package>
<package pkgid="7c085ea489e5b925788dbf95f72ad041b0145cad12b7ca27c8cbea148e13f6d0" name="cryptctl" arch="x86_64">
  <version epoch="0" ver="2.4" rel="lp152.5.3.1"/>
  <changelog author="hguo@suse.com" date="1465387200">- First version, only to help with building ISOs.
  Implement fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1467374400">- A preview version with most of the desired functions implemented:
  * Key database
  * Key RPC server
  * Client encryption and decryption routines
  Bump version to 1.1
  fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1468238400">- Implement mandatory features:
  * List and edit key records
  * Unlock file system via key record file
  * Use custom options to mount unlocked file system
  Enhance usability:
  * Make encryption procedure's pre-check more thorough
  * Improve overall command prompts
- Bump version to 1.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470052800">- Implement mandatory features:
  * Encrypt empty directory skips backup steps.
  * Explain key revocation and TLS mechanisms in manual page.
- Bump version to 1.2.1 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Upon request, generate a self-signed TLS certificate for
  experimental purposes.
- Bump version to 1.2.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1471521600">- Implement mandatory enhancements:
  * Remove necessity for a backup directory to be involved for
    encryption routine.
  * Optimise certificate generation prompts.
  * Remove unused error messages and fix several of their typos.
  * Remove unnecessary safety checks.
  * Make the encryption routine work with btrfs and LVM.
- Bump version to 1.2.3 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1472817600">- Implement mandatory enhancements:
  * Make workflow across all sub-commands consistent in invocation
    style.
  * Implement auto-unlocking of encrypted disks.
  * Show key record usage and details on demand.
- Bump version to 1.2.4 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1474027200">- Implement mandatory enhancements:
  * Do not allow encrypting a remote file system.
  * Implement command for erasing an encrypted file system.
- Bump version to 1.2.5 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1479297600">- Upgrade to 1.2.6 for accumulated bug fixes (bsc#1006219):
  * Prevent user from attempting to encrypt a disk with mounted
    partitions, or an existing encrypted+opened disk.
  * Ensure CA path input is an absolute path.
  * Fix two mistakes in handling of timeout input.
  * Fix minor formatting issue in manual page.
  * Suppress consecutive failure messages in the journal of
    ReportAlive and AutoOnlineUnlockFS routines.</changelog>
  <changelog author="hguo@suse.com" date="1493380800">- Upgrade to 1.99pre that introduces a library for decoding, encoding,
  and serialisation operations of KMIP v1.3 for fate#322979.</changelog>
  <changelog author="hguo@suse.com" date="1494504000">- Upgrade to upstream release 2.0 that brings a protocol evolution
  together with several new features:
  * Optionally utilise an external KMIP-v1.3 compatible service to
    store actual encryption key.
  * Optionally verify client identity before serving its key requests.
  * Password is hashed before transmitting over TLS-secured channel.
  * Fix an issue that previously allowed a malicious administrator
    to craft RPC request to overwrite files outside of key database.
  Implemented accordint to fate#322979 and fate#322293.</changelog>
  <changelog author="hguo@suse.com" date="1496318400">- Upgrade to upstream release 2.1 that brings important enhancements
  in effort of implementing fate#322979:
  * Improve KMIP compatibility with key prefix names and proper
    serialisation of authentication header.
  * Fail over KMIP connection using a server list.
  * Destroy key on KMIP after its tracking record is erased from DB.</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Upgrade to upstream release 2.2 that brings important enhancements
  in effort of implementing fate#322979:
  * System administrator may now optionally turn off TLS certificate
    verification on KMIP server. Note that, certificate verification
    is enforced by default.
  * Improve handling of boolean answers from interactive command line.
  * Improve error handling in KMIP client.</changelog>
  <changelog author="hguo@suse.com" date="1503921600">- Upgrade to upstream release 2.3 that brings a new feature to allow
  system administrators to issue mount/umount commands to client
  computers via key server. (bsc#1056082)</changelog>
  <changelog author="hguo@suse.com" date="1508760000">- Add previously missing systemd service cryptctl-client.service
  into RPM content, continue with bsc#1056082.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1623412800">- Update to version 2.4:
  * (bsc#1186226) - (CVE-2019-18906) client side password hashing is equivalent to clear text password storage
  * Fix authentication on all places.
  * Fix sysconfig variable name.
  * First step to use plain text password instead of hashed password.
  * Move repository into the SUSE github organization
  * decorate readme with more usage instructions
  * in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address
  * Test clear expired commands in TestDB_UpdateSeenFlag
  * tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case
  * avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server.</changelog>
</package>
<package pkgid="ce4d7a27cca4a7418851fe8ba252b5ee48c20f1db8f122e6ad3025741caa6e77" name="cryptsetup" arch="i586">
  <version epoch="0" ver="2.0.6" rel="lp152.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1427976000">- Update to 1.6.7
  * Cryptsetup TCRYPT mode now supports VeraCrypt devices
    (TrueCrypt extension)
  * Support keyfile-offset and keyfile-size options even for plain
    volumes.
  * Support keyfile option for luksAddKey if the master key is
    specified.
  * For historic reasons, hashing in the plain mode is not used if
    keyfile is specified (with exception of --key-file=-). Print
    a warning if these parameters are ignored.
  * Support permanent device decryption for cryptsetup-reencrypt.
    To remove LUKS encryption from a device, you can now use
  - -decrypt option.
  * Allow to use --header option in all LUKS commands. The
  - -header always takes precedence over positional device argument.
  * Allow luksSuspend without need to specify a detached header.
  * Detect if O_DIRECT is usable on a device allocation. There are
    some strange storage stack configurations which wrongly allows
    to open devices with direct-io but fails on all IO operations later.
  * Add low-level performance options tuning for dmcrypt (for
    Linux 4.0 and later).
  * Get rid of libfipscheck library.
    (Note that this option was used only for Red Hat and derived
    distributions.) With recent FIPS changes we do not need to
    link to this FIPS monster anymore. Also drop some no longer
    needed FIPS mode checks.
  * Many fixes and clarifications to man pages.
  * Prevent compiler to optimize-out zeroing of buffers for on-stack
    variables.
  * Fix a crash if non-GNU strerror_r is used.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840000">- regenerate the initrd if cryptsetup tool changes
  (wanted by 90crypt dracut module)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840001">- Enable verbose build log.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441713600">- Update to 1.6.8
  * If the null cipher (no encryption) is used, allow only empty
    password for LUKS. (Previously cryptsetup accepted any password
    in this case.)
    The null cipher can be used only for testing and it is used
    temporarily during offline encrypting not yet encrypted device
    (cryptsetup-reencrypt tool).
    Accepting only empty password prevents situation when someone
    adds another LUKS device using the same UUID (UUID of existing
    LUKS device) with faked header containing null cipher.
    This could force user to use different LUKS device (with no
    encryption) without noticing.
    (IOW it prevents situation when attacker intentionally forces
    user to boot into different system just by LUKS header
    manipulation.)
    Properly configured systems should have an additional integrity
    protection in place here (LUKS here provides only
    confidentiality) but it is better to not allow this situation
    in the first place.
    (For more info see QubesOS Security Bulletin QSB-019-2015.)
  * Properly support stdin "-" handling for luksAddKey for both new
    and old keyfile parameters.
  * If encrypted device is file-backed (it uses underlying loop
    device), cryptsetup resize will try to resize underlying loop
    device as well. (It can be used to grow up file-backed device
    in one step.)
  * Cryptsetup now allows to use empty password through stdin pipe.
    (Intended only for testing in scripts.)</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1452340800">- update to 1.7.0:
  * The cryptsetup 1.7 release changes defaults for LUKS,
    there are no API changes.
  * Default hash function is now SHA256 (used in key derivation
    function and anti-forensic splitter).
  * Default iteration time for PBKDF2 is now 2 seconds.
  * Fix PBKDF2 iteration benchmark for longer key sizes.
  * Remove experimental warning for reencrypt tool.
  * Add optional libpasswdqc support for new LUKS passwords.
  * Update FAQ document.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1472126400">- Update to version 1.7.2:
  * Update LUKS documentation format.
    Clarify fixed sector size and keyslots alignment.
  * Support activation options for error handling modes in
    Linux kernel dm-verity module:
  - -ignore-corruption - dm-verity just logs detected corruption
  - -restart-on-corruption - dm-verity restarts the kernel if
    corruption is detected
    If the options above are not specified, default behavior for
    dm-verity remains. Default is that I/O operation fails with
    I/O error if corrupted block is detected.
  - -ignore-zero-blocks - Instructs dm-verity to not verify
    blocks that are expected to contain zeroes and always
    return zeroes directly instead.
    NOTE that these options could have security or functional
    impacts, do not use them without assessing the risks!
  * Fix help text for cipher benchmark specification
    (mention --cipher option).
  * Fix off-by-one error in maximum keyfile size.
    Allow keyfiles up to compiled-in default and not that value
    minus one.
  * Support resume of interrupted decryption in cryptsetup-reencrypt
    utility. To resume decryption, LUKS device UUID (--uuid option)
    option must be used.
  * Do not use direct-io for LUKS header with unaligned keyslots.
    Such headers were used only by the first cryptsetup-luks-1.0.0
    release (2005).
  * Fix device block size detection to properly work on particular
    file-based containers over underlying devices with 4k sectors.
- Update to version 1.7.1:
  * Code now uses kernel crypto API backend according to new
    changes introduced in mainline kernel
    While mainline kernel should contain backward compatible
    changes, some stable series kernels do not contain fully
    backported compatibility patches.
    Without these patches  most of cryptsetup operations
    (like unlocking device) fail.
    This change in cryptsetup ensures that all operations using
    kernel crypto API works even on these kernels.
  * The cryptsetup-reencrypt utility now properly detects removal
    of underlying link to block device and does not remove
    ongoing re-encryption log.
    This allows proper recovery (resume) of reencrypt operation later.
    NOTE: Never use /dev/disk/by-uuid/ path for reencryption utility,
    this link disappears once the device metadata is temporarily
    removed from device.
  * Cryptsetup now allows special "-" (standard input) keyfile handling
    even for TCRYPT (TrueCrypt and VeraCrypt compatible) devices.
  * Cryptsetup now fails if there are more keyfiles specified
    for non-TCRYPT device.
  * The luksKillSlot command now does not suppress provided password
    in batch mode (if password is wrong slot is not destroyed).
    Note that not providing password in batch mode means that keyslot
    is destroyed unconditionally.</changelog>
  <changelog author="mpluskal@suse.com" date="1489752000">- Update to version 1.7.4:
  * Allow to specify LUKS1 hash algorithm in Python luksFormat
    wrapper.
  * Use LUKS1 compiled-in defaults also in Python wrapper.
  * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward
    compatible API.
  * OpenSSL backend: Fix LibreSSL compatibility.
  * Check for data device and hash device area overlap in
    veritysetup.
  * Fix a possible race while allocating a free loop device.
  * Fix possible file descriptor leaks if libcryptsetup is run from
    a forked process.
  * Fix missing same_cpu_crypt flag in status command.
  * Various updates to FAQ and man pages.
- Changes for version 1.7.3:
  * Fix device access to hash offsets located beyond the 2GB device
    boundary in veritysetup.
  * Set configured (compile-time) default iteration time for
    devices created directly through libcryptsetup
  * Fix PBKDF2 benchmark to not double iteration count for specific
    corner case.
  * Verify passphrase in cryptsetup-reencrypt when encrypting a new
    drive.
  * OpenSSL backend: fix memory leak if hash context was repeatedly
    reused.
  * OpenSSL backend: add support for OpenSSL 1.1.0.
  * Fix several minor spelling errors.
  * Properly check maximal buffer size when parsing UUID from
    /dev/disk/.</changelog>
  <changelog author="mpluskal@suse.com" date="1493467200">- Update to version 1.7.5:
  * Fixes to luksFormat to properly support recent kernel running
    in FIPS mode (bsc#1031998).
  * Fixes accesses to unaligned hidden legacy TrueCrypt header.
  * Fixes to optional dracut ramdisk scripts for offline
    re-encryption on initial boot.</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1513944000">- Update to version 2.0.0:
  * Add support for new on-disk LUKS2 format
  * Enable to use system libargon2 instead of bundled version
  * Install tmpfiles.d configuration for LUKS2 locking directory
  * New command integritysetup: support for the new dm-integrity kernel target
  * Support for larger sector sizes for crypt devices
  * Miscellaneous fixes and improvements</changelog>
  <changelog author="astieger@suse.com" date="1517313600">- update to 2.0.1:
  * To store volume key into kernel keyring, kernel 4.15 with
    dm-crypt 1.18.1 is required
  * Increase maximum allowed PBKDF memory-cost limit to 4 GiB
  * Use /run/cryptsetup as default for cryptsetup locking dir
  * Introduce new 64-bit byte-offset *keyfile_device_offset functions.
  * New set of fucntions that allows 64-bit offsets even on 32bit systems
    are now availeble:
  - crypt_resume_by_keyfile_device_offset
  - crypt_keyslot_add_by_keyfile_device_offset
  - crypt_activate_by_keyfile_device_offset
  - crypt_keyfile_device_read
    The new functions have added the _device_ in name.
    Old functions are just internal wrappers around these.
  * Also cryptsetup --keyfile-offset and --new-keyfile-offset now
    allows 64-bit offsets as parameters.
  * Add error hint for wrongly formatted cipher strings in LUKS1 and
    properly fail in luksFormat if cipher format is missing required IV.</changelog>
  <changelog author="lnussel@suse.de" date="1534852800">- New version 2.0.4
  Changes since version 2.0.3
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Use the libblkid (blockid) library to detect foreign signatures
    on a device before LUKS format and LUKS2 auto-recovery.
    This change fixes an unexpected recovery using the secondary
    LUKS2 header after a device was already overwritten with
    another format (filesystem or LVM physical volume).
    LUKS2 will not recreate a primary header if it detects a valid
    foreign signature. In this situation, a user must always
    use cryptsetup repair command for the recovery.
    Note that libcryptsetup and utilities are now linked to libblkid
    as a new dependence.
    To compile code without blockid support (strongly discouraged),
    use --disable-blkid configure switch.
  * Add prompt for format and repair actions in cryptsetup and
    integritysetup if foreign signatures are detected on the device
    through the blockid library.
    After the confirmation, all known signatures are then wiped as
    part of the format or repair procedure.
  * Print consistent verbose message about keyslot and token numbers.
    For keyslot actions: Key slot &lt;number&gt; unlocked/created/removed.
    For token actions: Token &lt;number&gt; created/removed.
  * Print error, if a non-existent token is tried to be removed.
  * Add support for LUKS2 token definition export and import.
    The token command now can export/import customized token JSON file
    directly from command line. See the man page for more details.
  * Add support for new dm-integrity superblock version 2.
  * Add an error message when nothing was read from a key file.
  * Update cryptsetup man pages, including --type option usage.
  * Add a snapshot of LUKS2 format specification to documentation
    and accordingly fix supported secondary header offsets.
  * Add bundled optimized Argon2 SSE (X86_64 platform) code.
    If the bundled Argon2 code is used and the new configure switch
  - -enable-internal-sse-argon2 option is present, and compiler flags
    support required optimization, the code will try to use optimized
    and faster variant.
    Always use the shared library (--enable-libargon2) if possible.
    This option was added because an enterprise distribution
    rejected to support the shared Argon2 library and native support
    in generic cryptographic libraries is not ready yet.
  * Fix compilation with crypto backend for LibreSSL &gt;= 2.7.0.
    LibreSSL introduced OpenSSL 1.1.x API functions, so compatibility
    wrapper must be commented out.
  * Fix on-disk header size calculation for LUKS2 format if a specific
    data alignment is requested. Until now, the code used default size
    that could be wrong for converted devices.
  Changes since version 2.0.2
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Expose interface to unbound LUKS2 keyslots.
    Unbound LUKS2 keyslot allows storing a key material that is independent
    of master volume key (it is not bound to encrypted data segment).
  * New API extensions for unbound keyslots (LUKS2 only)
    crypt_keyslot_get_key_size() and crypt_volume_key_get()
    These functions allow to get key and key size for unbound keyslots.
  * New enum value CRYPT_SLOT_UNBOUND for keyslot status (LUKS2 only).
  * Add --unbound keyslot option to the cryptsetup luksAddKey command.
  * Add crypt_get_active_integrity_failures() call to get integrity
    failure count for dm-integrity devices.
  * Add crypt_get_pbkdf_default() function to get per-type PBKDF default
    setting.
  * Add new flag to crypt_keyslot_add_by_key() to force update device
    volume key. This call is mainly intended for a wrapped key change.
  * Allow volume key store in a file with cryptsetup.
    The --dump-master-key together with --master-key-file allows cryptsetup
    to store the binary volume key to a file instead of standard output.
  * Add support detached header for cryptsetup-reencrypt command.
  * Fix VeraCrypt PIM handling - use proper iterations count formula
    for PBKDF2-SHA512 and PBKDF2-Whirlpool used in system volumes.
  * Fix cryptsetup tcryptDump for VeraCrypt PIM (support --veracrypt-pim).
  * Add --with-default-luks-format configure time option.
    (Option to override default LUKS format version.)
  * Fix LUKS version conversion for detached (and trimmed) LUKS headers.
  * Add luksConvertKey cryptsetup command that converts specific keyslot
    from one PBKDF to another.
  * Do not allow conversion to LUKS2 if LUKSMETA (external tool metadata)
    header is detected.
  * More cleanup and hardening of LUKS2 keyslot specific validation options.
    Add more checks for cipher validity before writing metadata on-disk.
  * Do not allow LUKS1 version downconversion if the header contains tokens.
  * Add "paes" family ciphers (AES wrapped key scheme for mainframes)
    to allowed ciphers.
    Specific wrapped ley configuration logic must be done by 3rd party tool,
    LUKS2 stores only keyslot material and allow activation of the device.
  * Add support for --check-at-most-once option (kernel 4.17) to veritysetup.
    This flag can be dangerous; if you can control underlying device
    (you can change its content after it was verified) it will no longer
    prevent reading tampered data and also it does not prevent silent
    data corruptions that appear after the block was once read.
  * Fix return code (EPERM instead of EINVAL) and retry count for bad
    passphrase on non-tty input.
  * Enable support for FEC decoding in veritysetup to check dm-verity devices
    with additional Reed-Solomon code in userspace (verify command).
  Changes since version 2.0.1
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix a regression in early detection of inactive keyslot for luksKillSlot.
    It tried to ask for passphrase even for already erased keyslot.
  * Fix a regression in loopaesOpen processing for keyfile on standard input.
    Use of "-" argument was not working properly.
  * Add LUKS2 specific options for cryptsetup-reencrypt.
    Tokens and persistent flags are now transferred during reencryption;
    change of PBKDF keyslot parameters is now supported and allows
    to set precalculated values (no benchmarks).
  * Do not allow LUKS2 --persistent and --test-passphrase cryptsetup flags
    combination. Persistent flags are now stored only if the device was
    successfully activated with the specified flags.
  * Fix integritysetup format after recent Linux kernel changes that
    requires to setup key for HMAC in all cases.
    Previously integritysetup allowed HMAC with zero key that behaves
    like a plain hash.
  * Fix VeraCrypt PIM handling that modified internal iteration counts
    even for subsequent activations. The PIM count is no longer printed
    in debug log as it is sensitive information.
    Also, the code now skips legacy TrueCrypt algorithms if a PIM
    is specified (they cannot be used with PIM anyway).
  * PBKDF values cannot be set (even with force parameters) below
    hardcoded minimums. For PBKDF2 is it 1000 iterations, for Argon2
    it is 4 iterations and 32 KiB of memory cost.
  * Introduce new crypt_token_is_assigned() API function for reporting
    the binding between token and keyslots.
  * Allow crypt_token_json_set() API function to create internal token types.
    Do not allow unknown fields in internal token objects.
  * Print message in cryptsetup that about was aborted if a user did not
    answer YES in a query.</changelog>
  <changelog author="lnussel@suse.de" date="1540900800">- make parallell installable version for SLE12</changelog>
  <changelog author="lnussel@suse.de" date="1540900801">- Suggest hmac package (boo#1090768)
- remove old upgrade hack for upgrades from 12.1
- New version 2.0.5
  Changes since version 2.0.4
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Wipe full header areas (including unused) during LUKS format.
    Since this version, the whole area up to the data offset is zeroed,
    and subsequently, all keyslots areas are wiped with random data.
    This ensures that no remaining old data remains in the LUKS header
    areas, but it could slow down format operation on some devices.
    Previously only first 4k (or 32k for LUKS2) and the used keyslot
    was overwritten in the format operation.
  * Several fixes to error messages that were unintentionally replaced
    in previous versions with a silent exit code.
    More descriptive error messages were added, including error
    messages if
  - a device is unusable (not a block device, no access, etc.),
  - a LUKS device is not detected,
  - LUKS header load code detects unsupported version,
  - a keyslot decryption fails (also happens in the cipher check),
  - converting an inactive keyslot.
  * Device activation fails if data area overlaps with LUKS header.
  * Code now uses explicit_bzero to wipe memory if available
    (instead of own implementation).
  * Additional VeraCrypt modes are now supported, including Camellia
    and Kuznyechik symmetric ciphers (and cipher chains) and Streebog
    hash function. These were introduced in a recent VeraCrypt upstream.
    Note that Kuznyechik requires out-of-tree kernel module and
    Streebog hash function is available only with the gcrypt cryptographic
    backend for now.
  * Fixes static build for integritysetup if the pwquality library is used.
  * Allows passphrase change for unbound keyslots.
  * Fixes removed keyslot number in verbose message for luksKillSlot,
    luksRemoveKey and erase command.
  * Adds blkid scan when attempting to open a plain device and warn the user
    about existing device signatures in a ciphertext device.
  * Remove LUKS header signature if luksFormat fails to add the first keyslot.
  * Remove O_SYNC from device open and use fsync() to speed up
    wipe operation considerably.
  * Create --master-key-file in luksDump and fail if the file already exists.
  * Fixes a bug when LUKS2 authenticated encryption with a detached header
    wiped the header device instead of dm-integrity data device area (causing
    unnecessary LUKS2 header auto recovery).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1575028800">- New version 2.0.6 (jsc#SLE-5911, bsc#1165580):
  Changes since version 2.0.5
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix support of larger metadata areas in LUKS2 header.
    This release properly supports all specified metadata areas, as documented
    in LUKS2 format description (see docs/on-disk-format-luks2.pdf in archive).
    Currently, only default metadata area size is used (in format or convert).
    Later cryptsetup versions will allow increasing this metadata area size.
  * If AEAD (authenticated encryption) is used, cryptsetup now tries to check
    if the requested AEAD algorithm with specified key size is available
    in kernel crypto API.
    This change avoids formatting a device that cannot be later activated.
    For this function, the kernel must be compiled with the
    CONFIG_CRYPTO_USER_API_AEAD option enabled.
    Note that kernel user crypto API options (CONFIG_CRYPTO_USER_API and
    CONFIG_CRYPTO_USER_API_SKCIPHER) are already mandatory for LUKS2.
  * Fix setting of integrity no-journal flag.
    Now you can store this flag to metadata using --persistent option.
  * Fix cryptsetup-reencrypt to not keep temporary reencryption headers
    if interrupted during initial password prompt.
  * Adds early check to plain and LUKS2 formats to disallow device format
    if device size is not aligned to requested sector size.
    Previously it was possible, and the device was rejected to activate by
    kernel later.
  * Fix checking of hash algorithms availability for PBKDF early.
    Previously LUKS2 format allowed non-existent hash algorithm with
    invalid keyslot preventing the device from activation.
  * Allow Adiantum cipher construction (a non-authenticated length-preserving
    fast encryption scheme), so it can be used both for data encryption and
    keyslot encryption in LUKS1/2 devices.
    For benchmark, use:
    [#] cryptsetup benchmark -c xchacha12,aes-adiantum
    [#] cryptsetup benchmark -c xchacha20,aes-adiantum
    For LUKS format:
    [#] cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 &lt;device&gt;
    The support for Adiantum will be merged in Linux kernel 4.21.
    For more info see the paper https://eprint.iacr.org/2018/720.</changelog>
</package>
<package pkgid="d127ca2b818f707d4853750d65323ea7cee5a3fc40e98ae29493572f06bb664e" name="cryptsetup" arch="src">
  <version epoch="0" ver="2.0.6" rel="lp152.4.3.1"/>
  <changelog author="meissner@suse.com" date="1401192000">- version 1.6.4
  - new tarball / signature location
  * Implement new erase (with alias luksErase) command.
  * Add internal "whirlpool_gcryptbug hash" for accessing flawed
    Whirlpool hash in gcrypt (requires gcrypt 1.6.1 or above).
  * Allow to use --disable-gcrypt-pbkdf2 during configuration
    to force use internal PBKDF2 code.
  * Require gcrypt 1.6.1 for imported implementation of PBKDF2
    (PBKDF2 in gcrypt 1.6.0 is too slow).
  * Add --keep-key to cryptsetup-reencrypt.
  * By default verify new passphrase in luksChangeKey and luksAddKey
    commands (if input is from terminal).
  * Fix memory leak in Nettle crypto backend.
  * Support --tries option even for TCRYPT devices in cryptsetup.
  * Support --allow-discards option even for TCRYPT devices.
    (Note that this could destroy hidden volume and it is not suggested
    by original TrueCrypt security model.)
  * Link against -lrt for clock_gettime to fix undefined reference
    to clock_gettime error (introduced in 1.6.2).
  * Fix misleading error message when some algorithms are not available.
  * Count system time in PBKDF2 benchmark if kernel returns no self
    usage info.</changelog>
  <changelog author="meissner@suse.com" date="1407758400">- libcryptsetup4-hmac split off contain the hmac for FIPS certification</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407844800">- version 1.6.5
  * Allow LUKS header operation handling without requiring root privilege.
    It means that you can manipulate with keyslots as a regular user, only
    write access to device (or image) is required.
  * Fix internal PBKDF2 key derivation function implementation for alternative
    crypto backends (kernel, NSS) which do not support PBKDF2 directly and have
    issues with longer HMAC keys.
  * Support for Python3 for simple Python binding.
    Python &gt;= 2.6 is now required. You can set Python compiled version by setting
  - -with-python_version configure option (together with --enable-python).
  * Use internal PBKDF2 in Nettle library for Nettle crypto backend.
    Cryptsetup compilation requires Nettle &gt;= 2.6 (if using Nettle crypto backend).
  * Allow simple status of crypt device without providing metadata header.
    The command "cryptsetup status" will print basic info, even if you
    do not provide detached header argument.
  * Allow to specify ECB mode in cryptsetup benchmark.
  * Add some LUKS images for regression testing.
    Note that if image with Whirlpool fails, the most probable cause is that
    you have old gcrypt library with flawed whirlpool hash.
    Read FAQ section 8.3 for more info.
- Removed e2fsprogs-devel and libtool build requirements (not needed).
- Added libpwquality-devel and libuuid-devel build requirements.</changelog>
  <changelog author="meissner@suse.com" date="1408708800">- Use --enable-gcrypt-pbkdf2 to use the PBKDFv2 method from libgcrypt.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1410696000">- version 1.6.6
  * LUKS: Fix keyslot device access for devices which
    do not support direct IO operations. (Regression in 1.6.5.)
  * LUKS: Fallback to old temporary keyslot device mapping method
    if hash (for ESSIV) is not supported by userspace crypto
    library. (Regression in 1.6.5.)
  * Properly activate device with discard (TRIM for SSDs)
    if requested even if dm_crypt module is not yet loaded.
    Only if discard is not supported by the old kernel then
    the discard option is ignored.
  * Fix some static analysis build warnings (scan-build).
  * Report crypto lib version only once (and always add kernel
    version) in debug output.</changelog>
  <changelog author="mpluskal@suse.com" date="1427976000">- Update to 1.6.7
  * Cryptsetup TCRYPT mode now supports VeraCrypt devices
    (TrueCrypt extension)
  * Support keyfile-offset and keyfile-size options even for plain
    volumes.
  * Support keyfile option for luksAddKey if the master key is
    specified.
  * For historic reasons, hashing in the plain mode is not used if
    keyfile is specified (with exception of --key-file=-). Print
    a warning if these parameters are ignored.
  * Support permanent device decryption for cryptsetup-reencrypt.
    To remove LUKS encryption from a device, you can now use
  - -decrypt option.
  * Allow to use --header option in all LUKS commands. The
  - -header always takes precedence over positional device argument.
  * Allow luksSuspend without need to specify a detached header.
  * Detect if O_DIRECT is usable on a device allocation. There are
    some strange storage stack configurations which wrongly allows
    to open devices with direct-io but fails on all IO operations later.
  * Add low-level performance options tuning for dmcrypt (for
    Linux 4.0 and later).
  * Get rid of libfipscheck library.
    (Note that this option was used only for Red Hat and derived
    distributions.) With recent FIPS changes we do not need to
    link to this FIPS monster anymore. Also drop some no longer
    needed FIPS mode checks.
  * Many fixes and clarifications to man pages.
  * Prevent compiler to optimize-out zeroing of buffers for on-stack
    variables.
  * Fix a crash if non-GNU strerror_r is used.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840000">- regenerate the initrd if cryptsetup tool changes
  (wanted by 90crypt dracut module)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840001">- Enable verbose build log.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441713600">- Update to 1.6.8
  * If the null cipher (no encryption) is used, allow only empty
    password for LUKS. (Previously cryptsetup accepted any password
    in this case.)
    The null cipher can be used only for testing and it is used
    temporarily during offline encrypting not yet encrypted device
    (cryptsetup-reencrypt tool).
    Accepting only empty password prevents situation when someone
    adds another LUKS device using the same UUID (UUID of existing
    LUKS device) with faked header containing null cipher.
    This could force user to use different LUKS device (with no
    encryption) without noticing.
    (IOW it prevents situation when attacker intentionally forces
    user to boot into different system just by LUKS header
    manipulation.)
    Properly configured systems should have an additional integrity
    protection in place here (LUKS here provides only
    confidentiality) but it is better to not allow this situation
    in the first place.
    (For more info see QubesOS Security Bulletin QSB-019-2015.)
  * Properly support stdin "-" handling for luksAddKey for both new
    and old keyfile parameters.
  * If encrypted device is file-backed (it uses underlying loop
    device), cryptsetup resize will try to resize underlying loop
    device as well. (It can be used to grow up file-backed device
    in one step.)
  * Cryptsetup now allows to use empty password through stdin pipe.
    (Intended only for testing in scripts.)</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1452340800">- update to 1.7.0:
  * The cryptsetup 1.7 release changes defaults for LUKS,
    there are no API changes.
  * Default hash function is now SHA256 (used in key derivation
    function and anti-forensic splitter).
  * Default iteration time for PBKDF2 is now 2 seconds.
  * Fix PBKDF2 iteration benchmark for longer key sizes.
  * Remove experimental warning for reencrypt tool.
  * Add optional libpasswdqc support for new LUKS passwords.
  * Update FAQ document.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1472126400">- Update to version 1.7.2:
  * Update LUKS documentation format.
    Clarify fixed sector size and keyslots alignment.
  * Support activation options for error handling modes in
    Linux kernel dm-verity module:
  - -ignore-corruption - dm-verity just logs detected corruption
  - -restart-on-corruption - dm-verity restarts the kernel if
    corruption is detected
    If the options above are not specified, default behavior for
    dm-verity remains. Default is that I/O operation fails with
    I/O error if corrupted block is detected.
  - -ignore-zero-blocks - Instructs dm-verity to not verify
    blocks that are expected to contain zeroes and always
    return zeroes directly instead.
    NOTE that these options could have security or functional
    impacts, do not use them without assessing the risks!
  * Fix help text for cipher benchmark specification
    (mention --cipher option).
  * Fix off-by-one error in maximum keyfile size.
    Allow keyfiles up to compiled-in default and not that value
    minus one.
  * Support resume of interrupted decryption in cryptsetup-reencrypt
    utility. To resume decryption, LUKS device UUID (--uuid option)
    option must be used.
  * Do not use direct-io for LUKS header with unaligned keyslots.
    Such headers were used only by the first cryptsetup-luks-1.0.0
    release (2005).
  * Fix device block size detection to properly work on particular
    file-based containers over underlying devices with 4k sectors.
- Update to version 1.7.1:
  * Code now uses kernel crypto API backend according to new
    changes introduced in mainline kernel
    While mainline kernel should contain backward compatible
    changes, some stable series kernels do not contain fully
    backported compatibility patches.
    Without these patches  most of cryptsetup operations
    (like unlocking device) fail.
    This change in cryptsetup ensures that all operations using
    kernel crypto API works even on these kernels.
  * The cryptsetup-reencrypt utility now properly detects removal
    of underlying link to block device and does not remove
    ongoing re-encryption log.
    This allows proper recovery (resume) of reencrypt operation later.
    NOTE: Never use /dev/disk/by-uuid/ path for reencryption utility,
    this link disappears once the device metadata is temporarily
    removed from device.
  * Cryptsetup now allows special "-" (standard input) keyfile handling
    even for TCRYPT (TrueCrypt and VeraCrypt compatible) devices.
  * Cryptsetup now fails if there are more keyfiles specified
    for non-TCRYPT device.
  * The luksKillSlot command now does not suppress provided password
    in batch mode (if password is wrong slot is not destroyed).
    Note that not providing password in batch mode means that keyslot
    is destroyed unconditionally.</changelog>
  <changelog author="mpluskal@suse.com" date="1489752000">- Update to version 1.7.4:
  * Allow to specify LUKS1 hash algorithm in Python luksFormat
    wrapper.
  * Use LUKS1 compiled-in defaults also in Python wrapper.
  * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward
    compatible API.
  * OpenSSL backend: Fix LibreSSL compatibility.
  * Check for data device and hash device area overlap in
    veritysetup.
  * Fix a possible race while allocating a free loop device.
  * Fix possible file descriptor leaks if libcryptsetup is run from
    a forked process.
  * Fix missing same_cpu_crypt flag in status command.
  * Various updates to FAQ and man pages.
- Changes for version 1.7.3:
  * Fix device access to hash offsets located beyond the 2GB device
    boundary in veritysetup.
  * Set configured (compile-time) default iteration time for
    devices created directly through libcryptsetup
  * Fix PBKDF2 benchmark to not double iteration count for specific
    corner case.
  * Verify passphrase in cryptsetup-reencrypt when encrypting a new
    drive.
  * OpenSSL backend: fix memory leak if hash context was repeatedly
    reused.
  * OpenSSL backend: add support for OpenSSL 1.1.0.
  * Fix several minor spelling errors.
  * Properly check maximal buffer size when parsing UUID from
    /dev/disk/.</changelog>
  <changelog author="mpluskal@suse.com" date="1493467200">- Update to version 1.7.5:
  * Fixes to luksFormat to properly support recent kernel running
    in FIPS mode (bsc#1031998).
  * Fixes accesses to unaligned hidden legacy TrueCrypt header.
  * Fixes to optional dracut ramdisk scripts for offline
    re-encryption on initial boot.</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1513944000">- Update to version 2.0.0:
  * Add support for new on-disk LUKS2 format
  * Enable to use system libargon2 instead of bundled version
  * Install tmpfiles.d configuration for LUKS2 locking directory
  * New command integritysetup: support for the new dm-integrity kernel target
  * Support for larger sector sizes for crypt devices
  * Miscellaneous fixes and improvements</changelog>
  <changelog author="astieger@suse.com" date="1517313600">- update to 2.0.1:
  * To store volume key into kernel keyring, kernel 4.15 with
    dm-crypt 1.18.1 is required
  * Increase maximum allowed PBKDF memory-cost limit to 4 GiB
  * Use /run/cryptsetup as default for cryptsetup locking dir
  * Introduce new 64-bit byte-offset *keyfile_device_offset functions.
  * New set of fucntions that allows 64-bit offsets even on 32bit systems
    are now availeble:
  - crypt_resume_by_keyfile_device_offset
  - crypt_keyslot_add_by_keyfile_device_offset
  - crypt_activate_by_keyfile_device_offset
  - crypt_keyfile_device_read
    The new functions have added the _device_ in name.
    Old functions are just internal wrappers around these.
  * Also cryptsetup --keyfile-offset and --new-keyfile-offset now
    allows 64-bit offsets as parameters.
  * Add error hint for wrongly formatted cipher strings in LUKS1 and
    properly fail in luksFormat if cipher format is missing required IV.</changelog>
  <changelog author="lnussel@suse.de" date="1534852800">- New version 2.0.4
  Changes since version 2.0.3
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Use the libblkid (blockid) library to detect foreign signatures
    on a device before LUKS format and LUKS2 auto-recovery.
    This change fixes an unexpected recovery using the secondary
    LUKS2 header after a device was already overwritten with
    another format (filesystem or LVM physical volume).
    LUKS2 will not recreate a primary header if it detects a valid
    foreign signature. In this situation, a user must always
    use cryptsetup repair command for the recovery.
    Note that libcryptsetup and utilities are now linked to libblkid
    as a new dependence.
    To compile code without blockid support (strongly discouraged),
    use --disable-blkid configure switch.
  * Add prompt for format and repair actions in cryptsetup and
    integritysetup if foreign signatures are detected on the device
    through the blockid library.
    After the confirmation, all known signatures are then wiped as
    part of the format or repair procedure.
  * Print consistent verbose message about keyslot and token numbers.
    For keyslot actions: Key slot &lt;number&gt; unlocked/created/removed.
    For token actions: Token &lt;number&gt; created/removed.
  * Print error, if a non-existent token is tried to be removed.
  * Add support for LUKS2 token definition export and import.
    The token command now can export/import customized token JSON file
    directly from command line. See the man page for more details.
  * Add support for new dm-integrity superblock version 2.
  * Add an error message when nothing was read from a key file.
  * Update cryptsetup man pages, including --type option usage.
  * Add a snapshot of LUKS2 format specification to documentation
    and accordingly fix supported secondary header offsets.
  * Add bundled optimized Argon2 SSE (X86_64 platform) code.
    If the bundled Argon2 code is used and the new configure switch
  - -enable-internal-sse-argon2 option is present, and compiler flags
    support required optimization, the code will try to use optimized
    and faster variant.
    Always use the shared library (--enable-libargon2) if possible.
    This option was added because an enterprise distribution
    rejected to support the shared Argon2 library and native support
    in generic cryptographic libraries is not ready yet.
  * Fix compilation with crypto backend for LibreSSL &gt;= 2.7.0.
    LibreSSL introduced OpenSSL 1.1.x API functions, so compatibility
    wrapper must be commented out.
  * Fix on-disk header size calculation for LUKS2 format if a specific
    data alignment is requested. Until now, the code used default size
    that could be wrong for converted devices.
  Changes since version 2.0.2
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Expose interface to unbound LUKS2 keyslots.
    Unbound LUKS2 keyslot allows storing a key material that is independent
    of master volume key (it is not bound to encrypted data segment).
  * New API extensions for unbound keyslots (LUKS2 only)
    crypt_keyslot_get_key_size() and crypt_volume_key_get()
    These functions allow to get key and key size for unbound keyslots.
  * New enum value CRYPT_SLOT_UNBOUND for keyslot status (LUKS2 only).
  * Add --unbound keyslot option to the cryptsetup luksAddKey command.
  * Add crypt_get_active_integrity_failures() call to get integrity
    failure count for dm-integrity devices.
  * Add crypt_get_pbkdf_default() function to get per-type PBKDF default
    setting.
  * Add new flag to crypt_keyslot_add_by_key() to force update device
    volume key. This call is mainly intended for a wrapped key change.
  * Allow volume key store in a file with cryptsetup.
    The --dump-master-key together with --master-key-file allows cryptsetup
    to store the binary volume key to a file instead of standard output.
  * Add support detached header for cryptsetup-reencrypt command.
  * Fix VeraCrypt PIM handling - use proper iterations count formula
    for PBKDF2-SHA512 and PBKDF2-Whirlpool used in system volumes.
  * Fix cryptsetup tcryptDump for VeraCrypt PIM (support --veracrypt-pim).
  * Add --with-default-luks-format configure time option.
    (Option to override default LUKS format version.)
  * Fix LUKS version conversion for detached (and trimmed) LUKS headers.
  * Add luksConvertKey cryptsetup command that converts specific keyslot
    from one PBKDF to another.
  * Do not allow conversion to LUKS2 if LUKSMETA (external tool metadata)
    header is detected.
  * More cleanup and hardening of LUKS2 keyslot specific validation options.
    Add more checks for cipher validity before writing metadata on-disk.
  * Do not allow LUKS1 version downconversion if the header contains tokens.
  * Add "paes" family ciphers (AES wrapped key scheme for mainframes)
    to allowed ciphers.
    Specific wrapped ley configuration logic must be done by 3rd party tool,
    LUKS2 stores only keyslot material and allow activation of the device.
  * Add support for --check-at-most-once option (kernel 4.17) to veritysetup.
    This flag can be dangerous; if you can control underlying device
    (you can change its content after it was verified) it will no longer
    prevent reading tampered data and also it does not prevent silent
    data corruptions that appear after the block was once read.
  * Fix return code (EPERM instead of EINVAL) and retry count for bad
    passphrase on non-tty input.
  * Enable support for FEC decoding in veritysetup to check dm-verity devices
    with additional Reed-Solomon code in userspace (verify command).
  Changes since version 2.0.1
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix a regression in early detection of inactive keyslot for luksKillSlot.
    It tried to ask for passphrase even for already erased keyslot.
  * Fix a regression in loopaesOpen processing for keyfile on standard input.
    Use of "-" argument was not working properly.
  * Add LUKS2 specific options for cryptsetup-reencrypt.
    Tokens and persistent flags are now transferred during reencryption;
    change of PBKDF keyslot parameters is now supported and allows
    to set precalculated values (no benchmarks).
  * Do not allow LUKS2 --persistent and --test-passphrase cryptsetup flags
    combination. Persistent flags are now stored only if the device was
    successfully activated with the specified flags.
  * Fix integritysetup format after recent Linux kernel changes that
    requires to setup key for HMAC in all cases.
    Previously integritysetup allowed HMAC with zero key that behaves
    like a plain hash.
  * Fix VeraCrypt PIM handling that modified internal iteration counts
    even for subsequent activations. The PIM count is no longer printed
    in debug log as it is sensitive information.
    Also, the code now skips legacy TrueCrypt algorithms if a PIM
    is specified (they cannot be used with PIM anyway).
  * PBKDF values cannot be set (even with force parameters) below
    hardcoded minimums. For PBKDF2 is it 1000 iterations, for Argon2
    it is 4 iterations and 32 KiB of memory cost.
  * Introduce new crypt_token_is_assigned() API function for reporting
    the binding between token and keyslots.
  * Allow crypt_token_json_set() API function to create internal token types.
    Do not allow unknown fields in internal token objects.
  * Print message in cryptsetup that about was aborted if a user did not
    answer YES in a query.</changelog>
  <changelog author="lnussel@suse.de" date="1540900800">- make parallell installable version for SLE12</changelog>
  <changelog author="lnussel@suse.de" date="1540900801">- Suggest hmac package (boo#1090768)
- remove old upgrade hack for upgrades from 12.1
- New version 2.0.5
  Changes since version 2.0.4
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Wipe full header areas (including unused) during LUKS format.
    Since this version, the whole area up to the data offset is zeroed,
    and subsequently, all keyslots areas are wiped with random data.
    This ensures that no remaining old data remains in the LUKS header
    areas, but it could slow down format operation on some devices.
    Previously only first 4k (or 32k for LUKS2) and the used keyslot
    was overwritten in the format operation.
  * Several fixes to error messages that were unintentionally replaced
    in previous versions with a silent exit code.
    More descriptive error messages were added, including error
    messages if
  - a device is unusable (not a block device, no access, etc.),
  - a LUKS device is not detected,
  - LUKS header load code detects unsupported version,
  - a keyslot decryption fails (also happens in the cipher check),
  - converting an inactive keyslot.
  * Device activation fails if data area overlaps with LUKS header.
  * Code now uses explicit_bzero to wipe memory if available
    (instead of own implementation).
  * Additional VeraCrypt modes are now supported, including Camellia
    and Kuznyechik symmetric ciphers (and cipher chains) and Streebog
    hash function. These were introduced in a recent VeraCrypt upstream.
    Note that Kuznyechik requires out-of-tree kernel module and
    Streebog hash function is available only with the gcrypt cryptographic
    backend for now.
  * Fixes static build for integritysetup if the pwquality library is used.
  * Allows passphrase change for unbound keyslots.
  * Fixes removed keyslot number in verbose message for luksKillSlot,
    luksRemoveKey and erase command.
  * Adds blkid scan when attempting to open a plain device and warn the user
    about existing device signatures in a ciphertext device.
  * Remove LUKS header signature if luksFormat fails to add the first keyslot.
  * Remove O_SYNC from device open and use fsync() to speed up
    wipe operation considerably.
  * Create --master-key-file in luksDump and fail if the file already exists.
  * Fixes a bug when LUKS2 authenticated encryption with a detached header
    wiped the header device instead of dm-integrity data device area (causing
    unnecessary LUKS2 header auto recovery).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1575028800">- New version 2.0.6 (jsc#SLE-5911, bsc#1165580):
  Changes since version 2.0.5
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix support of larger metadata areas in LUKS2 header.
    This release properly supports all specified metadata areas, as documented
    in LUKS2 format description (see docs/on-disk-format-luks2.pdf in archive).
    Currently, only default metadata area size is used (in format or convert).
    Later cryptsetup versions will allow increasing this metadata area size.
  * If AEAD (authenticated encryption) is used, cryptsetup now tries to check
    if the requested AEAD algorithm with specified key size is available
    in kernel crypto API.
    This change avoids formatting a device that cannot be later activated.
    For this function, the kernel must be compiled with the
    CONFIG_CRYPTO_USER_API_AEAD option enabled.
    Note that kernel user crypto API options (CONFIG_CRYPTO_USER_API and
    CONFIG_CRYPTO_USER_API_SKCIPHER) are already mandatory for LUKS2.
  * Fix setting of integrity no-journal flag.
    Now you can store this flag to metadata using --persistent option.
  * Fix cryptsetup-reencrypt to not keep temporary reencryption headers
    if interrupted during initial password prompt.
  * Adds early check to plain and LUKS2 formats to disallow device format
    if device size is not aligned to requested sector size.
    Previously it was possible, and the device was rejected to activate by
    kernel later.
  * Fix checking of hash algorithms availability for PBKDF early.
    Previously LUKS2 format allowed non-existent hash algorithm with
    invalid keyslot preventing the device from activation.
  * Allow Adiantum cipher construction (a non-authenticated length-preserving
    fast encryption scheme), so it can be used both for data encryption and
    keyslot encryption in LUKS1/2 devices.
    For benchmark, use:
    [#] cryptsetup benchmark -c xchacha12,aes-adiantum
    [#] cryptsetup benchmark -c xchacha20,aes-adiantum
    For LUKS format:
    [#] cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 &lt;device&gt;
    The support for Adiantum will be merged in Linux kernel 4.21.
    For more info see the paper https://eprint.iacr.org/2018/720.</changelog>
</package>
<package pkgid="0bcdbc15e8c1e075dd22163b467d5eba7125cc2999ae82eeda94e77277b6f7d7" name="cryptsetup" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="lp152.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1427976000">- Update to 1.6.7
  * Cryptsetup TCRYPT mode now supports VeraCrypt devices
    (TrueCrypt extension)
  * Support keyfile-offset and keyfile-size options even for plain
    volumes.
  * Support keyfile option for luksAddKey if the master key is
    specified.
  * For historic reasons, hashing in the plain mode is not used if
    keyfile is specified (with exception of --key-file=-). Print
    a warning if these parameters are ignored.
  * Support permanent device decryption for cryptsetup-reencrypt.
    To remove LUKS encryption from a device, you can now use
  - -decrypt option.
  * Allow to use --header option in all LUKS commands. The
  - -header always takes precedence over positional device argument.
  * Allow luksSuspend without need to specify a detached header.
  * Detect if O_DIRECT is usable on a device allocation. There are
    some strange storage stack configurations which wrongly allows
    to open devices with direct-io but fails on all IO operations later.
  * Add low-level performance options tuning for dmcrypt (for
    Linux 4.0 and later).
  * Get rid of libfipscheck library.
    (Note that this option was used only for Red Hat and derived
    distributions.) With recent FIPS changes we do not need to
    link to this FIPS monster anymore. Also drop some no longer
    needed FIPS mode checks.
  * Many fixes and clarifications to man pages.
  * Prevent compiler to optimize-out zeroing of buffers for on-stack
    variables.
  * Fix a crash if non-GNU strerror_r is used.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840000">- regenerate the initrd if cryptsetup tool changes
  (wanted by 90crypt dracut module)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840001">- Enable verbose build log.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441713600">- Update to 1.6.8
  * If the null cipher (no encryption) is used, allow only empty
    password for LUKS. (Previously cryptsetup accepted any password
    in this case.)
    The null cipher can be used only for testing and it is used
    temporarily during offline encrypting not yet encrypted device
    (cryptsetup-reencrypt tool).
    Accepting only empty password prevents situation when someone
    adds another LUKS device using the same UUID (UUID of existing
    LUKS device) with faked header containing null cipher.
    This could force user to use different LUKS device (with no
    encryption) without noticing.
    (IOW it prevents situation when attacker intentionally forces
    user to boot into different system just by LUKS header
    manipulation.)
    Properly configured systems should have an additional integrity
    protection in place here (LUKS here provides only
    confidentiality) but it is better to not allow this situation
    in the first place.
    (For more info see QubesOS Security Bulletin QSB-019-2015.)
  * Properly support stdin "-" handling for luksAddKey for both new
    and old keyfile parameters.
  * If encrypted device is file-backed (it uses underlying loop
    device), cryptsetup resize will try to resize underlying loop
    device as well. (It can be used to grow up file-backed device
    in one step.)
  * Cryptsetup now allows to use empty password through stdin pipe.
    (Intended only for testing in scripts.)</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1452340800">- update to 1.7.0:
  * The cryptsetup 1.7 release changes defaults for LUKS,
    there are no API changes.
  * Default hash function is now SHA256 (used in key derivation
    function and anti-forensic splitter).
  * Default iteration time for PBKDF2 is now 2 seconds.
  * Fix PBKDF2 iteration benchmark for longer key sizes.
  * Remove experimental warning for reencrypt tool.
  * Add optional libpasswdqc support for new LUKS passwords.
  * Update FAQ document.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1472126400">- Update to version 1.7.2:
  * Update LUKS documentation format.
    Clarify fixed sector size and keyslots alignment.
  * Support activation options for error handling modes in
    Linux kernel dm-verity module:
  - -ignore-corruption - dm-verity just logs detected corruption
  - -restart-on-corruption - dm-verity restarts the kernel if
    corruption is detected
    If the options above are not specified, default behavior for
    dm-verity remains. Default is that I/O operation fails with
    I/O error if corrupted block is detected.
  - -ignore-zero-blocks - Instructs dm-verity to not verify
    blocks that are expected to contain zeroes and always
    return zeroes directly instead.
    NOTE that these options could have security or functional
    impacts, do not use them without assessing the risks!
  * Fix help text for cipher benchmark specification
    (mention --cipher option).
  * Fix off-by-one error in maximum keyfile size.
    Allow keyfiles up to compiled-in default and not that value
    minus one.
  * Support resume of interrupted decryption in cryptsetup-reencrypt
    utility. To resume decryption, LUKS device UUID (--uuid option)
    option must be used.
  * Do not use direct-io for LUKS header with unaligned keyslots.
    Such headers were used only by the first cryptsetup-luks-1.0.0
    release (2005).
  * Fix device block size detection to properly work on particular
    file-based containers over underlying devices with 4k sectors.
- Update to version 1.7.1:
  * Code now uses kernel crypto API backend according to new
    changes introduced in mainline kernel
    While mainline kernel should contain backward compatible
    changes, some stable series kernels do not contain fully
    backported compatibility patches.
    Without these patches  most of cryptsetup operations
    (like unlocking device) fail.
    This change in cryptsetup ensures that all operations using
    kernel crypto API works even on these kernels.
  * The cryptsetup-reencrypt utility now properly detects removal
    of underlying link to block device and does not remove
    ongoing re-encryption log.
    This allows proper recovery (resume) of reencrypt operation later.
    NOTE: Never use /dev/disk/by-uuid/ path for reencryption utility,
    this link disappears once the device metadata is temporarily
    removed from device.
  * Cryptsetup now allows special "-" (standard input) keyfile handling
    even for TCRYPT (TrueCrypt and VeraCrypt compatible) devices.
  * Cryptsetup now fails if there are more keyfiles specified
    for non-TCRYPT device.
  * The luksKillSlot command now does not suppress provided password
    in batch mode (if password is wrong slot is not destroyed).
    Note that not providing password in batch mode means that keyslot
    is destroyed unconditionally.</changelog>
  <changelog author="mpluskal@suse.com" date="1489752000">- Update to version 1.7.4:
  * Allow to specify LUKS1 hash algorithm in Python luksFormat
    wrapper.
  * Use LUKS1 compiled-in defaults also in Python wrapper.
  * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward
    compatible API.
  * OpenSSL backend: Fix LibreSSL compatibility.
  * Check for data device and hash device area overlap in
    veritysetup.
  * Fix a possible race while allocating a free loop device.
  * Fix possible file descriptor leaks if libcryptsetup is run from
    a forked process.
  * Fix missing same_cpu_crypt flag in status command.
  * Various updates to FAQ and man pages.
- Changes for version 1.7.3:
  * Fix device access to hash offsets located beyond the 2GB device
    boundary in veritysetup.
  * Set configured (compile-time) default iteration time for
    devices created directly through libcryptsetup
  * Fix PBKDF2 benchmark to not double iteration count for specific
    corner case.
  * Verify passphrase in cryptsetup-reencrypt when encrypting a new
    drive.
  * OpenSSL backend: fix memory leak if hash context was repeatedly
    reused.
  * OpenSSL backend: add support for OpenSSL 1.1.0.
  * Fix several minor spelling errors.
  * Properly check maximal buffer size when parsing UUID from
    /dev/disk/.</changelog>
  <changelog author="mpluskal@suse.com" date="1493467200">- Update to version 1.7.5:
  * Fixes to luksFormat to properly support recent kernel running
    in FIPS mode (bsc#1031998).
  * Fixes accesses to unaligned hidden legacy TrueCrypt header.
  * Fixes to optional dracut ramdisk scripts for offline
    re-encryption on initial boot.</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1513944000">- Update to version 2.0.0:
  * Add support for new on-disk LUKS2 format
  * Enable to use system libargon2 instead of bundled version
  * Install tmpfiles.d configuration for LUKS2 locking directory
  * New command integritysetup: support for the new dm-integrity kernel target
  * Support for larger sector sizes for crypt devices
  * Miscellaneous fixes and improvements</changelog>
  <changelog author="astieger@suse.com" date="1517313600">- update to 2.0.1:
  * To store volume key into kernel keyring, kernel 4.15 with
    dm-crypt 1.18.1 is required
  * Increase maximum allowed PBKDF memory-cost limit to 4 GiB
  * Use /run/cryptsetup as default for cryptsetup locking dir
  * Introduce new 64-bit byte-offset *keyfile_device_offset functions.
  * New set of fucntions that allows 64-bit offsets even on 32bit systems
    are now availeble:
  - crypt_resume_by_keyfile_device_offset
  - crypt_keyslot_add_by_keyfile_device_offset
  - crypt_activate_by_keyfile_device_offset
  - crypt_keyfile_device_read
    The new functions have added the _device_ in name.
    Old functions are just internal wrappers around these.
  * Also cryptsetup --keyfile-offset and --new-keyfile-offset now
    allows 64-bit offsets as parameters.
  * Add error hint for wrongly formatted cipher strings in LUKS1 and
    properly fail in luksFormat if cipher format is missing required IV.</changelog>
  <changelog author="lnussel@suse.de" date="1534852800">- New version 2.0.4
  Changes since version 2.0.3
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Use the libblkid (blockid) library to detect foreign signatures
    on a device before LUKS format and LUKS2 auto-recovery.
    This change fixes an unexpected recovery using the secondary
    LUKS2 header after a device was already overwritten with
    another format (filesystem or LVM physical volume).
    LUKS2 will not recreate a primary header if it detects a valid
    foreign signature. In this situation, a user must always
    use cryptsetup repair command for the recovery.
    Note that libcryptsetup and utilities are now linked to libblkid
    as a new dependence.
    To compile code without blockid support (strongly discouraged),
    use --disable-blkid configure switch.
  * Add prompt for format and repair actions in cryptsetup and
    integritysetup if foreign signatures are detected on the device
    through the blockid library.
    After the confirmation, all known signatures are then wiped as
    part of the format or repair procedure.
  * Print consistent verbose message about keyslot and token numbers.
    For keyslot actions: Key slot &lt;number&gt; unlocked/created/removed.
    For token actions: Token &lt;number&gt; created/removed.
  * Print error, if a non-existent token is tried to be removed.
  * Add support for LUKS2 token definition export and import.
    The token command now can export/import customized token JSON file
    directly from command line. See the man page for more details.
  * Add support for new dm-integrity superblock version 2.
  * Add an error message when nothing was read from a key file.
  * Update cryptsetup man pages, including --type option usage.
  * Add a snapshot of LUKS2 format specification to documentation
    and accordingly fix supported secondary header offsets.
  * Add bundled optimized Argon2 SSE (X86_64 platform) code.
    If the bundled Argon2 code is used and the new configure switch
  - -enable-internal-sse-argon2 option is present, and compiler flags
    support required optimization, the code will try to use optimized
    and faster variant.
    Always use the shared library (--enable-libargon2) if possible.
    This option was added because an enterprise distribution
    rejected to support the shared Argon2 library and native support
    in generic cryptographic libraries is not ready yet.
  * Fix compilation with crypto backend for LibreSSL &gt;= 2.7.0.
    LibreSSL introduced OpenSSL 1.1.x API functions, so compatibility
    wrapper must be commented out.
  * Fix on-disk header size calculation for LUKS2 format if a specific
    data alignment is requested. Until now, the code used default size
    that could be wrong for converted devices.
  Changes since version 2.0.2
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Expose interface to unbound LUKS2 keyslots.
    Unbound LUKS2 keyslot allows storing a key material that is independent
    of master volume key (it is not bound to encrypted data segment).
  * New API extensions for unbound keyslots (LUKS2 only)
    crypt_keyslot_get_key_size() and crypt_volume_key_get()
    These functions allow to get key and key size for unbound keyslots.
  * New enum value CRYPT_SLOT_UNBOUND for keyslot status (LUKS2 only).
  * Add --unbound keyslot option to the cryptsetup luksAddKey command.
  * Add crypt_get_active_integrity_failures() call to get integrity
    failure count for dm-integrity devices.
  * Add crypt_get_pbkdf_default() function to get per-type PBKDF default
    setting.
  * Add new flag to crypt_keyslot_add_by_key() to force update device
    volume key. This call is mainly intended for a wrapped key change.
  * Allow volume key store in a file with cryptsetup.
    The --dump-master-key together with --master-key-file allows cryptsetup
    to store the binary volume key to a file instead of standard output.
  * Add support detached header for cryptsetup-reencrypt command.
  * Fix VeraCrypt PIM handling - use proper iterations count formula
    for PBKDF2-SHA512 and PBKDF2-Whirlpool used in system volumes.
  * Fix cryptsetup tcryptDump for VeraCrypt PIM (support --veracrypt-pim).
  * Add --with-default-luks-format configure time option.
    (Option to override default LUKS format version.)
  * Fix LUKS version conversion for detached (and trimmed) LUKS headers.
  * Add luksConvertKey cryptsetup command that converts specific keyslot
    from one PBKDF to another.
  * Do not allow conversion to LUKS2 if LUKSMETA (external tool metadata)
    header is detected.
  * More cleanup and hardening of LUKS2 keyslot specific validation options.
    Add more checks for cipher validity before writing metadata on-disk.
  * Do not allow LUKS1 version downconversion if the header contains tokens.
  * Add "paes" family ciphers (AES wrapped key scheme for mainframes)
    to allowed ciphers.
    Specific wrapped ley configuration logic must be done by 3rd party tool,
    LUKS2 stores only keyslot material and allow activation of the device.
  * Add support for --check-at-most-once option (kernel 4.17) to veritysetup.
    This flag can be dangerous; if you can control underlying device
    (you can change its content after it was verified) it will no longer
    prevent reading tampered data and also it does not prevent silent
    data corruptions that appear after the block was once read.
  * Fix return code (EPERM instead of EINVAL) and retry count for bad
    passphrase on non-tty input.
  * Enable support for FEC decoding in veritysetup to check dm-verity devices
    with additional Reed-Solomon code in userspace (verify command).
  Changes since version 2.0.1
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix a regression in early detection of inactive keyslot for luksKillSlot.
    It tried to ask for passphrase even for already erased keyslot.
  * Fix a regression in loopaesOpen processing for keyfile on standard input.
    Use of "-" argument was not working properly.
  * Add LUKS2 specific options for cryptsetup-reencrypt.
    Tokens and persistent flags are now transferred during reencryption;
    change of PBKDF keyslot parameters is now supported and allows
    to set precalculated values (no benchmarks).
  * Do not allow LUKS2 --persistent and --test-passphrase cryptsetup flags
    combination. Persistent flags are now stored only if the device was
    successfully activated with the specified flags.
  * Fix integritysetup format after recent Linux kernel changes that
    requires to setup key for HMAC in all cases.
    Previously integritysetup allowed HMAC with zero key that behaves
    like a plain hash.
  * Fix VeraCrypt PIM handling that modified internal iteration counts
    even for subsequent activations. The PIM count is no longer printed
    in debug log as it is sensitive information.
    Also, the code now skips legacy TrueCrypt algorithms if a PIM
    is specified (they cannot be used with PIM anyway).
  * PBKDF values cannot be set (even with force parameters) below
    hardcoded minimums. For PBKDF2 is it 1000 iterations, for Argon2
    it is 4 iterations and 32 KiB of memory cost.
  * Introduce new crypt_token_is_assigned() API function for reporting
    the binding between token and keyslots.
  * Allow crypt_token_json_set() API function to create internal token types.
    Do not allow unknown fields in internal token objects.
  * Print message in cryptsetup that about was aborted if a user did not
    answer YES in a query.</changelog>
  <changelog author="lnussel@suse.de" date="1540900800">- make parallell installable version for SLE12</changelog>
  <changelog author="lnussel@suse.de" date="1540900801">- Suggest hmac package (boo#1090768)
- remove old upgrade hack for upgrades from 12.1
- New version 2.0.5
  Changes since version 2.0.4
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Wipe full header areas (including unused) during LUKS format.
    Since this version, the whole area up to the data offset is zeroed,
    and subsequently, all keyslots areas are wiped with random data.
    This ensures that no remaining old data remains in the LUKS header
    areas, but it could slow down format operation on some devices.
    Previously only first 4k (or 32k for LUKS2) and the used keyslot
    was overwritten in the format operation.
  * Several fixes to error messages that were unintentionally replaced
    in previous versions with a silent exit code.
    More descriptive error messages were added, including error
    messages if
  - a device is unusable (not a block device, no access, etc.),
  - a LUKS device is not detected,
  - LUKS header load code detects unsupported version,
  - a keyslot decryption fails (also happens in the cipher check),
  - converting an inactive keyslot.
  * Device activation fails if data area overlaps with LUKS header.
  * Code now uses explicit_bzero to wipe memory if available
    (instead of own implementation).
  * Additional VeraCrypt modes are now supported, including Camellia
    and Kuznyechik symmetric ciphers (and cipher chains) and Streebog
    hash function. These were introduced in a recent VeraCrypt upstream.
    Note that Kuznyechik requires out-of-tree kernel module and
    Streebog hash function is available only with the gcrypt cryptographic
    backend for now.
  * Fixes static build for integritysetup if the pwquality library is used.
  * Allows passphrase change for unbound keyslots.
  * Fixes removed keyslot number in verbose message for luksKillSlot,
    luksRemoveKey and erase command.
  * Adds blkid scan when attempting to open a plain device and warn the user
    about existing device signatures in a ciphertext device.
  * Remove LUKS header signature if luksFormat fails to add the first keyslot.
  * Remove O_SYNC from device open and use fsync() to speed up
    wipe operation considerably.
  * Create --master-key-file in luksDump and fail if the file already exists.
  * Fixes a bug when LUKS2 authenticated encryption with a detached header
    wiped the header device instead of dm-integrity data device area (causing
    unnecessary LUKS2 header auto recovery).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1575028800">- New version 2.0.6 (jsc#SLE-5911, bsc#1165580):
  Changes since version 2.0.5
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix support of larger metadata areas in LUKS2 header.
    This release properly supports all specified metadata areas, as documented
    in LUKS2 format description (see docs/on-disk-format-luks2.pdf in archive).
    Currently, only default metadata area size is used (in format or convert).
    Later cryptsetup versions will allow increasing this metadata area size.
  * If AEAD (authenticated encryption) is used, cryptsetup now tries to check
    if the requested AEAD algorithm with specified key size is available
    in kernel crypto API.
    This change avoids formatting a device that cannot be later activated.
    For this function, the kernel must be compiled with the
    CONFIG_CRYPTO_USER_API_AEAD option enabled.
    Note that kernel user crypto API options (CONFIG_CRYPTO_USER_API and
    CONFIG_CRYPTO_USER_API_SKCIPHER) are already mandatory for LUKS2.
  * Fix setting of integrity no-journal flag.
    Now you can store this flag to metadata using --persistent option.
  * Fix cryptsetup-reencrypt to not keep temporary reencryption headers
    if interrupted during initial password prompt.
  * Adds early check to plain and LUKS2 formats to disallow device format
    if device size is not aligned to requested sector size.
    Previously it was possible, and the device was rejected to activate by
    kernel later.
  * Fix checking of hash algorithms availability for PBKDF early.
    Previously LUKS2 format allowed non-existent hash algorithm with
    invalid keyslot preventing the device from activation.
  * Allow Adiantum cipher construction (a non-authenticated length-preserving
    fast encryption scheme), so it can be used both for data encryption and
    keyslot encryption in LUKS1/2 devices.
    For benchmark, use:
    [#] cryptsetup benchmark -c xchacha12,aes-adiantum
    [#] cryptsetup benchmark -c xchacha20,aes-adiantum
    For LUKS format:
    [#] cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 &lt;device&gt;
    The support for Adiantum will be merged in Linux kernel 4.21.
    For more info see the paper https://eprint.iacr.org/2018/720.</changelog>
</package>
<package pkgid="ad81ddbe82892459573b87b535163f57fda9bab01fc3d6e3a92e30e35b741ad0" name="csync2" arch="src">
  <version epoch="0" ver="2.0+git.1461714863.10636a4" rel="lp152.5.3.1"/>
  <changelog author="jshi@novell.com" date="1259928000">- Init import of csync2 for DRBD configuration file sync (fate#307419)</changelog>
  <changelog author="ro@suse.de" date="1260792000">- fix build against current openssl</changelog>
  <changelog author="tserong@novell.com" date="1275998400">- Fix build against gnutls 2.8 in factory (integrated patch from
  http://bugs.gentoo.org/show_bug.cgi?id=274213)</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tserong@suse.com" date="1316520000">- Add csync2-rm-ssl-cert helper script (bnc#709811)</changelog>
  <changelog author="tserong@suse.com" date="1319630400">- Remove explicit lib dependencies from spec file</changelog>
  <changelog author="coolo@suse.com" date="1329739200">- factory has librsync split into devel package</changelog>
  <changelog author="tserong@suse.com" date="1332158400">- Force debug output off completely when running under xinetd (fixes
  protocol breakage when target directories don't exist; bnc#752563)</changelog>
  <changelog author="tserong@suse.com" date="1338811200">- Drop requirement on libgnutls-extra-devel (unnecessary on openSUSE)</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="tserong@suse.com" date="1368187200">- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch</changelog>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1574251200">- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1617796800">- VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
  (bsc#1147137)
- VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
  (bsc#1147139)
  Apply upstream patch:
  0001-fail-HELLO-command-when-SSL-is-required.patch
  0002-repeat-gnutls_handshake-call-in-case-of-warnings.patch</changelog>
</package>
<package pkgid="d2d5114cec8a686e4dfe97435bf531cb778b21a213b719e34f92bc36282dcdf4" name="csync2" arch="x86_64">
  <version epoch="0" ver="2.0+git.1461714863.10636a4" rel="lp152.5.3.1"/>
  <changelog author="tserong@suse.com" date="1368187200">- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch</changelog>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1574251200">- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1617796800">- VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
  (bsc#1147137)
- VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
  (bsc#1147139)
  Apply upstream patch:
  0001-fail-HELLO-command-when-SSL-is-required.patch
  0002-repeat-gnutls_handshake-call-in-case-of-warnings.patch</changelog>
</package>
<package pkgid="a07b6a0f0aecb30ae8da066e71837ab6cf7d8f730e81a9c8c3993f9ceecb8dd0" name="csync2" arch="src">
  <version epoch="0" ver="2.0+git.1461714863.10636a4" rel="lp152.5.6.1"/>
  <changelog author="ro@suse.de" date="1260792000">- fix build against current openssl</changelog>
  <changelog author="tserong@novell.com" date="1275998400">- Fix build against gnutls 2.8 in factory (integrated patch from
  http://bugs.gentoo.org/show_bug.cgi?id=274213)</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tserong@suse.com" date="1316520000">- Add csync2-rm-ssl-cert helper script (bnc#709811)</changelog>
  <changelog author="tserong@suse.com" date="1319630400">- Remove explicit lib dependencies from spec file</changelog>
  <changelog author="coolo@suse.com" date="1329739200">- factory has librsync split into devel package</changelog>
  <changelog author="tserong@suse.com" date="1332158400">- Force debug output off completely when running under xinetd (fixes
  protocol breakage when target directories don't exist; bnc#752563)</changelog>
  <changelog author="tserong@suse.com" date="1338811200">- Drop requirement on libgnutls-extra-devel (unnecessary on openSUSE)</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="tserong@suse.com" date="1368187200">- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch</changelog>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1574251200">- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1617796800">- VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
  (bsc#1147137)
- VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
  (bsc#1147139)
  Apply upstream patch:
  0001-fail-HELLO-command-when-SSL-is-required.patch
  0002-repeat-gnutls_handshake-call-in-case-of-warnings.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623240000">- (bsc#1187080) Upgrade and removal of csync2 package throws error
  for non-existent service template:
  Removeinstance templates from %service_* macros.</changelog>
</package>
<package pkgid="32ac6feccbfa89135a81a7ef7650264f8db662961b93f28cb6e82558e13ac04b" name="csync2" arch="x86_64">
  <version epoch="0" ver="2.0+git.1461714863.10636a4" rel="lp152.5.6.1"/>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1574251200">- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1617796800">- VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
  (bsc#1147137)
- VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
  (bsc#1147139)
  Apply upstream patch:
  0001-fail-HELLO-command-when-SSL-is-required.patch
  0002-repeat-gnutls_handshake-call-in-case-of-warnings.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623240000">- (bsc#1187080) Upgrade and removal of csync2 package throws error
  for non-existent service template:
  Removeinstance templates from %service_* macros.</changelog>
</package>
<package pkgid="34d9906de72985349e6acc36ea37c61c6ae73c8d3ef7f053cfad944f772d17cb" name="ctdb" arch="i586">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.3.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="8fdcb2adfc4a7e49a26be4099fd614b1561727982e0ff79d860447bf520f8356" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.3.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="a627960729fef6a3a37d54bb6374c1875cff6380c1f43cdc0f30067bf3957842" name="ctdb" arch="i586">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.6.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="69d6fbb6be58d247596e7ff1c1933f116caa0089e50bf75873e39ab5fc00311e" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.6.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="6525d1b99510639cd42ceaa01caa04f52565d239c40a5cace706299af5684a23" name="ctdb" arch="i586">
  <version epoch="0" ver="4.11.11+git.182.fe3646e9391" rel="lp152.3.10.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="a336ae878ff45f80b066ee71150348b09a330fc96edcf6cd88733ee1f5890fab" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.182.fe3646e9391" rel="lp152.3.10.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="ec2a4c57ffb9dc488a8f2e77bd7e07df072536b2df438f8b8bfde560f1d0d147" name="ctdb" arch="i586">
  <version epoch="0" ver="4.11.13+git.189.e9bd318cd13" rel="lp152.3.13.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
</package>
<package pkgid="8715b666b45dbe7cd88405ad9402a1c45b78c4c3cb29a9c97a007f61c6f7caca" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.11.13+git.189.e9bd318cd13" rel="lp152.3.13.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
</package>
<package pkgid="08ef24f05f41bb1728a80ce2498d4f4923d96a15e191fe7908e765396254f3a3" name="ctdb" arch="i586">
  <version epoch="0" ver="4.11.14+git.202.344b137b75d" rel="lp152.3.16.1"/>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
</package>
<package pkgid="878cdcf2c3df026d6b5f7378b97d6c4935030626b281ff535920b489952b091c" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.202.344b137b75d" rel="lp152.3.16.1"/>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
</package>
<package pkgid="ca1bb06ff22e72f12ab4c612696ccfc2018b91dcfd12a581e46660a2a8589a66" name="ctdb" arch="i586">
  <version epoch="0" ver="4.11.14+git.247.8c858f7ee14" rel="lp152.3.19.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608000">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
</package>
<package pkgid="70324f20c6ad9671aa008f08f1fe2c2b0bc0076a32e344bb3cd3f1997907067f" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.247.8c858f7ee14" rel="lp152.3.19.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608000">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
</package>
<package pkgid="22dfb63bc981f428dbb1f1444a0a1c8f3cdd108e8bd9faf393155fcedff05222" name="ctdb" arch="i586">
  <version epoch="0" ver="4.11.14+git.260.32282693e40" rel="lp152.3.22.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
</package>
<package pkgid="bb132af3b99bc577be4f651a620d3bdbb4dc8a0917927c3b0e469e658879f1aa" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.260.32282693e40" rel="lp152.3.22.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
</package>
<package pkgid="e998692849f59119650fa49c7faffc668d54b5c82d22688b4e81b7ba00d043cc" name="ctdb" arch="i586">
  <version epoch="0" ver="4.11.14+git.263.a1d04a0b95e" rel="lp152.3.25.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
</package>
<package pkgid="52563d1ce2cb521f1ab0f9e78bad90766023993d97525a3c8d683a0ac262961a" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.263.a1d04a0b95e" rel="lp152.3.25.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
</package>
<package pkgid="529b185cc47b2a1972cafd7a3d25b6fb22834b4cbd57f1e76a648926579ada3d" name="ctdb" arch="i586">
  <version epoch="0" ver="4.11.14+git.308.666c63d4eea" rel="lp152.3.28.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1635854400">- CVE-2016-2124: SMB1 client connections can be downgraded to
  plaintext authentication (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);
- CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability;
  (bsc#1192214); (bso#14875);</changelog>
</package>
<package pkgid="471022e888e3f1116775c0a4193f1a693386e4fc029fb30ddd37172654fe6dd4" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.308.666c63d4eea" rel="lp152.3.28.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1635854400">- CVE-2016-2124: SMB1 client connections can be downgraded to
  plaintext authentication (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);
- CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability;
  (bsc#1192214); (bso#14875);</changelog>
</package>
<package pkgid="94c42627fa39301fee4dad6b3cbd3038cff9c1c8df9e5ef5a5cd7700325d5e22" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.3.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="022bf2c24943d9d8230c7f2f285dda639cacc71496bd5757000830d4fa3bbb49" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.3.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="126ffef5e6123c7949a0d17e03b66733c698fe350332d333244a2a23b2ba1003" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.6.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="65e2bcad6d6408d87daf01ed89925c1d6f9fdb1340fc2cc3d9df524ece72d6b4" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.6.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="3de2803edaf804100b78447f21045e3a1cfd6c2baf5678df3fc1c820a7f9adc5" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.11.11+git.182.fe3646e9391" rel="lp152.3.10.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="cbe53c460f29afd5a5a405c1a86a3923b2c37e0da94253466d72115dc6d23c48" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.182.fe3646e9391" rel="lp152.3.10.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="37819d9161e73b19f7f1ef7c46733915e50385c719a941d40451c876f84524ea" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.11.13+git.189.e9bd318cd13" rel="lp152.3.13.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
</package>
<package pkgid="e043483c25dec5bf025d4ab09d38fcfa80bff3be38de74e29655e43be326b2bb" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.11.13+git.189.e9bd318cd13" rel="lp152.3.13.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
</package>
<package pkgid="1a223d89897e17c108fd98dec7af106412223753c210a96f4f764d94f87f4bf7" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.11.14+git.202.344b137b75d" rel="lp152.3.16.1"/>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
</package>
<package pkgid="4e5d2db5aa7f038b081e85a9b8f497a1ff163aed1231da44ca8dbb4a2a26e2f8" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.202.344b137b75d" rel="lp152.3.16.1"/>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
</package>
<package pkgid="b112e5f1f5bf1a47bea68ff2cfec835c4289d82c639744f175270bad34d75560" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.11.14+git.247.8c858f7ee14" rel="lp152.3.19.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608000">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
</package>
<package pkgid="2594e5fb0c83d6f62308d4c72bb1d27622dc30c0909038c74cddbb5cc059eb9c" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.247.8c858f7ee14" rel="lp152.3.19.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608000">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
</package>
<package pkgid="45ccf56162bbe6a71dc322f35887f3ac192c8121e2363cd0ebf7b5db664ee020" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.11.14+git.260.32282693e40" rel="lp152.3.22.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
</package>
<package pkgid="050f243d02e4ae045d32e735bc5cafa84c061cb62fde4d4834c0afe50b956dab" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.260.32282693e40" rel="lp152.3.22.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
</package>
<package pkgid="fb3671a5d32169d59142c51e306984c51bc48c4839a215b9ec9a14521cf933d7" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.11.14+git.263.a1d04a0b95e" rel="lp152.3.25.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
</package>
<package pkgid="a53f78b526925d4f26d29c4cc790776e79273c6743eba8d81fd793257080fed7" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.263.a1d04a0b95e" rel="lp152.3.25.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
</package>
<package pkgid="1825b3ccc2635167ed688cf9f1a2f45deab2f06004a9f1de2ddfee35ee501eb5" name="ctdb-pcp-pmda" arch="i586">
  <version epoch="0" ver="4.11.14+git.308.666c63d4eea" rel="lp152.3.28.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1635854400">- CVE-2016-2124: SMB1 client connections can be downgraded to
  plaintext authentication (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);
- CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability;
  (bsc#1192214); (bso#14875);</changelog>
</package>
<package pkgid="8cb204a04f04ed3311ce6af70b7b41252f2b254e847a4e3246a356c0a9b3a46b" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.308.666c63d4eea" rel="lp152.3.28.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1635854400">- CVE-2016-2124: SMB1 client connections can be downgraded to
  plaintext authentication (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);
- CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability;
  (bsc#1192214); (bso#14875);</changelog>
</package>
<package pkgid="cd2e1c22638ec8146003261761c5a553debb70d9b7ffc5fa1008e6f173b94dd1" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.3.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="ff3b7f2399442aeb0c3cd57e37295b46a004e248b2f8d55e446e24c413681f75" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.3.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="30104670e59480c3fa32ebdc25d8edabcbf40c148e3be31a9309815dce3c2e59" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.6.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="ffe35f9c9f2e3b197e2e3c799f78af655249236a7fc0831c81be30d9d1804ca0" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.6.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="3996a1124a7fb92303ae89c4ea67610f737a82153beeb77d6be921747e3ecf8d" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.11.11+git.182.fe3646e9391" rel="lp152.3.10.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="07fa0f18974ddb8b7fdc4235c930039e3865352c016f818e499bd00c6ecfc235" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.182.fe3646e9391" rel="lp152.3.10.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="fa82fe3611216a97396ca2d4486b90a4813875917f380ad32281ecbf21162fb9" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.11.13+git.189.e9bd318cd13" rel="lp152.3.13.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
</package>
<package pkgid="b5f6434c34f472d6973885335923e742641c95591e44859c88bb3e6709121723" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.11.13+git.189.e9bd318cd13" rel="lp152.3.13.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
</package>
<package pkgid="34b8ba9236e4596ee1d9cad386af604111c031d9c982e9cb9d23ac87e9cb4004" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.11.14+git.202.344b137b75d" rel="lp152.3.16.1"/>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
</package>
<package pkgid="834f6fb377f521d466732857f4d4a332b0224cce3507510a28f7d48a3b153a60" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.202.344b137b75d" rel="lp152.3.16.1"/>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
</package>
<package pkgid="4a37d9b86025b40b23d98833457ce4dbf2ee6d385e67bec57c3f8a119e3c9900" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.11.14+git.247.8c858f7ee14" rel="lp152.3.19.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608000">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
</package>
<package pkgid="1aca1284a09b54144c220f38a0b1e85b747d45d6c29722169dd8c45a6fa2563d" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.247.8c858f7ee14" rel="lp152.3.19.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608000">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
</package>
<package pkgid="d0622aad7fd509724bde6c562b808ea34e1d0d9d75780c1ddf48f6fd3b291b88" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.11.14+git.260.32282693e40" rel="lp152.3.22.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
</package>
<package pkgid="89e6317468d090933b80c5fcff69e0fd5c30a366b0fe6a32197910139225a6fb" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.260.32282693e40" rel="lp152.3.22.1"/>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
</package>
<package pkgid="b0046cd484a57defbd4252417fc61f4984e5381a6f6ac5094fcd9c4de2dadba8" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.11.14+git.263.a1d04a0b95e" rel="lp152.3.25.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
</package>
<package pkgid="7c26d75035c43bfaf33d8004a4ca249a88f743eaabf67edea4f347a7694b5f77" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.263.a1d04a0b95e" rel="lp152.3.25.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
</package>
<package pkgid="0f55698e8b03aa9d2d5ee1510ae23360afd141267276f23728e7b7a8444a9263" name="ctdb-tests" arch="i586">
  <version epoch="0" ver="4.11.14+git.308.666c63d4eea" rel="lp152.3.28.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1635854400">- CVE-2016-2124: SMB1 client connections can be downgraded to
  plaintext authentication (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);
- CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability;
  (bsc#1192214); (bso#14875);</changelog>
</package>
<package pkgid="d58876023fdd560af1181b0e10c12959d9e4234e397f5634da32035e0d05846a" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.308.666c63d4eea" rel="lp152.3.28.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1635854400">- CVE-2016-2124: SMB1 client connections can be downgraded to
  plaintext authentication (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);
- CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability;
  (bsc#1192214); (bso#14875);</changelog>
</package>
<package pkgid="aa3db2c5ce99869b82ad42f929c2c0594cd0b20782608566ad7964ef9df8877c" name="cups" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="8d1ecbb81bd9c6f572e28bc96b3c3c28eee91808811aaaa271ffe05cd02f7444" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="3ff8286729c869e352d2c31e1222b589103cc496a70728d4fd57bc6dcc54bcc5" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="3ab0500b1fe5c8f77dedd5975a1b5c3131645b1d40728b8c5c9985e6d58449ba" name="cups" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="8ebe4ebbe91ab4a8e4270cb846d1e166dfc3aeedc328d7e7a20bb0609dafda30" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="b95429f4cca21af35f3bf0c41be412e4b152c04fff0a6a70d92ba7b0b076d7cc" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="6e2258bc560bef05cb1dbf94bf307e5040808d70a385a88b55cd7472f39e8779" name="cups" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="944387899b84540aa38aad1848dacf585b6449850dbcdb1b4e0f522bb182fcb8" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="1f11f5625aeb79a912d0bf79b68a09fa869f1e67141787b564688ac70d50ecc6" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="753b333bf4350ad377989395e19fa1b2a101a3a61aac4b512c8840fe7108e8df" name="cups-client" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="70868a3052b1733fdb0807d6aa3e1a813c767839f3cf91659e00aa0e98f36636" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="43ee8e257ba8783ce05f511a2e0abf7ad0359365152f147b833ced63f5b931d6" name="cups-client" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="9b9510cc290a6e0575a0c0fae36b090fe3a3bd8ce2d8cedb91691deca81bd067" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="fbde9a5fbb4e299115866a78069c9178d3c62c46ebe309000c61bccfb7c6b921" name="cups-client" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="505bcac713dc880a4aa39e0c97640309200b000ee7e0dd73f1ee8978d0c240bf" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="bf31399dfdfceeaea0b575f7390b0bf60f33121c04b868c716bd2abe19f91f7a" name="cups-config" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="c411fe0f8250d5f9e341c96e81aa99d9f42871f8336c711b0c9dd99247f59028" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="17e784149abe1e448c85f6d864787ba4b084d56bcfa2f4ec9bf1c7fd6a46b173" name="cups-config" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="1452e1067eeae3cde148ce627d2b7bc6befb8e6910739fbdc6c6c1fdc7cc3424" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="487115080400b31f571cb89c996b404f0dc9be06187e5e5d973ab0529fdb1299" name="cups-config" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="b65a41ba3b5f5def897e3743decda144551297fe0dd71534db1c368f45a9f6af" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="fc4bfe6a8e87ab60119fa0d48478c30717af89045709dd0de363ef2f5bfa9a0d" name="cups-ddk" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="20130b95152e15c50761206d771551398f24db1d5744b8a8c281f3f7688a5d74" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="0bbd0a3393007c84066f856794bd1e4fafe02053c19d7ac7f309d3ca2693b9f0" name="cups-ddk" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="61d6f5cde7e0acb0b01cb6eee7f7b2d367549718dea94691ea037bc531dd3f4c" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="7bcea59fe27714aa5735d1bde31aa76daa4e77898ff56034a00fcea211ce5fe2" name="cups-ddk" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="e34629bb6331560602cde58c8650bcacd7cddb748bf125e0e6fa680634e8386b" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="dbc52f1cc990000ca5799e1813a5665f2655d4b850ee66ff4be9e3e61690d6f8" name="cups-devel" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="df975fa7b7bfbed2afc8a04e2ce04f251e051c5c7caa46bf16d3869eee7b3266" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="5adc9e50043d49e8a9a5258fd39d7cd95e925bd31775446118fcfaf97d818e55" name="cups-devel" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="554af8afb03d47e97c8d6f34a7e6bfce0e00911de11d1bf1c7f741e142bc9354" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="8b78afde4ed8b3bc3016bb60ed4a03a5e0f3b3b7c74a99f39231a1f3de5b9cac" name="cups-devel" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="e1ce31c8e7275b15d5c724f1ca8394d1412127d6871cd2c49cbaf895853c92de" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="69439ba5be7f68ab20b9b404d7cc984035c6c995522131e0274b17ee79c1ab80" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="3ee3cec24db29f21e039bf1655656ccdc27814881ce150e47d1a91f2537484ed" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="c1cd939e186765b0ee58a1fbf7b45192fe36bc2ff9754001fe17e647027d1090" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="450ec5e001b28d29a14b9a1d819e7b4e7857b0110a43da0ed175d2ae47fe773a" name="cups-filters" arch="src">
  <version epoch="0" ver="1.25.0" rel="lp152.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525348800">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
</package>
<package pkgid="dbb033fb5249e75fadb148b3217c0f193ef3951e649ad803f49f45aed8b67268" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="lp152.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525348800">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
</package>
<package pkgid="854069a766492ffe8d8eb10a4824762542ed1481a4063af19a08ddf7017bc248" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="lp152.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525348800">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
</package>
<package pkgid="e371f8d8b4368ba7eed97c39f7ad1b2cad15bd3b912eba033b5efd163ad2ac5a" name="curl" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="e3c5e18b42228b52bd4d576a212a632803562f2d1b471c86a988a8547d43056e" name="curl" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="00e63ae0132613bb012c7e8e7329e17a4c54e0efd0f3ea186f5658410109ef3f" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="3a981967d0ff395650bec6d6364c209a380eb079f27fb6a920562e76b3277499" name="curl" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="b578def8dc1d500401399944bcf386a2fabfb397da5c3d86741994af4efb76d1" name="curl" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="06b7f2a70a6430222235142f915dfc3ea8a7c8f9c2391e29fcf256e37f672ca0" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="b1dbeb53c0323b327e9a092019a7d2f3e55507aff1a37de61752859bd8aa38b5" name="curl" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.18.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="20d043080ece97586c1ab2c251ecfffc56437256ebe3d1cc90e709646ab25167" name="curl" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.18.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="798381a971b1bad304a821813c22d96a26aa0c68c17230865818105f424c7756" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.18.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="91a265bed50f2bb421a7d064546669264834383fe04a1f303fb401bf3e1ffb07" name="curl" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.21.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
</package>
<package pkgid="cdc21059cc7a00a5f0d3642bd7b21e559121a923970921d0750ae320ba7c1c2a" name="curl" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.21.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
</package>
<package pkgid="fbb5cbe366d778310ec7f8c0d0ad08694d36c237d54202c47da7a5606248ad03" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.21.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
</package>
<package pkgid="5e65d5c7f68412a1dc113143b0f59aed0e77184066c627cc887635149deff6f8" name="curl" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.24.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631534400">- Security fix: [bsc#1190373, CVE-2021-22946]
  * Protocol downgrade required TLS bypassed
  * Add curl-CVE-2021-22946.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631534401">- Security fix: [bsc#1190374, CVE-2021-22947]
  * STARTTLS protocol injection via MITM
  * Add curl-CVE-2021-22947.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1632312000">- MIME: Properly check Content-Type even if it has parameters
  * Add curl-check-content-type.patch [bsc#1190153]</changelog>
</package>
<package pkgid="3aceec30a6080064aa179d2a7ac364aaaa7c60d5041bfd271b77788dff493fe1" name="curl" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.24.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631534400">- Security fix: [bsc#1190373, CVE-2021-22946]
  * Protocol downgrade required TLS bypassed
  * Add curl-CVE-2021-22946.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631534401">- Security fix: [bsc#1190374, CVE-2021-22947]
  * STARTTLS protocol injection via MITM
  * Add curl-CVE-2021-22947.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1632312000">- MIME: Properly check Content-Type even if it has parameters
  * Add curl-check-content-type.patch [bsc#1190153]</changelog>
</package>
<package pkgid="19496f9e2014b83845d0f6f8b2cf4c8f61586318ba11e1706fe285e33217a963" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.24.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631534400">- Security fix: [bsc#1190373, CVE-2021-22946]
  * Protocol downgrade required TLS bypassed
  * Add curl-CVE-2021-22946.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631534401">- Security fix: [bsc#1190374, CVE-2021-22947]
  * STARTTLS protocol injection via MITM
  * Add curl-CVE-2021-22947.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1632312000">- MIME: Properly check Content-Type even if it has parameters
  * Add curl-check-content-type.patch [bsc#1190153]</changelog>
</package>
<package pkgid="a721f8c0154fb786413040c984464916dd829f9525fdd3f9b0fa130c08db61b2" name="curl" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="a433a50d32346e20aa11794a740c15ee0309c469364b3918577303d4e57058a2" name="curl" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="b9f725326540a16d7f81376abd4d048a8df47bbdafc54bb72c1dc27d076f4c80" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="d36020b045d1209eb488b0ca06fd9b8ed7fddf4d072f9ee4e870eabd7959d741" name="curl" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.6.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="07474e07c135a5593efd8e3fbede7f83e5ff053336bd3e6ba60c2dd35525bcfb" name="curl" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.6.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="a5c8686f3f38f987b2949be14ffa2094538722e5b14c5bde2f150051bab66df1" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.6.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="1fe37994b74e6ce9e412964dc66c5c43e9b64784b59dfd75ab2968b1f7193c4b" name="curl" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="367ce729abe4f0e97eeef9b9dd22fc3c0aea1d23eaec4c256837ca8beef6f79d" name="curl" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="19c473432b66aba938ad041127b179955a93770945ce070459d647e75719820e" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="8cf8db53cd85da65ec7183e341be6e33a6fc881eb9d7e475f6879f960ed432b2" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="67a54d3743f0b00144d9337fd2162663856011f49a8f573e7f495184d744a49d" name="curl-mini" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="8c7cc9f40f7fced776c33e3be2004ab142724a6b8d16d4ef2d0b83f4339487d4" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="20ad06cdb551f83bf1915bfbf057f4c914f3400f12d5bce4e96bb96545b850f4" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="b8130abbf513bd6da3be0c3a1b2b7add3ab030b4c4a77fd3db4f46882834d93f" name="curl-mini" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="92e77816e378f88082bdfac867ec6fe4d375788659b9598638a80387a379447e" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="72bbe20e0c11d4fe0e6541773b56255821b56240cc8563148c030f2296974e1e" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.18.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e57dd7c2146d3d9e5c7a52fa0549b486f7e4b6ba44a33ba6cc89a6a6d3f866cc" name="curl-mini" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.18.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="31a930d4e99433d85422be18e545bafc78c58b41eb99d8f4c0bb08a6526024f5" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.18.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="61d4b6bac050d6be6345fb20a70b73ddac3c2397a9f5aad2b57efb5cda9da16b" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.21.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
</package>
<package pkgid="1b4ee0e1668a2a9f25397c4ad8102a334c95ceb7bf99d5a2ef4cc50afb9077a9" name="curl-mini" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.21.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
</package>
<package pkgid="3a7f91c732bc41db60169fafa6ca13e0ffa12d96ed3978a481bbcc36abec0b93" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.21.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
</package>
<package pkgid="4cc532ff5383d3beb932ac16339f8314a6ae20ffda6cb9a3deed1d633530bf09" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.24.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631534400">- Security fix: [bsc#1190373, CVE-2021-22946]
  * Protocol downgrade required TLS bypassed
  * Add curl-CVE-2021-22946.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631534401">- Security fix: [bsc#1190374, CVE-2021-22947]
  * STARTTLS protocol injection via MITM
  * Add curl-CVE-2021-22947.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1632312000">- MIME: Properly check Content-Type even if it has parameters
  * Add curl-check-content-type.patch [bsc#1190153]</changelog>
</package>
<package pkgid="fe7f6a35e95ba97d964ca7abfbfe08bd21e7121ecd57124aa9212501b73c3276" name="curl-mini" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.24.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631534400">- Security fix: [bsc#1190373, CVE-2021-22946]
  * Protocol downgrade required TLS bypassed
  * Add curl-CVE-2021-22946.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631534401">- Security fix: [bsc#1190374, CVE-2021-22947]
  * STARTTLS protocol injection via MITM
  * Add curl-CVE-2021-22947.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1632312000">- MIME: Properly check Content-Type even if it has parameters
  * Add curl-check-content-type.patch [bsc#1190153]</changelog>
</package>
<package pkgid="16447e9398b28f42e5185b023fe8a048b219ebb0b7c9d551fc8cb6363efc50b7" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.24.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631534400">- Security fix: [bsc#1190373, CVE-2021-22946]
  * Protocol downgrade required TLS bypassed
  * Add curl-CVE-2021-22946.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1631534401">- Security fix: [bsc#1190374, CVE-2021-22947]
  * STARTTLS protocol injection via MITM
  * Add curl-CVE-2021-22947.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1632312000">- MIME: Properly check Content-Type even if it has parameters
  * Add curl-check-content-type.patch [bsc#1190153]</changelog>
</package>
<package pkgid="3b44c575466f8a8d85f8369bd449af706141c28442231f6af39e9a63be03425b" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="eb31c5ee10d8ee7da8bca138bce872ae4c5048e4f1da593f3f8be2e887fb4601" name="curl-mini" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="2ab36a417e60324528863254b24efdef1bb73f001096f150788977b0d3fa2052" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="28bbcca6c3066cc5619d1f47527e365642f2f442db5c68f9b2ca75a45eddf6f4" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="7bd1fdea0096ca69e965ae454342756bc4460600129d836b3ef998e78c91fcf4" name="curl-mini" arch="src">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="95be693521c674a168415d42a4275dbc8c53bec25103d88f6dfb333e0ff8491a" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="6aeca36b47fce92cc28f9ac9b7674882b742dc60b61d66cf0a15bd5b4fc7dcc0" name="dash" arch="i586">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="fce66ad164c14e7e2443574e891e3f0e19691579f9d9a8b1f2b0af27fc421e30" name="dash" arch="src">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.3.1"/>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1266062400">- initial packaging of dash</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1266062401">- do not provide ash</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1266580800">- cleaned up specfile</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1279540800">- update to version 0.5.6.1
  - bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="ebe2c25f4295a39e75aae09b2a713d63fd3366af84eefbc1394e6f97ae308318" name="dash" arch="x86_64">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="6a8482446ae57aab98177c07bada0825520b24ff9b9937652863dcda910a0936" name="dash" arch="i586">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.6.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1605787200">- add check-nflag-in-evaltree.patch (bsc#1178978)</changelog>
</package>
<package pkgid="f698c0b2a18572996d3605e513dd97a5ebb889553b0076c3b46cbc1a95f159be" name="dash" arch="src">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.6.1"/>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1266062400">- initial packaging of dash</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1266062401">- do not provide ash</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1266580800">- cleaned up specfile</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1279540800">- update to version 0.5.6.1
  - bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1605787200">- add check-nflag-in-evaltree.patch (bsc#1178978)</changelog>
</package>
<package pkgid="e4897d16401a312343557944dc8591206713b14b8486602f5ef8d0a85e64dc56" name="dash" arch="x86_64">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.6.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1605787200">- add check-nflag-in-evaltree.patch (bsc#1178978)</changelog>
</package>
<package pkgid="7f75f705b95528cd7fb653c39eb7d8e05be4185822ebf70c8f134fba26005e52" name="datefudge" arch="i586">
  <version epoch="0" ver="1.22" rel="lp152.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1453118400">- Initial release</changelog>
  <changelog author="astieger@suse.com" date="1510574400">- update to 1.22:
  * Operate more efficiently, especially if fudging to the epoch.
  * Fix running on 32-bit systems with 64-bit time_t (such as x32).
  * datefudge.man: Document that datefudge might be affected by the
    Y2K38 problem on some systems.
- includes changes from 1.21:
  * datefudge.sh: don't fail when its date argument happens to be
    equal to the current time (i.e. make `datefudge now
    some_command' work).
  * Update man page to mention that the date can be given in any
    format accepted by date(1) command.
- add upstream signing key and verify source signature</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix FTBFS build with glibc 2.31 [bsc#1183784]
  * conflicting gettimeofday prototype
- Add datefudge-glibc-2.31-fix.patch</changelog>
</package>
<package pkgid="75fae714cbe6d530e6d31c3cb8769189ff821cb2cb630ceb5e9d8a92bf0f7442" name="datefudge" arch="src">
  <version epoch="0" ver="1.22" rel="lp152.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1453118400">- Initial release</changelog>
  <changelog author="astieger@suse.com" date="1510574400">- update to 1.22:
  * Operate more efficiently, especially if fudging to the epoch.
  * Fix running on 32-bit systems with 64-bit time_t (such as x32).
  * datefudge.man: Document that datefudge might be affected by the
    Y2K38 problem on some systems.
- includes changes from 1.21:
  * datefudge.sh: don't fail when its date argument happens to be
    equal to the current time (i.e. make `datefudge now
    some_command' work).
  * Update man page to mention that the date can be given in any
    format accepted by date(1) command.
- add upstream signing key and verify source signature</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix FTBFS build with glibc 2.31 [bsc#1183784]
  * conflicting gettimeofday prototype
- Add datefudge-glibc-2.31-fix.patch</changelog>
</package>
<package pkgid="682644498a6fa434573d99127cb257f69d35e31c3b9b5100db990e56f1e6dd67" name="datefudge" arch="x86_64">
  <version epoch="0" ver="1.22" rel="lp152.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1453118400">- Initial release</changelog>
  <changelog author="astieger@suse.com" date="1510574400">- update to 1.22:
  * Operate more efficiently, especially if fudging to the epoch.
  * Fix running on 32-bit systems with 64-bit time_t (such as x32).
  * datefudge.man: Document that datefudge might be affected by the
    Y2K38 problem on some systems.
- includes changes from 1.21:
  * datefudge.sh: don't fail when its date argument happens to be
    equal to the current time (i.e. make `datefudge now
    some_command' work).
  * Update man page to mention that the date can be given in any
    format accepted by date(1) command.
- add upstream signing key and verify source signature</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix FTBFS build with glibc 2.31 [bsc#1183784]
  * conflicting gettimeofday prototype
- Add datefudge-glibc-2.31-fix.patch</changelog>
</package>
<package pkgid="0d1e7145b46766f184a8380a68bc683b5b2b683cd475d4a503c3b4ed5f7af36d" name="davfs2" arch="src">
  <version epoch="0" ver="1.5.4" rel="lp152.4.3.1"/>
  <changelog author="leo@unstable.be" date="1196856000">- Fixed Obsoletes and Provides to fix
  https://bugzilla.novell.com/show_bug.cgi?id=332076</changelog>
  <changelog author="leo@unstable.be" date="1231934400">- Update to release
- Added permissions file (fixes rpmlint error)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1243598400">- copied into filesystems repository in openSUSE Build Service, original in home:leo_eraly
- fix license tag
- added %%post script to create davfs2 group and user
- moved to Savannah
- some spec file tidying
- update to 1.4.0</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1245672000">- update to 1.4.1:
  * experimental support was added for the non-standard method USERINFO, which allows this release to get information about available and used Web space from the server
  * failed file upload attempts are now repeated at increasing time intervals
  * if a davfs filesystem is unmounted at disconnect, local changes are cached and submitted at the next mount
  * many other minor improvements and bugfixes were made</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1259582400">- update to 1.4.5:
  * option was added to silently refuse to connect when encountering suspicious server certificates
  * several minor bugs were fixed
- changes from 1.4.3:
  * support for Neon 0.29 was added, which also allows for support for NTLM authentication
  * an option was added to silently refuse connections with untrusted server certificates
  * experimental support for the command line option "username" was added for use with pam_mount</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1291032000">- fix location of mount/umount helpers, bnc#640967
- update to 1.4.6:
  * bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- User/group addition ought not to be fatal</changelog>
  <changelog author="conrad@quisquis.de" date="1360756800">- Upgrade to 1.4.7
- Added -pie/-fPIE compile flags
- Fixed (hopefully) permissions handling</changelog>
  <changelog author="conrad@quisquis.de" date="1360756801">- Disabled OBS files service - apparently some savannah mirrors are broken</changelog>
  <changelog author="conrad@quisquis.de" date="1360756802">- Added fix-formats patch to get rid of some warnings
- Added upstream patch for broken symlinks</changelog>
  <changelog author="conrad@quisquis.de" date="1360756803">- Added missing file</changelog>
  <changelog author="conrad@quisquis.de" date="1360929600">- Specfile fixes for fedora + SLES</changelog>
  <changelog author="juergen@spitzmueller.org" date="1385899200">- Accept Neon 0.30 (davfs2-ne_v30.patch -- backported from davfs2 cvs:
  http://cvs.savannah.gnu.org/viewvc/davfs2/configure.ac?root=davfs2&amp;r1=1.11.4.1&amp;r2=1.11.4.2)</changelog>
  <changelog author="draht@schaltsekun.de" date="1416916800">- upgrade to 1.5.2; changes include:
  * fix for insecure use of system(). This is related to CVE-2014-4362.
  * fixes for usage of symlinks for mountpoints and mtab
  * improved cookie support
  * neon 0.30 support
  * memory leak fixes
  * compiler options for hardened build.
  * load the fuse kernel module automatically.
  * new mount option grpid, trust_ca_cert and trust_server_cert.
  * This list is not exhaustive. Please have a look at the ChangeLog
    for a complete list.
- obsoleted and removed from package:
  * davfs2-fix-formats.patch
  * davfs2-ne_v30.patch
  * davfs2-DESTDIR.patch
  * davfs2-fix_missing_exit_failure.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1437134400">- Import of davfs2 to SLE12-SP1 from SLE11-SP4 (FATE#318116)</changelog>
  <changelog author="meissner@suse.com" date="1441972800">- remove the setuid root permission files (bsc#907662)</changelog>
  <changelog author="chris@computersalat.de" date="1512388800">- update to 1.5.4
  * mount.davfs frequently reads /proc/mounts. This is necessary with
    coda but not with fuse. When running two instances of mount.davfs
    using fuse these reads may trigger a kernel bug and create a deadlock.
  * when mount.davfs receives SIGTERM it stops reading from the fuse
    device. In this case kernel fuse will make umount(8) hang forever.</changelog>
  <changelog author="dsterba@suse.cz" date="1519041600">- spec: update rpmlint, fix build</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Replace %__-type macro indirections. Do not ignore errors from
  useradd. Remove Fedora definitions. Restore debug creation.
  Compact grammar in description.</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1593172800">- Add davfs2-nofail.patch: respect nofail option (bsc#1173419)</changelog>
</package>
<package pkgid="c66821415a902d37ffae44ad05ced3d48078488f3b8476a17d063fe61b29d3ea" name="davfs2" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="lp152.4.3.1"/>
  <changelog author="conrad@quisquis.de" date="1360756800">- Added missing file</changelog>
  <changelog author="conrad@quisquis.de" date="1360929600">- Specfile fixes for fedora + SLES</changelog>
  <changelog author="juergen@spitzmueller.org" date="1385899200">- Accept Neon 0.30 (davfs2-ne_v30.patch -- backported from davfs2 cvs:
  http://cvs.savannah.gnu.org/viewvc/davfs2/configure.ac?root=davfs2&amp;r1=1.11.4.1&amp;r2=1.11.4.2)</changelog>
  <changelog author="draht@schaltsekun.de" date="1416916800">- upgrade to 1.5.2; changes include:
  * fix for insecure use of system(). This is related to CVE-2014-4362.
  * fixes for usage of symlinks for mountpoints and mtab
  * improved cookie support
  * neon 0.30 support
  * memory leak fixes
  * compiler options for hardened build.
  * load the fuse kernel module automatically.
  * new mount option grpid, trust_ca_cert and trust_server_cert.
  * This list is not exhaustive. Please have a look at the ChangeLog
    for a complete list.
- obsoleted and removed from package:
  * davfs2-fix-formats.patch
  * davfs2-ne_v30.patch
  * davfs2-DESTDIR.patch
  * davfs2-fix_missing_exit_failure.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1437134400">- Import of davfs2 to SLE12-SP1 from SLE11-SP4 (FATE#318116)</changelog>
  <changelog author="meissner@suse.com" date="1441972800">- remove the setuid root permission files (bsc#907662)</changelog>
  <changelog author="chris@computersalat.de" date="1512388800">- update to 1.5.4
  * mount.davfs frequently reads /proc/mounts. This is necessary with
    coda but not with fuse. When running two instances of mount.davfs
    using fuse these reads may trigger a kernel bug and create a deadlock.
  * when mount.davfs receives SIGTERM it stops reading from the fuse
    device. In this case kernel fuse will make umount(8) hang forever.</changelog>
  <changelog author="dsterba@suse.cz" date="1519041600">- spec: update rpmlint, fix build</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Replace %__-type macro indirections. Do not ignore errors from
  useradd. Remove Fedora definitions. Restore debug creation.
  Compact grammar in description.</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1593172800">- Add davfs2-nofail.patch: respect nofail option (bsc#1173419)</changelog>
</package>
<package pkgid="206d7e24fcbc774921294d90d51f7781e06ee4fdd9d46ba9bc055e40106262c1" name="dbus-1" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp152.6.3.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="78a405607a0e2ab9a03cee14233583ba469e83fcf92e6e40b66023c1b03d22dd" name="dbus-1" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp152.6.3.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="f0b6532e99c521353c27cddf2bb74de0fbcf1eddc0df4b76481998531ed9edcc" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp152.6.3.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="ef64236012dce89fe2be5fd7f9cebd3826abf0391c9e0f3304a9762579f35f61" name="dbus-1" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp152.6.6.1"/>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="edc561a9a4ed402a2548c037229f2d5e6b6bc3932cbca40b393edd84fe275613" name="dbus-1" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp152.6.6.1"/>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="58086c430fa43f01d2c2d6d893c050edb04fc5082ce77a51f80fe015d3a64cd2" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp152.6.6.1"/>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="5e8d6a14b0b8ca3c36dd972ec8ab3233a68c27dce3392ffd3737aeafa9f111c0" name="dbus-1-devel" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp152.6.3.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="4eada35fcbd121377b6536f88de32807cdb399df13cb69b33effcc3924872b88" name="dbus-1-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp152.6.3.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="2f45ef199a99fc8c816f0bebe1bee904cdd214ab118efacca7fea32806039d94" name="dbus-1-devel" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp152.6.6.1"/>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="44f661a2ded9d7fb6379d10e7f8303fca9819439dcfb62284c48a6e37f943608" name="dbus-1-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp152.6.6.1"/>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="72568f553393d9f95c0a31e0924773e1020284e373b67067027582fd7dc4506a" name="dbus-1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp152.6.3.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="ecaf07af6b0d1b40aaf3ff1dc7dfcf5d8d9f4f9d9dbf013363442e944c95b0a2" name="dbus-1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp152.6.6.1"/>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="637bee8c5942d4deff6c52b3f8cd390126550fa9691da578cd5a2870b0f2e683" name="dbus-1-devel-doc" arch="noarch">
  <version epoch="0" ver="1.12.2" rel="lp152.6.3.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="3b4a724d7171521b863ed9176d8043f4b3ecb5ff2dd6d802890f02e64c67c3c8" name="dbus-1-devel-doc" arch="noarch">
  <version epoch="0" ver="1.12.2" rel="lp152.6.6.1"/>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="239cee4214370042c5287884aa5c70a2e9afff6dbbd6f07163f4032f387c4bc9" name="dbus-1-x11" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp152.6.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="3b07af20caf0ccaf39dbad5716e7efa9b2bd3a75f83929594f6736f02b1c4644" name="dbus-1-x11" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp152.6.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="081f8a8c44c7bde651b8861b1ba14cd007babe81ea0758bc4612f40076be64d5" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp152.6.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="efce4de8edfc3589e9c54ea9c9599b0c3295d245af1753123c62eedd487f8ca9" name="dbus-1-x11" arch="i586">
  <version epoch="0" ver="1.12.2" rel="lp152.6.6.1"/>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="feecf69f95b2f14cf7541d3e3620ffded0c9c8e70e535a4e2c20dd96b1012556" name="dbus-1-x11" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp152.6.6.1"/>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="28ff82a64820831d59489f71b801851022dd13422ca5ad75909f8f4a5414531e" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp152.6.6.1"/>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="9555f16954b6cf1af4307d4b2b335f09217b1b04f00bfcc26f081a11dfc9f4d9" name="ddclient" arch="noarch">
  <version epoch="0" ver="3.8.3" rel="lp152.4.3.1"/>
  <changelog author="chris@computersalat.de" date="1400760000">- update systemd stuff
  * add {?has_systemd} to fix build for Systems using init scripts
- spec cleanup
  * add missing BuildRoot</changelog>
  <changelog author="stefan.fent@suse.com" date="1403092800">- fix pidfile path in /etc/ddclient.conf and set ownership to ddclient
- create user and group ddclient (bnc#881520)
- create /run/ddclient/ with user and group ddclient if not yet
  available in %pre</changelog>
  <changelog author="pth@suse.de" date="1404129600">- Use perl_requires instead of harcoding a value.</changelog>
  <changelog author="chris@computersalat.de" date="1452254400">- fix for boo#903588
- revert patch change
- recover deleted changes (rev34)
- systemd fix
  * conf file must be accessible only by its owner</changelog>
  <changelog author="josef.moellers@suse.com" date="1486123200">- Upgrade to ddclient-3.8.3.
  * added Alpine Linux init scritp - patch send by @Tal on github.
  * adding support for nsupdate - patch send by @droe on github
  * allow log username-password combinations - patch send by @dirdi on github
  * adding support for cloudflare - patch send by @roberthawdon on github
  * adding support for duckdns - patch send by @gkranis</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619006400">- /var/run is deprecated, replaced by /run in ddclient-tmpfiles.conf
  [ddclient-tmpfiles.conf, bsc#1185069]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619092800">- In the (sample) /etc/ddclient.conf, also replace /var/run with /run.
  [ddclient-replace-varrun-with-run.patch, bsc#1185069]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1620820800">- Use %{_tmpfilesdir} instead of abusing %{_libexecdir}.
  Use an extended regular expression in sed to change (/var)?/run.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1621339200">- Systemd expects the PID file to exist as soon as the main process
  exists. However, it takes quite a while until the pid file is
  created by the daemon process, so we delay the main process
  for 1 second before exit()ing.
  This gets rid of an annoying warning message in "systemctl
  status".
  [ddclient, ddclient-delay-main-process-for-systemd.patch]</changelog>
</package>
<package pkgid="1ec081909e660962669ff68346eb6d34778508257923a64ceb60ba68368a6c56" name="ddclient" arch="src">
  <version epoch="0" ver="3.8.3" rel="lp152.4.3.1"/>
  <changelog author="ro@suse.de" date="1319025600">- remove leftover debug line in init script</changelog>
  <changelog author="chris@computersalat.de" date="1326110400">- update to 3.8.1
  * Fixing #28: FreeDNS.afraid.org changed api slightly
  * Added dtdns-support
  * Added support for longer password
  * Added cisco-asa patch
  * Added support for LoopiaDNS
- rebase patches</changelog>
  <changelog author="binli@opensuse.org" date="1348574400">- Update ddclient-3.8.1-config.patch to check the configuraton file
  from /etc instead of /etc/ddclient (bnc#781699).</changelog>
  <changelog author="chris@computersalat.de" date="1351080000">- rework config patch
  * ddclient.conf: add example for selfhost (http://selfhost.de)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1368619200">- fix init script: start ddclient with "/usr/bin/perl ddclient",
  otherwise startproc will falsely report that starting failed.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1368705600">- more init-script fixes:
  - startproc now needs the pidfile parameter (or it woulld look
    for "perl.pid". Sorry, should have run more tests.
  - while I'm at it, get the pidfile from the config file in case
    the user would have changed it</changelog>
  <changelog author="p.drouand@gmail.com" date="1382875200">- Improve systemd support for openSUSE &gt;= 12.3</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1386158400">- fix the breakage from last submission:
  * service file was put into tmpfiles.d
  * tmpfiles config was put into systemd service dir
  * rcddclient link was broken (pointed to "service" file)
- fix rpmlint warnings, also introduced by last submission:
  * service files and tmpdir config are neither config files nor
    should be executable
- package is noarch, mark it as such
- documentation should not have executable bit set</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1388491200">- update to 3.8.2
  * adding support by ChangeIP
  * sha-1 patch  to allow Digest::SHA
  * allow reuse of use
  * preventing deep sleep - see bug #46
  * Fallback to iproute if ifconfig doesn't work
- drop ddclient-3.8.1-update_nic.patch: upstream changed the "use"
  logic
- move all sample-* to examples under the documentation directory
- update source url on sourceforge</changelog>
  <changelog author="jsegitz@novell.com" date="1400587200">- ensure proper handling of .service files with %service_add_pre</changelog>
  <changelog author="chris@computersalat.de" date="1400760000">- update systemd stuff
  * add {?has_systemd} to fix build for Systems using init scripts
- spec cleanup
  * add missing BuildRoot</changelog>
  <changelog author="stefan.fent@suse.com" date="1403092800">- fix pidfile path in /etc/ddclient.conf and set ownership to ddclient
- create user and group ddclient (bnc#881520)
- create /run/ddclient/ with user and group ddclient if not yet
  available in %pre</changelog>
  <changelog author="pth@suse.de" date="1404129600">- Use perl_requires instead of harcoding a value.</changelog>
  <changelog author="chris@computersalat.de" date="1452254400">- fix for boo#903588
- revert patch change
- recover deleted changes (rev34)
- systemd fix
  * conf file must be accessible only by its owner</changelog>
  <changelog author="josef.moellers@suse.com" date="1486123200">- Upgrade to ddclient-3.8.3.
  * added Alpine Linux init scritp - patch send by @Tal on github.
  * adding support for nsupdate - patch send by @droe on github
  * allow log username-password combinations - patch send by @dirdi on github
  * adding support for cloudflare - patch send by @roberthawdon on github
  * adding support for duckdns - patch send by @gkranis</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619006400">- /var/run is deprecated, replaced by /run in ddclient-tmpfiles.conf
  [ddclient-tmpfiles.conf, bsc#1185069]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619092800">- In the (sample) /etc/ddclient.conf, also replace /var/run with /run.
  [ddclient-replace-varrun-with-run.patch, bsc#1185069]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1620820800">- Use %{_tmpfilesdir} instead of abusing %{_libexecdir}.
  Use an extended regular expression in sed to change (/var)?/run.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1621339200">- Systemd expects the PID file to exist as soon as the main process
  exists. However, it takes quite a while until the pid file is
  created by the daemon process, so we delay the main process
  for 1 second before exit()ing.
  This gets rid of an annoying warning message in "systemctl
  status".
  [ddclient, ddclient-delay-main-process-for-systemd.patch]</changelog>
</package>
<package pkgid="eeb3c2f1feea33592c2bbb024ca2a4406b5ea0d3a834d5ae8eecfe210011b2c6" name="dehydrated" arch="noarch">
  <version epoch="0" ver="0.7.0" rel="lp152.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1565438400">- Behavioral change: Use cron only for older RHEL/CentOS versions
  (along with SLE &lt; 12.0). Everything else now uses systemd.
  Please adopt accordingly! Refer to README.md for</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- Drop systemd BuildRequires: pkgconfig(systemd) is already in
  place and is synonymous.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1588766400">- Removed lighttpd 1.x integration package. If you still would like
  to use lighttpd with dehydrated, follow the instructions in the
  README.maintainers file.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432000">- Remove potentially harmful scriptlet (bsc#1154167). Documented
  transition case in the maintainer README. Unlikely enough. The
  versions that have not transitioned yet would be broken for more
  than two years now.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432001">- Update maintainer file and package description, remove features
  that are better described in the (upstream maintained) man page.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1600084800">- Reenable nginx subpackage for factory</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1605787200">- dehydrated-apache2: Check for mod_compat (bsc#1178927)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1607601600">- Update to dehydrated 0.7.0 (JSC#SLE-15909)
  Added
    Support for external account bindings
    Special support for ZeroSSL
    Support presets for some CAs instead of requiring URLs
    Allow requesting preferred chain (--preferred-chain)
    Added method to show CAs current terms of service (--display-terms)
    Allow setting path to domains.txt using cli arguments (--domains-txt)
    Added new cli command --cleanupdelete which deletes old files instead of archiving them
  Fixed
    No more silent failures on broken hook-scripts
    Better error-handling with KEEP_GOING enabled
    Check actual order status instead of assuming it's valid
    Don't include keyAuthorization in challenge validation (RFC compliance)
  Changed
    Using EC secp384r1 as default certificate type
    Use JSON.sh to parse JSON
    Use account URL instead of account ID (RFC compliance)
    Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
    Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
    Cleanup now also removes dangling symlinks</changelog>
</package>
<package pkgid="05bf20793fdeb34711cf29a5c7109fa07dc9e23d7690b8b4b25f01efbaba9f67" name="dehydrated" arch="src">
  <version epoch="0" ver="0.7.0" rel="lp152.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1565438400">- Behavioral change: Use cron only for older RHEL/CentOS versions
  (along with SLE &lt; 12.0). Everything else now uses systemd.
  Please adopt accordingly! Refer to README.md for</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- Drop systemd BuildRequires: pkgconfig(systemd) is already in
  place and is synonymous.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1588766400">- Removed lighttpd 1.x integration package. If you still would like
  to use lighttpd with dehydrated, follow the instructions in the
  README.maintainers file.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432000">- Remove potentially harmful scriptlet (bsc#1154167). Documented
  transition case in the maintainer README. Unlikely enough. The
  versions that have not transitioned yet would be broken for more
  than two years now.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432001">- Update maintainer file and package description, remove features
  that are better described in the (upstream maintained) man page.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1600084800">- Reenable nginx subpackage for factory</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1605787200">- dehydrated-apache2: Check for mod_compat (bsc#1178927)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1607601600">- Update to dehydrated 0.7.0 (JSC#SLE-15909)
  Added
    Support for external account bindings
    Special support for ZeroSSL
    Support presets for some CAs instead of requiring URLs
    Allow requesting preferred chain (--preferred-chain)
    Added method to show CAs current terms of service (--display-terms)
    Allow setting path to domains.txt using cli arguments (--domains-txt)
    Added new cli command --cleanupdelete which deletes old files instead of archiving them
  Fixed
    No more silent failures on broken hook-scripts
    Better error-handling with KEEP_GOING enabled
    Check actual order status instead of assuming it's valid
    Don't include keyAuthorization in challenge validation (RFC compliance)
  Changed
    Using EC secp384r1 as default certificate type
    Use JSON.sh to parse JSON
    Use account URL instead of account ID (RFC compliance)
    Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
    Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
    Cleanup now also removes dangling symlinks</changelog>
</package>
<package pkgid="cfa30ac0511f6a7c469bd778121780f0db7eedd6e99160005c9c4f4fc4fb5af4" name="dehydrated" arch="noarch">
  <version epoch="0" ver="0.7.0" rel="lp152.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1565438400">- Behavioral change: Use cron only for older RHEL/CentOS versions
  (along with SLE &lt; 12.0). Everything else now uses systemd.
  Please adopt accordingly! Refer to README.md for</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- Drop systemd BuildRequires: pkgconfig(systemd) is already in
  place and is synonymous.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1588766400">- Removed lighttpd 1.x integration package. If you still would like
  to use lighttpd with dehydrated, follow the instructions in the
  README.maintainers file.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432000">- Remove potentially harmful scriptlet (bsc#1154167). Documented
  transition case in the maintainer README. Unlikely enough. The
  versions that have not transitioned yet would be broken for more
  than two years now.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432001">- Update maintainer file and package description, remove features
  that are better described in the (upstream maintained) man page.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1600084800">- Reenable nginx subpackage for factory</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1605787200">- dehydrated-apache2: Check for mod_compat (bsc#1178927)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1607601600">- Update to dehydrated 0.7.0 (JSC#SLE-15909)
  Added
    Support for external account bindings
    Special support for ZeroSSL
    Support presets for some CAs instead of requiring URLs
    Allow requesting preferred chain (--preferred-chain)
    Added method to show CAs current terms of service (--display-terms)
    Allow setting path to domains.txt using cli arguments (--domains-txt)
    Added new cli command --cleanupdelete which deletes old files instead of archiving them
  Fixed
    No more silent failures on broken hook-scripts
    Better error-handling with KEEP_GOING enabled
    Check actual order status instead of assuming it's valid
    Don't include keyAuthorization in challenge validation (RFC compliance)
  Changed
    Using EC secp384r1 as default certificate type
    Use JSON.sh to parse JSON
    Use account URL instead of account ID (RFC compliance)
    Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
    Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
    Cleanup now also removes dangling symlinks</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1614772800">- Clarified new default settings. KEY_ALGO=secp384r1. Please consult
  README.maintainer for details and how to return to RSA-based certificate
  issuance. (jsc#ECO-3435, jsc#SLE-15909)
- Added a note about ACMEv1 deprecation
- Added a note on new ACME providers and the new non-URL provider syntax
  See README.maintainer for details.</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1615723200">- Add directory where cleanup can archive unused certificates</changelog>
</package>
<package pkgid="1da6545f57f6caae67cce1b3679703e622f9f8b561bcd6d8468bb322ce897fe9" name="dehydrated" arch="src">
  <version epoch="0" ver="0.7.0" rel="lp152.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1565438400">- Behavioral change: Use cron only for older RHEL/CentOS versions
  (along with SLE &lt; 12.0). Everything else now uses systemd.
  Please adopt accordingly! Refer to README.md for</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- Drop systemd BuildRequires: pkgconfig(systemd) is already in
  place and is synonymous.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1588766400">- Removed lighttpd 1.x integration package. If you still would like
  to use lighttpd with dehydrated, follow the instructions in the
  README.maintainers file.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432000">- Remove potentially harmful scriptlet (bsc#1154167). Documented
  transition case in the maintainer README. Unlikely enough. The
  versions that have not transitioned yet would be broken for more
  than two years now.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432001">- Update maintainer file and package description, remove features
  that are better described in the (upstream maintained) man page.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1600084800">- Reenable nginx subpackage for factory</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1605787200">- dehydrated-apache2: Check for mod_compat (bsc#1178927)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1607601600">- Update to dehydrated 0.7.0 (JSC#SLE-15909)
  Added
    Support for external account bindings
    Special support for ZeroSSL
    Support presets for some CAs instead of requiring URLs
    Allow requesting preferred chain (--preferred-chain)
    Added method to show CAs current terms of service (--display-terms)
    Allow setting path to domains.txt using cli arguments (--domains-txt)
    Added new cli command --cleanupdelete which deletes old files instead of archiving them
  Fixed
    No more silent failures on broken hook-scripts
    Better error-handling with KEEP_GOING enabled
    Check actual order status instead of assuming it's valid
    Don't include keyAuthorization in challenge validation (RFC compliance)
  Changed
    Using EC secp384r1 as default certificate type
    Use JSON.sh to parse JSON
    Use account URL instead of account ID (RFC compliance)
    Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
    Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
    Cleanup now also removes dangling symlinks</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1614772800">- Clarified new default settings. KEY_ALGO=secp384r1. Please consult
  README.maintainer for details and how to return to RSA-based certificate
  issuance. (jsc#ECO-3435, jsc#SLE-15909)
- Added a note about ACMEv1 deprecation
- Added a note on new ACME providers and the new non-URL provider syntax
  See README.maintainer for details.</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1615723200">- Add directory where cleanup can archive unused certificates</changelog>
</package>
<package pkgid="c18cd525a54175e32fc83bb0565d9b9901a56b34bdccfcb361084c2d871e3d1f" name="dehydrated-apache2" arch="noarch">
  <version epoch="0" ver="0.7.0" rel="lp152.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1565438400">- Behavioral change: Use cron only for older RHEL/CentOS versions
  (along with SLE &lt; 12.0). Everything else now uses systemd.
  Please adopt accordingly! Refer to README.md for</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- Drop systemd BuildRequires: pkgconfig(systemd) is already in
  place and is synonymous.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1588766400">- Removed lighttpd 1.x integration package. If you still would like
  to use lighttpd with dehydrated, follow the instructions in the
  README.maintainers file.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432000">- Remove potentially harmful scriptlet (bsc#1154167). Documented
  transition case in the maintainer README. Unlikely enough. The
  versions that have not transitioned yet would be broken for more
  than two years now.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432001">- Update maintainer file and package description, remove features
  that are better described in the (upstream maintained) man page.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1600084800">- Reenable nginx subpackage for factory</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1605787200">- dehydrated-apache2: Check for mod_compat (bsc#1178927)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1607601600">- Update to dehydrated 0.7.0 (JSC#SLE-15909)
  Added
    Support for external account bindings
    Special support for ZeroSSL
    Support presets for some CAs instead of requiring URLs
    Allow requesting preferred chain (--preferred-chain)
    Added method to show CAs current terms of service (--display-terms)
    Allow setting path to domains.txt using cli arguments (--domains-txt)
    Added new cli command --cleanupdelete which deletes old files instead of archiving them
  Fixed
    No more silent failures on broken hook-scripts
    Better error-handling with KEEP_GOING enabled
    Check actual order status instead of assuming it's valid
    Don't include keyAuthorization in challenge validation (RFC compliance)
  Changed
    Using EC secp384r1 as default certificate type
    Use JSON.sh to parse JSON
    Use account URL instead of account ID (RFC compliance)
    Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
    Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
    Cleanup now also removes dangling symlinks</changelog>
</package>
<package pkgid="0105325cf9721b16f0170fa51344bbd325a6f39178ac109fb6d002fd8ed66438" name="dehydrated-apache2" arch="noarch">
  <version epoch="0" ver="0.7.0" rel="lp152.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1565438400">- Behavioral change: Use cron only for older RHEL/CentOS versions
  (along with SLE &lt; 12.0). Everything else now uses systemd.
  Please adopt accordingly! Refer to README.md for</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- Drop systemd BuildRequires: pkgconfig(systemd) is already in
  place and is synonymous.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1588766400">- Removed lighttpd 1.x integration package. If you still would like
  to use lighttpd with dehydrated, follow the instructions in the
  README.maintainers file.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432000">- Remove potentially harmful scriptlet (bsc#1154167). Documented
  transition case in the maintainer README. Unlikely enough. The
  versions that have not transitioned yet would be broken for more
  than two years now.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432001">- Update maintainer file and package description, remove features
  that are better described in the (upstream maintained) man page.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1600084800">- Reenable nginx subpackage for factory</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1605787200">- dehydrated-apache2: Check for mod_compat (bsc#1178927)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1607601600">- Update to dehydrated 0.7.0 (JSC#SLE-15909)
  Added
    Support for external account bindings
    Special support for ZeroSSL
    Support presets for some CAs instead of requiring URLs
    Allow requesting preferred chain (--preferred-chain)
    Added method to show CAs current terms of service (--display-terms)
    Allow setting path to domains.txt using cli arguments (--domains-txt)
    Added new cli command --cleanupdelete which deletes old files instead of archiving them
  Fixed
    No more silent failures on broken hook-scripts
    Better error-handling with KEEP_GOING enabled
    Check actual order status instead of assuming it's valid
    Don't include keyAuthorization in challenge validation (RFC compliance)
  Changed
    Using EC secp384r1 as default certificate type
    Use JSON.sh to parse JSON
    Use account URL instead of account ID (RFC compliance)
    Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
    Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
    Cleanup now also removes dangling symlinks</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1614772800">- Clarified new default settings. KEY_ALGO=secp384r1. Please consult
  README.maintainer for details and how to return to RSA-based certificate
  issuance. (jsc#ECO-3435, jsc#SLE-15909)
- Added a note about ACMEv1 deprecation
- Added a note on new ACME providers and the new non-URL provider syntax
  See README.maintainer for details.</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1615723200">- Add directory where cleanup can archive unused certificates</changelog>
</package>
<package pkgid="3ea1837f3b31605e54428568bb1eb33433ce5a6e215981ebb6efd86f9d9e2fe3" name="dehydrated-nginx" arch="noarch">
  <version epoch="0" ver="0.7.0" rel="lp152.3.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1565438400">- Behavioral change: Use cron only for older RHEL/CentOS versions
  (along with SLE &lt; 12.0). Everything else now uses systemd.
  Please adopt accordingly! Refer to README.md for</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- Drop systemd BuildRequires: pkgconfig(systemd) is already in
  place and is synonymous.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1588766400">- Removed lighttpd 1.x integration package. If you still would like
  to use lighttpd with dehydrated, follow the instructions in the
  README.maintainers file.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432000">- Remove potentially harmful scriptlet (bsc#1154167). Documented
  transition case in the maintainer README. Unlikely enough. The
  versions that have not transitioned yet would be broken for more
  than two years now.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432001">- Update maintainer file and package description, remove features
  that are better described in the (upstream maintained) man page.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1600084800">- Reenable nginx subpackage for factory</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1605787200">- dehydrated-apache2: Check for mod_compat (bsc#1178927)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1607601600">- Update to dehydrated 0.7.0 (JSC#SLE-15909)
  Added
    Support for external account bindings
    Special support for ZeroSSL
    Support presets for some CAs instead of requiring URLs
    Allow requesting preferred chain (--preferred-chain)
    Added method to show CAs current terms of service (--display-terms)
    Allow setting path to domains.txt using cli arguments (--domains-txt)
    Added new cli command --cleanupdelete which deletes old files instead of archiving them
  Fixed
    No more silent failures on broken hook-scripts
    Better error-handling with KEEP_GOING enabled
    Check actual order status instead of assuming it's valid
    Don't include keyAuthorization in challenge validation (RFC compliance)
  Changed
    Using EC secp384r1 as default certificate type
    Use JSON.sh to parse JSON
    Use account URL instead of account ID (RFC compliance)
    Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
    Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
    Cleanup now also removes dangling symlinks</changelog>
</package>
<package pkgid="6a60a49e7bef19443ba49cbbc4077cdb1d670414b13b0d442961194195592cc7" name="dehydrated-nginx" arch="noarch">
  <version epoch="0" ver="0.7.0" rel="lp152.3.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1565438400">- Behavioral change: Use cron only for older RHEL/CentOS versions
  (along with SLE &lt; 12.0). Everything else now uses systemd.
  Please adopt accordingly! Refer to README.md for</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- Drop systemd BuildRequires: pkgconfig(systemd) is already in
  place and is synonymous.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1587384000">- Fix lighttpd config file (boo#1169834)
- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1588766400">- Removed lighttpd 1.x integration package. If you still would like
  to use lighttpd with dehydrated, follow the instructions in the
  README.maintainers file.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432000">- Remove potentially harmful scriptlet (bsc#1154167). Documented
  transition case in the maintainer README. Unlikely enough. The
  versions that have not transitioned yet would be broken for more
  than two years now.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1593432001">- Update maintainer file and package description, remove features
  that are better described in the (upstream maintained) man page.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1600084800">- Reenable nginx subpackage for factory</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1605787200">- dehydrated-apache2: Check for mod_compat (bsc#1178927)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1607601600">- Update to dehydrated 0.7.0 (JSC#SLE-15909)
  Added
    Support for external account bindings
    Special support for ZeroSSL
    Support presets for some CAs instead of requiring URLs
    Allow requesting preferred chain (--preferred-chain)
    Added method to show CAs current terms of service (--display-terms)
    Allow setting path to domains.txt using cli arguments (--domains-txt)
    Added new cli command --cleanupdelete which deletes old files instead of archiving them
  Fixed
    No more silent failures on broken hook-scripts
    Better error-handling with KEEP_GOING enabled
    Check actual order status instead of assuming it's valid
    Don't include keyAuthorization in challenge validation (RFC compliance)
  Changed
    Using EC secp384r1 as default certificate type
    Use JSON.sh to parse JSON
    Use account URL instead of account ID (RFC compliance)
    Dehydrated now has a new home: https://github.com/dehydrated-io/dehydrated
    Added OCSP_FETCH and OCSP_DAYS to per-certificate configurable options
    Cleanup now also removes dangling symlinks</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1614772800">- Clarified new default settings. KEY_ALGO=secp384r1. Please consult
  README.maintainer for details and how to return to RSA-based certificate
  issuance. (jsc#ECO-3435, jsc#SLE-15909)
- Added a note about ACMEv1 deprecation
- Added a note on new ACME providers and the new non-URL provider syntax
  See README.maintainer for details.</changelog>
  <changelog author="Olav Reinert &lt;seroton10@gmail.com&gt;" date="1615723200">- Add directory where cleanup can archive unused certificates</changelog>
</package>
<package pkgid="27ff6eca0a281b9173f1e0f9187f70f5d0bdedfe32588329400b2402dc456a4c" name="deja-dup" arch="src">
  <version epoch="0" ver="40.6" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498737600">- Fix obvious typo } instead of )</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 35.6:
  + Fix a potential memory leak in the monitor daemon and few other
    bugs.
- Changes from version 35.5:
  + Improve on-the-fly dependency installation and fixes a few
    other interaction bugs.
- Changes from version 35.4:
  + Add support for GNOME Online Accounts and cleans up the
    interface a bit.
- Changes from version 35.3:
  + Fix some bugs around unicode filenames and network access.
- Changes from version 35.2:
  + Fix a crash we cause in nautilus with our extension.
- Changes from version 35.1:
  + Fix a header-color bug introduced in the previous release and
    also try to fix a long-standing bug around backup/restore
    buttons being disabled too often.
- Changes from version 35.0:
  + Modernize the code base in a few ways that make the experience
    better in GNOME 3.
- Add meson BuildRequires and switch cmake macros cmake, make and
  cmake_install to meson, meson_build and meson_install following
  upstream switch to Meson build system.
- Drop intltool BuildRequires: No longer needed.
- Add libgpg-error-devel, pkgconfig(appstream-builder) and
  pkgconfig(goa-1.0) BuildRequires: New dependencies.
- Drop deja-dup-vala-0.36.patch: Fixed upstream.
- Drop deja-dup-help2man_stderr.patch: No longer needed after the
  port to meson.
- Drop handling of localized man pages in install section, no
  longer needed.
- Drop suse_update_desktop files macros, no longer needed.
- Drop obsolete post(un) handling of following macros:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 36.0:
  + data: Don't depend on bash.
  + BackendRemote:
  - Guard against returning a null GFile if we can't find mount.
  - Handle the user specifying a non-utf8 folder.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add deja-dup-fix-setting-drive-volume.patch: BackendDrive: Fix
  setting a drive volume (lp#1717230).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1506772800">- Update to version 36.1:
  + Fix backing up to external drives.
  + Updated translations.
- Drop deja-dup-fix-setting-drive-volume.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1508500800">- Update to version 36.2:
  + Fix crash when trying to restore missing files.
  + Fix the UI from freezing for a second when mounting the
    backend location.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 36.3:
  + Fix the restore dialog sometimes being blank.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 37.1:
  + Add new Google Drive backend and make it the new default
    backend.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/DejaDup: current Deja
  Dup's GNOME web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop %glib2_gsettings_schema_requires macro: it's no longer
  needed since RPM File Triggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523620800">- Update to version 38.0:
  + Drop ulimit for monitor process, it was causing crashes.
  + Fix autoscrolling in progress window.
  + Exclude snap cache directories by default.
  + Updated translations.
- Add gio-2.0, gio-unix-2.0 and goa-backend-1.0 pkgconfig modules
  and glib2-tools package BuildRequires to avoid implicit
  dependencies.
- Replace pkgconfig(appstream-builder), dbus-1-x11, update-desktop\
  - files and perl-gettext BuildRequires with appstream-glib, dbus-\
  1, desktop-file-utils and gettext-runtime respectively, what
  meson really looks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 38.2:
  + Fix not being able to find the backup files when restoring on
    a fresh install.
- Changes from version 38.1:
  + Use a primary menu instead of an AppMenu, per current GNOME
    recommendations.
  + Drop support for the legacy desktop status icon.
  + Updated translations.
- Drop meson version fix via sed in spec, no longer needed.
- Stop exporting optflags and rpath before configure, no longer
  needed.
- Renable meson test, tests are now ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547726400">- Update to version 38.3:
  + Allow restoring from paths with symlinks in more situations
    (including a fix for a backup error when ~/.cache is a
    symlink).
  + Treat operation dialogs more like real dialogs (modal to
    preference window, with correct styling on default buttons).
  + Try harder to stop running duplicity commands when we are
    terminated.
  + Don't hide an error message when also running our bimonthly
    backup verification.
  + If there isn't enough space in the backup location, tell the
    user how much is needed.
  + Exclude flatpak cache directories by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549800000">- Add deja-dup-fix-build-vala043.patch: Fix build with new vala
  0.43.x.
- Disable meson_test, currently fails.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551182400">- Update to version 38.4:
  + Update app icon.
  + Don't run monitor when automatic backups are disabled.
  + Drop libpeas dependency.
  + Fix compilation with valac 0.43.
  + Be more forgiving if packagekit is unresponsive.
  + Updated translations.
- Drop deja-dup-fix-build-vala043.patch: Fixed upstream.
- Drop pkgconfig(libpeas-1.0) BuildRequires: No longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562328000">- Update to version 40.1:
  + Fix versioning to be correct.
- Changes from version 40.0:
  + Fix tests when run under glib 2.60
  + Updated translations.
- Changes from version 39.1:
  + Fix a bug that could have caused backups to be encrypted with
    two different passwords in some cases. This would result in
    difficulty backing up or restoring by not accepting the
    password you expected it to.
  + Fix a bug that caused duplicate save or exclude folders to
    appear in the preferences.
  + Delete a canary file that duplicity's pydrive puts in your
    Drive.
  + If you don't ask for your password to be saved, we now clear
    out any older saved password.
  + Finally delete the ancient Ubuntu One backend code.
- Changes from version 39.0:
  + Switch away from GNOME Online Accounts to our own cloud keys:
  - It was brought to our attention that we shouldn't be using
    GNOME's keys, as they are intended for GNOME only.
  - Google accounts will have to be re-authenticated with our
    keys.
  - Nextcloud accounts will now appear as webdav network server
    accounts.
  - Adds new pydrive_pkgs option to list the package names needed
    for the pydrive duplicity backend (for now, the system
    package that provides the pydrive python2 package should
    suffice).
  - Adds new google_client_id option if you want to override our
    default account key and use your own. You likely won't want
    to do this.
  - Adds new dependencies on libjson-glib and libsoup.
  - Drops libgoa-backend dependency. The libgoa dependency will
    stay during a transition period from the old keys to the new
    keys.
  + Unmount a remote backup location when we are done with it, if
    we originally mounted it.
- Add pkgconfig(json-glib-1.0) and pkgconfig(libsoup-2.4)
  BuildRequires: New dependencies.
- Drop pkgconfig(goa-backend-1.0) BuildRequires: No longer needed,
  nor used.
- Reenable meson_tests, upstream fixed the issues.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Add deja-dup-duplicity-Mark-GPGError-extern.patch: Mark GPGError
  as extern and prevent GPG symbols to be public API. Also fixes
  building with new vala.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1579176000">- Update to 40.6:
  + Fixes a bug that prevented backing up to Google Drive accounts
    with unlimited quotas
  + Fix a bug that prevented backing up to Google Drive in some
    rare situations
  + Fix a bug that prevented the first login to Google Drive
  + Fix a bug that prevented resuming a full backup
  + Fix 2038 date problems by using 64-bit dates internally
  + Fix building against valac 0.45.2 and later
  + Add optional dependency on libgdk-x11-3.0 (only used in flatpak
    builds)
  + Make libgoa-1.0 an optional dependency (still recommended for a
    few years though)
  + Support autostarting via the new Background portal
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1579176001">- Add meson version to spec file
- Drop deja-dup-duplicity-Mark-GPGError-extern.patch: Fixed
  upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1623758400">- Up duplicity dependency to Requires: deja-dup cannot run without
  it (boo#1187256).</changelog>
</package>
<package pkgid="edcae302ab3364fc143368069058f6007331cbdcd131e4f9ef0610ca2304cb4d" name="deja-dup" arch="x86_64">
  <version epoch="0" ver="40.6" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498737600">- Fix obvious typo } instead of )</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 35.6:
  + Fix a potential memory leak in the monitor daemon and few other
    bugs.
- Changes from version 35.5:
  + Improve on-the-fly dependency installation and fixes a few
    other interaction bugs.
- Changes from version 35.4:
  + Add support for GNOME Online Accounts and cleans up the
    interface a bit.
- Changes from version 35.3:
  + Fix some bugs around unicode filenames and network access.
- Changes from version 35.2:
  + Fix a crash we cause in nautilus with our extension.
- Changes from version 35.1:
  + Fix a header-color bug introduced in the previous release and
    also try to fix a long-standing bug around backup/restore
    buttons being disabled too often.
- Changes from version 35.0:
  + Modernize the code base in a few ways that make the experience
    better in GNOME 3.
- Add meson BuildRequires and switch cmake macros cmake, make and
  cmake_install to meson, meson_build and meson_install following
  upstream switch to Meson build system.
- Drop intltool BuildRequires: No longer needed.
- Add libgpg-error-devel, pkgconfig(appstream-builder) and
  pkgconfig(goa-1.0) BuildRequires: New dependencies.
- Drop deja-dup-vala-0.36.patch: Fixed upstream.
- Drop deja-dup-help2man_stderr.patch: No longer needed after the
  port to meson.
- Drop handling of localized man pages in install section, no
  longer needed.
- Drop suse_update_desktop files macros, no longer needed.
- Drop obsolete post(un) handling of following macros:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 36.0:
  + data: Don't depend on bash.
  + BackendRemote:
  - Guard against returning a null GFile if we can't find mount.
  - Handle the user specifying a non-utf8 folder.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add deja-dup-fix-setting-drive-volume.patch: BackendDrive: Fix
  setting a drive volume (lp#1717230).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1506772800">- Update to version 36.1:
  + Fix backing up to external drives.
  + Updated translations.
- Drop deja-dup-fix-setting-drive-volume.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1508500800">- Update to version 36.2:
  + Fix crash when trying to restore missing files.
  + Fix the UI from freezing for a second when mounting the
    backend location.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 36.3:
  + Fix the restore dialog sometimes being blank.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 37.1:
  + Add new Google Drive backend and make it the new default
    backend.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/DejaDup: current Deja
  Dup's GNOME web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop %glib2_gsettings_schema_requires macro: it's no longer
  needed since RPM File Triggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523620800">- Update to version 38.0:
  + Drop ulimit for monitor process, it was causing crashes.
  + Fix autoscrolling in progress window.
  + Exclude snap cache directories by default.
  + Updated translations.
- Add gio-2.0, gio-unix-2.0 and goa-backend-1.0 pkgconfig modules
  and glib2-tools package BuildRequires to avoid implicit
  dependencies.
- Replace pkgconfig(appstream-builder), dbus-1-x11, update-desktop\
  - files and perl-gettext BuildRequires with appstream-glib, dbus-\
  1, desktop-file-utils and gettext-runtime respectively, what
  meson really looks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 38.2:
  + Fix not being able to find the backup files when restoring on
    a fresh install.
- Changes from version 38.1:
  + Use a primary menu instead of an AppMenu, per current GNOME
    recommendations.
  + Drop support for the legacy desktop status icon.
  + Updated translations.
- Drop meson version fix via sed in spec, no longer needed.
- Stop exporting optflags and rpath before configure, no longer
  needed.
- Renable meson test, tests are now ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547726400">- Update to version 38.3:
  + Allow restoring from paths with symlinks in more situations
    (including a fix for a backup error when ~/.cache is a
    symlink).
  + Treat operation dialogs more like real dialogs (modal to
    preference window, with correct styling on default buttons).
  + Try harder to stop running duplicity commands when we are
    terminated.
  + Don't hide an error message when also running our bimonthly
    backup verification.
  + If there isn't enough space in the backup location, tell the
    user how much is needed.
  + Exclude flatpak cache directories by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549800000">- Add deja-dup-fix-build-vala043.patch: Fix build with new vala
  0.43.x.
- Disable meson_test, currently fails.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551182400">- Update to version 38.4:
  + Update app icon.
  + Don't run monitor when automatic backups are disabled.
  + Drop libpeas dependency.
  + Fix compilation with valac 0.43.
  + Be more forgiving if packagekit is unresponsive.
  + Updated translations.
- Drop deja-dup-fix-build-vala043.patch: Fixed upstream.
- Drop pkgconfig(libpeas-1.0) BuildRequires: No longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562328000">- Update to version 40.1:
  + Fix versioning to be correct.
- Changes from version 40.0:
  + Fix tests when run under glib 2.60
  + Updated translations.
- Changes from version 39.1:
  + Fix a bug that could have caused backups to be encrypted with
    two different passwords in some cases. This would result in
    difficulty backing up or restoring by not accepting the
    password you expected it to.
  + Fix a bug that caused duplicate save or exclude folders to
    appear in the preferences.
  + Delete a canary file that duplicity's pydrive puts in your
    Drive.
  + If you don't ask for your password to be saved, we now clear
    out any older saved password.
  + Finally delete the ancient Ubuntu One backend code.
- Changes from version 39.0:
  + Switch away from GNOME Online Accounts to our own cloud keys:
  - It was brought to our attention that we shouldn't be using
    GNOME's keys, as they are intended for GNOME only.
  - Google accounts will have to be re-authenticated with our
    keys.
  - Nextcloud accounts will now appear as webdav network server
    accounts.
  - Adds new pydrive_pkgs option to list the package names needed
    for the pydrive duplicity backend (for now, the system
    package that provides the pydrive python2 package should
    suffice).
  - Adds new google_client_id option if you want to override our
    default account key and use your own. You likely won't want
    to do this.
  - Adds new dependencies on libjson-glib and libsoup.
  - Drops libgoa-backend dependency. The libgoa dependency will
    stay during a transition period from the old keys to the new
    keys.
  + Unmount a remote backup location when we are done with it, if
    we originally mounted it.
- Add pkgconfig(json-glib-1.0) and pkgconfig(libsoup-2.4)
  BuildRequires: New dependencies.
- Drop pkgconfig(goa-backend-1.0) BuildRequires: No longer needed,
  nor used.
- Reenable meson_tests, upstream fixed the issues.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Add deja-dup-duplicity-Mark-GPGError-extern.patch: Mark GPGError
  as extern and prevent GPG symbols to be public API. Also fixes
  building with new vala.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1579176000">- Update to 40.6:
  + Fixes a bug that prevented backing up to Google Drive accounts
    with unlimited quotas
  + Fix a bug that prevented backing up to Google Drive in some
    rare situations
  + Fix a bug that prevented the first login to Google Drive
  + Fix a bug that prevented resuming a full backup
  + Fix 2038 date problems by using 64-bit dates internally
  + Fix building against valac 0.45.2 and later
  + Add optional dependency on libgdk-x11-3.0 (only used in flatpak
    builds)
  + Make libgoa-1.0 an optional dependency (still recommended for a
    few years though)
  + Support autostarting via the new Background portal
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1579176001">- Add meson version to spec file
- Drop deja-dup-duplicity-Mark-GPGError-extern.patch: Fixed
  upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1623758400">- Up duplicity dependency to Requires: deja-dup cannot run without
  it (boo#1187256).</changelog>
</package>
<package pkgid="10ce1d1e53b5211d7bea339f7b0c8035802e875c8ffd5ff4ce9952abfea0d9a1" name="deja-dup-lang" arch="noarch">
  <version epoch="0" ver="40.6" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498737600">- Fix obvious typo } instead of )</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 35.6:
  + Fix a potential memory leak in the monitor daemon and few other
    bugs.
- Changes from version 35.5:
  + Improve on-the-fly dependency installation and fixes a few
    other interaction bugs.
- Changes from version 35.4:
  + Add support for GNOME Online Accounts and cleans up the
    interface a bit.
- Changes from version 35.3:
  + Fix some bugs around unicode filenames and network access.
- Changes from version 35.2:
  + Fix a crash we cause in nautilus with our extension.
- Changes from version 35.1:
  + Fix a header-color bug introduced in the previous release and
    also try to fix a long-standing bug around backup/restore
    buttons being disabled too often.
- Changes from version 35.0:
  + Modernize the code base in a few ways that make the experience
    better in GNOME 3.
- Add meson BuildRequires and switch cmake macros cmake, make and
  cmake_install to meson, meson_build and meson_install following
  upstream switch to Meson build system.
- Drop intltool BuildRequires: No longer needed.
- Add libgpg-error-devel, pkgconfig(appstream-builder) and
  pkgconfig(goa-1.0) BuildRequires: New dependencies.
- Drop deja-dup-vala-0.36.patch: Fixed upstream.
- Drop deja-dup-help2man_stderr.patch: No longer needed after the
  port to meson.
- Drop handling of localized man pages in install section, no
  longer needed.
- Drop suse_update_desktop files macros, no longer needed.
- Drop obsolete post(un) handling of following macros:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 36.0:
  + data: Don't depend on bash.
  + BackendRemote:
  - Guard against returning a null GFile if we can't find mount.
  - Handle the user specifying a non-utf8 folder.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add deja-dup-fix-setting-drive-volume.patch: BackendDrive: Fix
  setting a drive volume (lp#1717230).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1506772800">- Update to version 36.1:
  + Fix backing up to external drives.
  + Updated translations.
- Drop deja-dup-fix-setting-drive-volume.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1508500800">- Update to version 36.2:
  + Fix crash when trying to restore missing files.
  + Fix the UI from freezing for a second when mounting the
    backend location.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 36.3:
  + Fix the restore dialog sometimes being blank.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 37.1:
  + Add new Google Drive backend and make it the new default
    backend.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/DejaDup: current Deja
  Dup's GNOME web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop %glib2_gsettings_schema_requires macro: it's no longer
  needed since RPM File Triggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523620800">- Update to version 38.0:
  + Drop ulimit for monitor process, it was causing crashes.
  + Fix autoscrolling in progress window.
  + Exclude snap cache directories by default.
  + Updated translations.
- Add gio-2.0, gio-unix-2.0 and goa-backend-1.0 pkgconfig modules
  and glib2-tools package BuildRequires to avoid implicit
  dependencies.
- Replace pkgconfig(appstream-builder), dbus-1-x11, update-desktop\
  - files and perl-gettext BuildRequires with appstream-glib, dbus-\
  1, desktop-file-utils and gettext-runtime respectively, what
  meson really looks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 38.2:
  + Fix not being able to find the backup files when restoring on
    a fresh install.
- Changes from version 38.1:
  + Use a primary menu instead of an AppMenu, per current GNOME
    recommendations.
  + Drop support for the legacy desktop status icon.
  + Updated translations.
- Drop meson version fix via sed in spec, no longer needed.
- Stop exporting optflags and rpath before configure, no longer
  needed.
- Renable meson test, tests are now ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547726400">- Update to version 38.3:
  + Allow restoring from paths with symlinks in more situations
    (including a fix for a backup error when ~/.cache is a
    symlink).
  + Treat operation dialogs more like real dialogs (modal to
    preference window, with correct styling on default buttons).
  + Try harder to stop running duplicity commands when we are
    terminated.
  + Don't hide an error message when also running our bimonthly
    backup verification.
  + If there isn't enough space in the backup location, tell the
    user how much is needed.
  + Exclude flatpak cache directories by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549800000">- Add deja-dup-fix-build-vala043.patch: Fix build with new vala
  0.43.x.
- Disable meson_test, currently fails.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551182400">- Update to version 38.4:
  + Update app icon.
  + Don't run monitor when automatic backups are disabled.
  + Drop libpeas dependency.
  + Fix compilation with valac 0.43.
  + Be more forgiving if packagekit is unresponsive.
  + Updated translations.
- Drop deja-dup-fix-build-vala043.patch: Fixed upstream.
- Drop pkgconfig(libpeas-1.0) BuildRequires: No longer needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562328000">- Update to version 40.1:
  + Fix versioning to be correct.
- Changes from version 40.0:
  + Fix tests when run under glib 2.60
  + Updated translations.
- Changes from version 39.1:
  + Fix a bug that could have caused backups to be encrypted with
    two different passwords in some cases. This would result in
    difficulty backing up or restoring by not accepting the
    password you expected it to.
  + Fix a bug that caused duplicate save or exclude folders to
    appear in the preferences.
  + Delete a canary file that duplicity's pydrive puts in your
    Drive.
  + If you don't ask for your password to be saved, we now clear
    out any older saved password.
  + Finally delete the ancient Ubuntu One backend code.
- Changes from version 39.0:
  + Switch away from GNOME Online Accounts to our own cloud keys:
  - It was brought to our attention that we shouldn't be using
    GNOME's keys, as they are intended for GNOME only.
  - Google accounts will have to be re-authenticated with our
    keys.
  - Nextcloud accounts will now appear as webdav network server
    accounts.
  - Adds new pydrive_pkgs option to list the package names needed
    for the pydrive duplicity backend (for now, the system
    package that provides the pydrive python2 package should
    suffice).
  - Adds new google_client_id option if you want to override our
    default account key and use your own. You likely won't want
    to do this.
  - Adds new dependencies on libjson-glib and libsoup.
  - Drops libgoa-backend dependency. The libgoa dependency will
    stay during a transition period from the old keys to the new
    keys.
  + Unmount a remote backup location when we are done with it, if
    we originally mounted it.
- Add pkgconfig(json-glib-1.0) and pkgconfig(libsoup-2.4)
  BuildRequires: New dependencies.
- Drop pkgconfig(goa-backend-1.0) BuildRequires: No longer needed,
  nor used.
- Reenable meson_tests, upstream fixed the issues.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Add deja-dup-duplicity-Mark-GPGError-extern.patch: Mark GPGError
  as extern and prevent GPG symbols to be public API. Also fixes
  building with new vala.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1579176000">- Update to 40.6:
  + Fixes a bug that prevented backing up to Google Drive accounts
    with unlimited quotas
  + Fix a bug that prevented backing up to Google Drive in some
    rare situations
  + Fix a bug that prevented the first login to Google Drive
  + Fix a bug that prevented resuming a full backup
  + Fix 2038 date problems by using 64-bit dates internally
  + Fix building against valac 0.45.2 and later
  + Add optional dependency on libgdk-x11-3.0 (only used in flatpak
    builds)
  + Make libgoa-1.0 an optional dependency (still recommended for a
    few years though)
  + Support autostarting via the new Background portal
  + Updated translations.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1579176001">- Add meson version to spec file
- Drop deja-dup-duplicity-Mark-GPGError-extern.patch: Fixed
  upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1623758400">- Up duplicity dependency to Requires: deja-dup cannot run without
  it (boo#1187256).</changelog>
</package>
<package pkgid="3e822efce2a2a6731d42487a053368fe4152b8f73464f81923e0c71141a50fea" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.12.1"/>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
</package>
<package pkgid="452d5a3a84cada2acbce4e93e3df8062e533c816f76f68edcc56f40698bb6d07" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.12.1"/>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
</package>
<package pkgid="7b0c5a117b00c9374edf3b2721d69fae0ede14b48d76a6351934323eb3be84ae" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.15.1"/>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
</package>
<package pkgid="22a18602c556d7768a0fb8502ef455ac6ed8fae71c77212e78c33f2e26512f58" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.15.1"/>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
</package>
<package pkgid="ba5f9d4e5f71d2770323311619f2c2347694fd6ffdee3c16dcb696c929476abb" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.18.1"/>
  <changelog author="heming.zhao@suse.com" date="1568030400">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
</package>
<package pkgid="03af90656db90ebbd8171abb6e9a9626739371232da54b5197ad59e4c9a2101e" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.18.1"/>
  <changelog author="heming.zhao@suse.com" date="1568030400">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
</package>
<package pkgid="b38eff10f93c354ded6ed25f546088c111a58e097c5d0f1c7c8549e63fe03fbc" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.21.1"/>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
</package>
<package pkgid="c54bcdac757f7e897aff3992643f615c6c6ea8fb5c6e58587e05d1d4d61b5162" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.21.1"/>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
</package>
<package pkgid="444e4582c9f1c396147430892c3d0ce9885d0ed61aa2fbe871d7d87516239999" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.24.1"/>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
</package>
<package pkgid="e6c373d3d83098d2b355cf30041fc6039e6d20a9f9e0f0e45414c254e71d9859" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.24.1"/>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
</package>
<package pkgid="57cc99c94d021ef55ee56a41590d13d47bbc2371ffaf2ed44b70dea8e2b14bac" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.27.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="cd5d3824a491366a51bd5d3ea050d4759d10b6d69556165619407582d141002a" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.27.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="b1dd8fdda0651d7ff25834782b9591c7c5125e72750f0c795d4d2e979ae3f38a" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.3.1"/>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
</package>
<package pkgid="ac79e13569c403781c85c15e485809e31ff9089a6e2c9071c0720436fb8e502a" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.3.1"/>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
</package>
<package pkgid="740cefcfef4f89063e8779cd819a79ab55535a66bae4f96001501c49eb928c98" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.30.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
</package>
<package pkgid="6e6605e510ef36dfb9995f43e5b3e021373e08fbae6cf57b8bd76edd9d6c6bf2" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.30.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
</package>
<package pkgid="029ab5ada3a560b9094445db7dbf3b8f572ccdb2981eace4d9e677d77e2b94f4" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.6.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
</package>
<package pkgid="b486db6232cc21bc64caee3f7b00dc9cb9aa0209ae63b3277620391531dd05d9" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.6.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
</package>
<package pkgid="bdfbbe239f231a1f3cc7291656afcff736a8ac2a1235ea42234b9cb4ddb4e0fe" name="device-mapper" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.9.1"/>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
</package>
<package pkgid="2c9ee12740f084dc86feab5ef891e0e83380a3d7a26219df0f11f7af0fad0ff0" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.9.1"/>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
</package>
<package pkgid="91b62a47fe02be1c011939affdf2cf97a97a4ecbc65fa4532b1a87fec3f6c71a" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.12.1"/>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
</package>
<package pkgid="622c601f5c94f4f9aee5017f57657cb29c7f1d7311839ea7f2369dfe8efe650b" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.12.1"/>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
</package>
<package pkgid="4dfa3933313f0fc985e2c3ec64ee6d5ad0990987bd1709aeaa53fd6c21d30707" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.15.1"/>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
</package>
<package pkgid="86ed6a38c8e9aa9da7868997515104b1eca3a89197ffcfff7cd93a7f6fce8ebd" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.15.1"/>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
</package>
<package pkgid="541b58264a75b0c6c1dd168554f5e284e3c25c3f8f92a641def437b8922cf8b1" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.18.1"/>
  <changelog author="heming.zhao@suse.com" date="1568030400">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
</package>
<package pkgid="b4a0c4bb13ae3a41b158face8e309d619fab851d5d94387b14a7de993eee188f" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.18.1"/>
  <changelog author="heming.zhao@suse.com" date="1568030400">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
</package>
<package pkgid="1bdc21872166f22f4b6fccaba7823e54f341d932c8d667c652a7f07b074a518f" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.21.1"/>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
</package>
<package pkgid="3b80c0ccbc93c4d1646b4856da2595a90e76aed8f55c17d56bde897634fd84ad" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.21.1"/>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
</package>
<package pkgid="9a4d99eca7053aaede9cdd5b35f6c43969ce89f0b838fafdccfa17efbb737714" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.24.1"/>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
</package>
<package pkgid="54cad6e613ad936fd6287ee0ba03fa3c273b6198d96f6a9a0abf4d5d1707412e" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.24.1"/>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
</package>
<package pkgid="51a3f28b14a9158616ca05913caf2e3183ad7785a82bacc145f1ba6d45ba3b7f" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.27.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="d18eaddcc2c298868003b20f0ce71fcefba0a992fa7ca43e739ab833976adbbd" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.27.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="45877ca9a544eab310201c463b89a1623fd7e90801d78d844cbd6608115b77c8" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.3.1"/>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
</package>
<package pkgid="662acfb3818927bc8c1d3afd66e38746412cb5dcaf58c78a67be86e9816f9f4e" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.3.1"/>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
</package>
<package pkgid="f0248f6c6e72ae26f5cf03b70631f0730d21bf7de3620922d5195442c387bc70" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.30.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
</package>
<package pkgid="75a88395ba57f6e8012b5750719d8bce995452aee72a8d7a858bbeef6b10041c" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.30.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
</package>
<package pkgid="f7ef35ae082cc15df7e00e3c67f963bcfd25a3900a1829304be905aea4bd34c9" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.6.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
</package>
<package pkgid="98ab1550a7e40f322c3c055339bfde78b8ba0115b059c8a85da86622940c44c0" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.6.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
</package>
<package pkgid="bc3a9588f4409a03fa9da5936546f8fc23bf141f4dc0e4fbfa1be7266696919a" name="device-mapper-devel" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.9.1"/>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
</package>
<package pkgid="599135a03232d1d9f9cd708d6ce36099fd23c3e9dcdb1af5f110a9da733b6a64" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.9.1"/>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
</package>
<package pkgid="23528c78800ce142e03dc1768fbb2942eac9f0860aef2812388a9eb37d417443" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.12.1"/>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
</package>
<package pkgid="795451f66e249481520241dc2b3e0b297cbcd360976bb92849c9ec1ecfe0c729" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.15.1"/>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
</package>
<package pkgid="0746fa1a16f2856992abb67fed6baf18b1d21a490cf66c57444cc79cb2e3de6b" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.18.1"/>
  <changelog author="heming.zhao@suse.com" date="1568030400">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
</package>
<package pkgid="ffa1895f5e6c759e70b19ee7484db2b363653e089da6745da35630c16746329c" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.21.1"/>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
</package>
<package pkgid="0e68f4b5a67da64b2675d7de9952fa05427126eb78cba99a85701d9eea85afb0" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.24.1"/>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
</package>
<package pkgid="ac3d2e10efe12afef479b345cda8c695451a55def06b5d787cc4d55cc7554d35" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.27.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="3db008fcfecb9e7eac833edc19e54e26e9e3b2665e93ca2cfeec11d63b099ed1" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.3.1"/>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
</package>
<package pkgid="f56b8a83bf31f2485d3f4a86197a9a1ac6949835edda34365ae831f3ccd7e005" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.30.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
</package>
<package pkgid="4cdcd83e8239e371a22da52828b5d7e4a74318feb46307d69313562e0bdfd0e3" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.6.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
</package>
<package pkgid="9cc5c0c0b7ebd71fdf07eedbf83f4f0fff6d29f7738f2f6c864de41b48b136d6" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.9.1"/>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
</package>
<package pkgid="40a9850101c7f2c3545979ea587a01b7f763cf27cd3b0094a1160fb5421bf886" name="devscripts" arch="i586">
  <version epoch="0" ver="2.19.5" rel="lp152.4.3.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5 bsc#1174163:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="fca25c8a7d851a667ec2c644ddb24f18ee7d0946b0b367143d415d1e7f81178c" name="devscripts" arch="src">
  <version epoch="0" ver="2.19.5" rel="lp152.4.3.1"/>
  <changelog author="frank.lichtenheld@sophos.com" date="1322308800">- update to dpkg-1.15.8.11
  * Do not segfault on "dpkg -i --no-act".
  * Fix typo in "dpkg-name --overwrite" argument parsing so that it actually
  works at all. Ubuntu Bug #728708
  * Fix dpkg-split to not corrupt binary part metadata when generating the
  split packages on 32-bit systems.
  * Fix a regression in dpkg-divert where using --rename led to a failure when
  the rename implies crossing file systems.</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1327838400">- update to dpkg-1.15.8.12
  * Do not fail to unpack shared directories missing on the file system
  from packages being replaced by other packages. Debian Bug #631808
  * Defer hardlink renames so that there's never a point were the new
  file contents are accessible from the final path before they have
  been fsync()ed and cannot be executed causing ETXTBSY when trying
  to open the to be installed paths for writing. Debian Bug #635683
  * Add armhf support to ostable and triplettable.
  Debian Bugs #594179, #639674</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1336046400">- install missing parts of devscripts
  * install man pages installed by debian/manpages
  * install symlinks installed by debian/links</changelog>
  <changelog author="i@marguerite.su" date="1337601600">- update to dpkg-1.16.3
  * see http://packages.debian.org/changelogs/pool/main/d/dpkg/dpkg_1.16.3/changelog
- update to debhelper 9.20120518
  * Fix versioned dependency on dpkg for xz options. Closes: #672895
  * dh_link: Doc improvement. Closes: #672988
- update to devscripts-2.11.7
  * see http://packages.debian.org/changelogs/pool/main/d/devscripts/devscripts_2.11.7/changelog
- reworked patch. remove version for archtable. for it's universal.
- add dh_make 0.60
  * see http://packages.debian.org/changelogs/pool/main/d/dh-make/dh-make_0.60/changelog
- add dh_autoreconf 6
  * see http://packages.debian.org/changelogs/pool/main/d/dh-autoreconf/dh-autoreconf_6/changelog</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1340712000">- package devscripts separately</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1340712001">- fix build on Fedora
  * fix path to XSL stylesheets
  * build require dpkg-devel since dpkg-parsechangelog
  is in there in Fedora
  * do not pretend that the Makefile honors %_libexecdir
- fix scripts that use File::Path on SLE 11</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1341576000">- no need to depend on a specific perl version</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1348747200">- update to devscripts-2.12.4
  * dget: Fix CVE-2012-2241 (arbitrary file deletion)
  * dscverify: Fix CVE-2012-2240 (arbitrary code execution)
  * annotate-output: Fix to prevent symlink attack: don't delete
  safely-created file and reuse its name.  Instead, create temporary
  directory and create FIFOs therein.  Also, be sure to remove temporaries
  upon catchable signal.  Fixes CVE-2012-3500.
  * debdiff: Fix regression in exit code, introduced in 2.11.4.
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1349438400">- extend License header according to review. (bnc#783729)
- add debian/changelog and debian/copyright to package</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5 bsc#1174163:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="b0b0969aaed7f1aacb773e622a3cbf0f9da0da98c8e989193ff54740c01c0c0a" name="devscripts" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="lp152.4.3.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5 bsc#1174163:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="d79f647504c80e2209e83dce84f74e95392c95f18a540ef1e22c56b25209166b" name="dfu-tool" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Update to version 0.9.7:
  + 10 months worth of bugfixing, integrating more vendor specific
    Firmware update paths.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 0.9.8:
  * Add a command 'clear-offline' to fwupdmgr
  * Do not fail to load the daemon if cached metadata is invalid
  * Fix a crash when using fu_plugin_device_add_delay()
  * Fix the libdfu self test failure on s390 and ppc64
  * Format the BCD USB revision numbers correctly
  * Never fallback to an offline update from client code
  * Prevent fwupd from mounting filesystems
  * dfu: Allow flashing when the target does not specify an
    alt-name
  * dfu: Do not try to verify the element write if upload is
    unsupported
  * dfu: Fix uploading large firmware files
  * dfu: Include the reset timeout as wValue to fix some hardware
  * dfu: Set the vendor ID to the runtime USB VID
  * dfu: Use 0x0101 as an alias for 0x0110
  * thunderbolt: move test for mock environment
    (gh#hughsie/fwupd#280)
  * udev: Do not match USB devices, even with a GUID set
  * uefi: Do not set the release version
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105601">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="glin@suse.com" date="1573732800">- Update to version 1.2.11 (jsc#SLE-10751):
  * synapticsmst: Use a more suitable icon for the device
  * thunderbolt: Fix logic to work properly with ICL thunderbolt
    controller
  * Do not ask the user to upload a report if ReportURI is not set
  * Do not crash when starting tpm2-abrmd
  * fu-history: Update device_modified in sql database during
    updates
  * synaptics-prometheus: Fix tiny memory leak when using
    FuSynapromConfig
  * Remove replug flag after the device comes back from reboot
  * uefi: add support for tpm2-tools 4.X
  * fu-engine/fu-config: Reload metadata store when configuration
    changes
  * unifying: update Solaar url
  * synapticsmst: Add a SynapticsMSTBoardID for another Lenovo dock
  * synapticsmst: Add a SynapticsMSTBoardID for a Lenovo dock
  * synapticsmst: Display the board ID in non-hex form in the error
    message
  * Be more accepting when trying to recover a failed database
    migration
  * modem-manager: add counterpart GUID for the DW5821e
  * fu-tool: Port ability to update a single device from fwupdmgr
  * uefi: Actually write the new device path if different than
    before
  * Fix a crash when stopping the fwupd service
  * Relax the certificate time checks in the self tests for the
    legacy certificate
  * Never show AppStream markup on the console
  * Do not segfault when trying to quit the downgrade selection
  * Allow specifying &lt;firmware&gt;GUID&lt;/firmware&gt; to check any version
    exists
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Add fwupd-bsc1143905-hash-the-source-files.patch to hash the
  source files instead of libfwupdprivate.a to avoid the checksum
  change due to the random naming LTO profile sections
  (bsc#1143905)
- Mark fwupdate as obsolete
  + fwupdate has been merged into fwupd since fwupd 1.1.0.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Ensure /var/cache/fwupd is created and owned by package,
  required when StateDirectory is not set for systemd service.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
</package>
<package pkgid="8cdbcb1de04ca5b587e56ac4470d6c97ca6e37c264a2feb67d7a7209f2b2ddcd" name="dfu-tool" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp152.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 0.9.8:
  * Add a command 'clear-offline' to fwupdmgr
  * Do not fail to load the daemon if cached metadata is invalid
  * Fix a crash when using fu_plugin_device_add_delay()
  * Fix the libdfu self test failure on s390 and ppc64
  * Format the BCD USB revision numbers correctly
  * Never fallback to an offline update from client code
  * Prevent fwupd from mounting filesystems
  * dfu: Allow flashing when the target does not specify an
    alt-name
  * dfu: Do not try to verify the element write if upload is
    unsupported
  * dfu: Fix uploading large firmware files
  * dfu: Include the reset timeout as wValue to fix some hardware
  * dfu: Set the vendor ID to the runtime USB VID
  * dfu: Use 0x0101 as an alias for 0x0110
  * thunderbolt: move test for mock environment
    (gh#hughsie/fwupd#280)
  * udev: Do not match USB devices, even with a GUID set
  * uefi: Do not set the release version
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105601">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="glin@suse.com" date="1573732800">- Update to version 1.2.11 (jsc#SLE-10751):
  * synapticsmst: Use a more suitable icon for the device
  * thunderbolt: Fix logic to work properly with ICL thunderbolt
    controller
  * Do not ask the user to upload a report if ReportURI is not set
  * Do not crash when starting tpm2-abrmd
  * fu-history: Update device_modified in sql database during
    updates
  * synaptics-prometheus: Fix tiny memory leak when using
    FuSynapromConfig
  * Remove replug flag after the device comes back from reboot
  * uefi: add support for tpm2-tools 4.X
  * fu-engine/fu-config: Reload metadata store when configuration
    changes
  * unifying: update Solaar url
  * synapticsmst: Add a SynapticsMSTBoardID for another Lenovo dock
  * synapticsmst: Add a SynapticsMSTBoardID for a Lenovo dock
  * synapticsmst: Display the board ID in non-hex form in the error
    message
  * Be more accepting when trying to recover a failed database
    migration
  * modem-manager: add counterpart GUID for the DW5821e
  * fu-tool: Port ability to update a single device from fwupdmgr
  * uefi: Actually write the new device path if different than
    before
  * Fix a crash when stopping the fwupd service
  * Relax the certificate time checks in the self tests for the
    legacy certificate
  * Never show AppStream markup on the console
  * Do not segfault when trying to quit the downgrade selection
  * Allow specifying &lt;firmware&gt;GUID&lt;/firmware&gt; to check any version
    exists
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Add fwupd-bsc1143905-hash-the-source-files.patch to hash the
  source files instead of libfwupdprivate.a to avoid the checksum
  change due to the random naming LTO profile sections
  (bsc#1143905)
- Mark fwupdate as obsolete
  + fwupdate has been merged into fwupd since fwupd 1.1.0.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Ensure /var/cache/fwupd is created and owned by package,
  required when StateDirectory is not set for systemd service.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1599480000">- Add fwupd-jscSLE-11766-close-efidir-leap-gap.patch: Set SLE and
  openSUSE esp os dir at runtime (jsc#SLE-11766)
- Drop build option -Defi_os_dir="%{efidir}": with the above patch
  fwupd can detect esp os dir dynamically
- Update the efidir related %post and %postun scripts in spec file</changelog>
</package>
<package pkgid="b54583e45bd381aeaae06ae935657fd72933efd37d9d8ba4e5184d2ac3657860" name="dfu-tool" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="lp152.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="glin@suse.com" date="1573732800">- Update to version 1.2.11 (jsc#SLE-10751):
  * synapticsmst: Use a more suitable icon for the device
  * thunderbolt: Fix logic to work properly with ICL thunderbolt
    controller
  * Do not ask the user to upload a report if ReportURI is not set
  * Do not crash when starting tpm2-abrmd
  * fu-history: Update device_modified in sql database during
    updates
  * synaptics-prometheus: Fix tiny memory leak when using
    FuSynapromConfig
  * Remove replug flag after the device comes back from reboot
  * uefi: add support for tpm2-tools 4.X
  * fu-engine/fu-config: Reload metadata store when configuration
    changes
  * unifying: update Solaar url
  * synapticsmst: Add a SynapticsMSTBoardID for another Lenovo dock
  * synapticsmst: Add a SynapticsMSTBoardID for a Lenovo dock
  * synapticsmst: Display the board ID in non-hex form in the error
    message
  * Be more accepting when trying to recover a failed database
    migration
  * modem-manager: add counterpart GUID for the DW5821e
  * fu-tool: Port ability to update a single device from fwupdmgr
  * uefi: Actually write the new device path if different than
    before
  * Fix a crash when stopping the fwupd service
  * Relax the certificate time checks in the self tests for the
    legacy certificate
  * Never show AppStream markup on the console
  * Do not segfault when trying to quit the downgrade selection
  * Allow specifying &lt;firmware&gt;GUID&lt;/firmware&gt; to check any version
    exists
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Add fwupd-bsc1143905-hash-the-source-files.patch to hash the
  source files instead of libfwupdprivate.a to avoid the checksum
  change due to the random naming LTO profile sections
  (bsc#1143905)
- Mark fwupdate as obsolete
  + fwupdate has been merged into fwupd since fwupd 1.1.0.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Ensure /var/cache/fwupd is created and owned by package,
  required when StateDirectory is not set for systemd service.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1599480000">- Add fwupd-jscSLE-11766-close-efidir-leap-gap.patch: Set SLE and
  openSUSE esp os dir at runtime (jsc#SLE-11766)
- Drop build option -Defi_os_dir="%{efidir}": with the above patch
  fwupd can detect esp os dir dynamically
- Update the efidir related %post and %postun scripts in spec file</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617105600">- Update to version 1.2.14: (jsc#SLE-16809, bsc#1182057)
  * Release fwupd 1.2.14
  * Fix using a very new libxmlb with a very old fwupd daemon
  * uefi-capsule: Specify the section flags for .sbat
  * uefi-capsule: Ensure SBAT metadata is added correctly
  * uefi-capsule: Set the component generation to 1
  * uefi-capsule: Include all the sections when using objcopy
  * Allow building without SBAT metadata
  * uefi-capsule: Fix objcopy failing to add a .sbat section on
    aarch64
  * uefi-capsule: Add SBAT metadata to the fwupd EFI binary
  * uefi: add configuration option for objcopy utility.
  * uefi: Make generate_binary.sh more robust
  * efi: use a wildcard section copy for final EFI generation
  * Fix the DeviceID set by GetDetails
  * synaptics-prometheus: Force the minor version from 0x02 to 0x01
    to make sure the devices can be updated back to 0x01.
  * Validate that gpgme_op_verify_result() returned at least one
    signature (boo#1172643 CVE-2020-10759)
  * trivial: uefi: fix dell TPM updates
  * prevent updates to occur via synaptics-mst plugin
  * upower: Decrease minimum battery requirement to 10%
  * src: fu-engine: check version was updated by checking version
  * Correctly import PKCS-7 remote metadata
  * Disable the battery percentage checks if UPower is unavailable
  * efi: use a wildcard section copy for final EFI generation
  * fu-engine: Read all releases and convert versions when
    comparing
  * Do not do semver conversion in fu_common_vercmp()
  * unifying: use the correct timeout for IO channel writes
  * Only check the vendor ID if the device has one set
  * wacom-raw: Correct HWID support
  * modem-manager: increase re-enumeration delay to 20000ms
  * modem-manager: add counterpart GUID for the DW5821e/eSIM
  * usb: make loading vendor/product/serial strings non-fatal
  * Strip trailing whitespace from USB descriptors
  * udev-device: fix offset of vendor id of hidraw devices
  * thunderbolt-power: avoid checking for bolt support
  * modem-manager: Fix a tiny memory leak when starting the daemon
  * Fix usage of incorrect type for return value
  * fu-common: Use environment variables for systemd managed
    directories
  * Use more systemd directives for directories
- Specify the SBAT metadata (bsc#1182057)
- Drop upstreamed patch: CVE-2020-10759.patch</changelog>
</package>
<package pkgid="d174209bf597b8311bb47e4eeff3a2a57d0376c496dbc74c060b65cbfabc42f8" name="dhcp" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="cfb4e8f6c1700a61b1f6a7a15b1e8c99f90cda3bfcedcc5f6809f518c476a2e2" name="dhcp" arch="src">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="695d616965b219c1c00d3f5d9022530a3b96884ed0ebce03ddda44226ddffc13" name="dhcp" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="96b5001511b257ec5e1e45da6c2ea24c12f60c70b2f4c77cab5647c657224416" name="dhcp" arch="i586">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="43234589dae8434462e3440098357c39e3076432663761b912455a278f4e635f" name="dhcp" arch="src">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="ff26816091d44eb29387548e50efe5daa16b393e20e7866ca1b1f3afa927178e" name="dhcp" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="8aaa4ca8739de6b1fe606d3347fb5c971398f54458c5451b98d846068387b0dd" name="dhcp-client" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="8ea05fb33ab91864077282a4ef6819eed210a69098e65ab03c44938ff2128a27" name="dhcp-client" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="12091bdf845bb08691fa7cec51812addf70b6d987380e779a2105dc56feae862" name="dhcp-client" arch="i586">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="5c29a00cad05487b8626103e6443eb9de8a3c1174687eb0f7be976f122a13adf" name="dhcp-client" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="87f4f211f80d40fd88a52643cfc087fe6669b47bc8b3e3d2af452c96a8f29609" name="dhcp-devel" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="364c7935def5f46ee0883a6191ad5a52a172d55350de0af94b7b4d1db4aa5a2c" name="dhcp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="b63b5a11bf7a44fbbc49d87eb06af14dc4ab747822157c71f2f34552fa6f69e4" name="dhcp-devel" arch="i586">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="cf4f95a4453594c6267dd86cb4e4df1651fd3fcb3bc5acdbac717a47a4687ded" name="dhcp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="79b0da55baa6c1aee97ec4c0648ac9e2e2bb521f9c1dd4748256ef4484a2b677" name="dhcp-doc" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="dbc1b81da16756824bdc48220f711b4bcec1a4133d49cfb12cfe257e55df380a" name="dhcp-doc" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="26c103792dbf7335a35d5d662776f99b9848d7802883da7aa0e70dc9cf36ae67" name="dhcp-doc" arch="i586">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="05e8f7ee75346677d1d70ee7a83b87e732f98f78a7fb077a330e45637293e085" name="dhcp-doc" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="0213e22e7b3a2efda64c8f066855f0cfc1d05b1869f42688a11bab5d22f2d67c" name="dhcp-relay" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="d459b8b33894a249e27ed25086b0276a07763ef56123c897c85a3354d90ceb88" name="dhcp-relay" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="80194f7e0384161a2656ff1dd1c6a7e924ac77635f8232e212929acdb9b0e401" name="dhcp-relay" arch="i586">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="16dc34823396b7a7927413375de01c86f041b8bdea0fc688d4d51eba9f6e6f78" name="dhcp-relay" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="1e61e1c937821ec66a3d047101f88a64a34a55d71dd419e5c2eb1b38c103e979" name="dhcp-server" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="6f9b45de80e759852b7ca3060001af8c71195a3749266166477ff282a683ae87" name="dhcp-server" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="1b049631521818b840ccd7e62c63c00f990b5c51f7103e81bafb4b3b1ee62a52" name="dhcp-server" arch="i586">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="9bc8001567d20481f9192ab9bddefab20fa1044d2c25f4ae0337ed4e8d55dc7d" name="dhcp-server" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="lp152.8.6.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="10bcde84ccc422bebacaf3c3ae421e6eb764a2fb05236c20946224f5b1a69056" name="diffutils" arch="i586">
  <version epoch="0" ver="3.6" rel="lp152.5.3.1"/>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="e759b7f5bccb0ea96ff56be6086507957c09c33bd882fd68cb0a56b8392288ea" name="diffutils" arch="src">
  <version epoch="0" ver="3.6" rel="lp152.5.3.1"/>
  <changelog author="pth@suse.de" date="1313236800">- Update to 3.1:
  + Bug fixes
  - diff no longer reports spurious differences merely because two
    entries in the same directory have names that compare equal in
    the current locale, or compare equal because --ignore-file-name-case
    was given.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="jslaby@suse.de" date="1330344000">- Update to 3.2:
  * diff: --ignore-file-name-case now applies at top level too
  * diff, sdiff: new option --ignore-trailing-space
  * maint: avoid new "make sytnax-check" failure</changelog>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="schwab@suse.de" date="1359806400">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jslaby@suse.com" date="1365163200">- Update to 3.3:
  * add --no-dereference
  * -N works with - (stdin) as input
  * many fixes
  * many cleanups (in docco too)
- remove: config-guess-sub-update.patch
- remove: diffutils-stdio.in.patch</changelog>
  <changelog author="meissner@suse.com" date="1365163201">- add gpg key checking, keyring from savannah</changelog>
  <changelog author="meissner@suse.com" date="1371816000">- disable gpg key checking to avoid build cycles. will be
  done by source service</changelog>
  <changelog author="pth@suse.de" date="1386331200">- Diffutils has a testsuite so run it.</changelog>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="d95e255a43316d9dcf89cd26b0fab53c8a0fdf32a06f8d906329e667f68bca74" name="diffutils" arch="x86_64">
  <version epoch="0" ver="3.6" rel="lp152.5.3.1"/>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="7c10636fbda8a3982f92b4583e83ff3e03d189fc8f529eb06f68360d7c6e8c70" name="diffutils-lang" arch="noarch">
  <version epoch="0" ver="3.6" rel="lp152.5.3.1"/>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="f7aba55783f830f7555f13dd6b44afb63aa252cf2d84605c4c6a9febcdf6d401" name="djvulibre" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp152.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="fb6beed4d485334eab5aca1f534300db60518b8138d7d8500b4b16891ee078a4" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="lp152.7.3.1"/>
  <changelog author="lmichnovic@suse.cz" date="1219665600">- update to version 3.5.21
  * Speed improvement on multicore platforms
  * Ddjvu now can produce pdf output.
- renamed lib to libdjvulibre21 according to Shared Library
  Packaging Policy</changelog>
  <changelog author="mseben@suse.cz" date="1244462400">- updated to version 3.5.22
  * backported djview4 version of nsdejavu.so
  * various bug fixes
- splitted to doc package</changelog>
  <changelog author="pgajdos@suse.cz" date="1289908800">- updated to version 3.5.23:
  * Added ddjvu_document_create_by_filename_utf8
  * Generate icons with rsvg rather than imagemagick.
  * djvused: correctly outputs escape characters.
  * djvumake: added options to generate foreground colors.
  * Various bug fixes.</changelog>
  <changelog author="pgajdos@suse.cz" date="1299499200">- updated to version 3.5.24:
  * Set ddjvuapi_version to 20.
  * Added ddjvuapi support for changing the white point.
  * Added option "-u" in djvused.
  * Added option "-o djvufile" in djvuxmlparser.
  * Added support for &lt;CHARACTER&gt; tag in djvuxmlparser.
  * Added print-xmp, set-xmp, remove-smp in djvused.</changelog>
  <changelog author="idoenmez@novell.com" date="1304337600">- Add djvulibre-3.5.23-gcc46.patch to fix compilation with gcc 4.6</changelog>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="9117193095675d55263e1419e23c84401ee153d2f0d5562eb39cd89a9fa749c9" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp152.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="e8a987f9faabeaf99bca6334deff119fa4e3f1e03596ff51735e8b4b447512ab" name="djvulibre" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp152.7.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="dbdc52e04359cc10a660b73e5c5d83b3281881028dcdb69280796ae161c66b72" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="lp152.7.6.1"/>
  <changelog author="mseben@suse.cz" date="1244462400">- updated to version 3.5.22
  * backported djview4 version of nsdejavu.so
  * various bug fixes
- splitted to doc package</changelog>
  <changelog author="pgajdos@suse.cz" date="1289908800">- updated to version 3.5.23:
  * Added ddjvu_document_create_by_filename_utf8
  * Generate icons with rsvg rather than imagemagick.
  * djvused: correctly outputs escape characters.
  * djvumake: added options to generate foreground colors.
  * Various bug fixes.</changelog>
  <changelog author="pgajdos@suse.cz" date="1299499200">- updated to version 3.5.24:
  * Set ddjvuapi_version to 20.
  * Added ddjvuapi support for changing the white point.
  * Added option "-u" in djvused.
  * Added option "-o djvufile" in djvuxmlparser.
  * Added support for &lt;CHARACTER&gt; tag in djvuxmlparser.
  * Added print-xmp, set-xmp, remove-smp in djvused.</changelog>
  <changelog author="idoenmez@novell.com" date="1304337600">- Add djvulibre-3.5.23-gcc46.patch to fix compilation with gcc 4.6</changelog>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="992bdb258923124153d29f1cd1dbcddeb692bd8290a76d76e58eae6625e6cd2c" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp152.7.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="1b25f4debd4c694c43fc2583f71fecb705c59ae66e619a3fde3c335215515b81" name="djvulibre" arch="i586">
  <version epoch="0" ver="3.5.27" rel="lp152.7.9.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1625140800">- security update
- added patches
  fix CVE-2021-3630 [bsc#1187869], out-of-bounds write in DJVU:DjVuTXT:decode() in DjVuText.cpp
  + djvulibre-CVE-2021-3630.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1627646400">- security update
  extend CVE-2021-3630 fix [bsc#1187869#c14]
- modified patches
  % djvulibre-CVE-2021-3630.patch</changelog>
</package>
<package pkgid="d2c5ce979ad321f0893f88d57c6158c9e15deb38887bab960083495635822605" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="lp152.7.9.1"/>
  <changelog author="pgajdos@suse.cz" date="1299499200">- updated to version 3.5.24:
  * Set ddjvuapi_version to 20.
  * Added ddjvuapi support for changing the white point.
  * Added option "-u" in djvused.
  * Added option "-o djvufile" in djvuxmlparser.
  * Added support for &lt;CHARACTER&gt; tag in djvuxmlparser.
  * Added print-xmp, set-xmp, remove-smp in djvused.</changelog>
  <changelog author="idoenmez@novell.com" date="1304337600">- Add djvulibre-3.5.23-gcc46.patch to fix compilation with gcc 4.6</changelog>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1625140800">- security update
- added patches
  fix CVE-2021-3630 [bsc#1187869], out-of-bounds write in DJVU:DjVuTXT:decode() in DjVuText.cpp
  + djvulibre-CVE-2021-3630.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1627646400">- security update
  extend CVE-2021-3630 fix [bsc#1187869#c14]
- modified patches
  % djvulibre-CVE-2021-3630.patch</changelog>
</package>
<package pkgid="17a10dca0affd4f964db74fbfe99e8fb9f01760e01863319e285a4926c222138" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp152.7.9.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1625140800">- security update
- added patches
  fix CVE-2021-3630 [bsc#1187869], out-of-bounds write in DJVU:DjVuTXT:decode() in DjVuText.cpp
  + djvulibre-CVE-2021-3630.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1627646400">- security update
  extend CVE-2021-3630 fix [bsc#1187869#c14]
- modified patches
  % djvulibre-CVE-2021-3630.patch</changelog>
</package>
<package pkgid="cb28238709b68baa2da730db3b64f88048230938e0c512554d2504acb6757a1d" name="djvulibre-doc" arch="noarch">
  <version epoch="0" ver="3.5.27" rel="lp152.7.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="3f65f3b1f6cd4000ee0faacc5308e41574c668605c5f4f11b6698cbe6e63ccf5" name="djvulibre-doc" arch="noarch">
  <version epoch="0" ver="3.5.27" rel="lp152.7.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="84bcaec551ac01b1297940df9a2455f9f35743867ef5d4814d19fc587d9df5c4" name="djvulibre-doc" arch="noarch">
  <version epoch="0" ver="3.5.27" rel="lp152.7.9.1"/>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1625140800">- security update
- added patches
  fix CVE-2021-3630 [bsc#1187869], out-of-bounds write in DJVU:DjVuTXT:decode() in DjVuText.cpp
  + djvulibre-CVE-2021-3630.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1627646400">- security update
  extend CVE-2021-3630 fix [bsc#1187869#c14]
- modified patches
  % djvulibre-CVE-2021-3630.patch</changelog>
</package>
<package pkgid="6176f5d24d605c0f1e34a8c653dce7a63217a83697a2c5e8a19cb7aa7ccd0305" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.11.1"/>
  <changelog author="schwab@suse.de" date="1619784000">- rpm/constraints.in: bump disk space to 45GB on riscv64
- commit f8b883f</changelog>
  <changelog author="tiwai@suse.de" date="1619784001">- net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
  (git-fixes).
- net: phy: marvell: fix m88e1111_set_downshift (git-fixes).
- net: phy: marvell: fix m88e1011_set_downshift (git-fixes).
- net: phy: intel-xway: enable integrated led functions
  (git-fixes).
- ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock
  without lock (git-fixes).
- ath9k: Fix error check in ath9k_hw_read_revisions() for PCI
  devices (git-fixes).
- mac80211: bail out if cipher schemes are invalid (git-fixes).
- rtw88: Fix array overrun in rtw_get_tx_power_params()
  (git-fixes).
- rsi: Use resume_noirq for SDIO (git-fixes).
- ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
  (git-fixes).
- rtlwifi: 8821ae: upgrade PHY and RF parameters (git-fixes).
- mt7601u: fix always true expression (git-fixes).
- liquidio: Fix unintented sign extension of a left shift of a
  u16 (git-fixes).
- nfc: pn533: prevent potential memory corruption (git-fixes).
- commit 4c3b252</changelog>
  <changelog author="tiwai@suse.de" date="1619784002">- net: geneve: modify IP header check in geneve6_xmit_skb and
  geneve_xmit_skb (git-fixes).
- commit f8b6668</changelog>
  <changelog author="tiwai@suse.de" date="1619870400">- i2c: cadence: add IRQ check (git-fixes).
- i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  (git-fixes).
- i2c: omap: fix reference leak when pm_runtime_get_sync fails
  (git-fixes).
- i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync
  fails (git-fixes).
- i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  (git-fixes).
- HID: plantronics: Workaround for double volume key presses
  (git-fixes).
- ASoC: ak5558: correct reset polarity (git-fixes).
- ASoC: simple-card: fix possible uninitialized single_cpu local
  variable (git-fixes).
- ASoC: ak5558: Fix s/show/slow/ typo (git-fixes).
- ASoC: samsung: tm2_wm5110: check of of_parse return value
  (git-fixes).
- ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops
  (git-fixes).
- ALSA: usb-audio: Fix implicit sync clearance at stopping stream
  (git-fixes).
- ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check
  fails (git-fixes).
- ALSA: usb-audio: Add error checks for
  usb_driver_claim_interface() calls (git-fixes).
- ALSA: core: remove redundant spin_lock pair in
  snd_card_disconnect (git-fixes).
- drm/i915/gvt: Fix error code in intel_gvt_init_device()
  (git-fixes).
- commit 2b66742</changelog>
  <changelog author="tiwai@suse.de" date="1619870401">- pinctrl: core: Fix kernel doc string for pin_get_name()
  (git-fixes).
- pinctrl: Ingenic: Add missing pins to the JZ4770 MAC MII group
  (git-fixes).
- i2c: sh7760: add IRQ check (git-fixes).
- i2c: jz4780: add IRQ check (git-fixes).
- i2c: emev2: add IRQ check (git-fixes).
- commit da2180a</changelog>
  <changelog author="tiwai@suse.de" date="1619870402">- i2c: sh7760: fix IRQ error path (git-fixes).
- commit e315f49</changelog>
  <changelog author="tiwai@suse.de" date="1619870403">- ALSA: hda/realtek: Remove redundant entry for ALC861
  Haier/Uniwill devices (git-fixes).
- ALSA: hda/realtek: Re-order ALC662 quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx (git-fixes).
- ALSA: hda/cirrus: Use CS8409 filter to fix abnormal sounds on
  Bullseye (git-fixes).
- ALSA: hda/cirrus: Set Initial DMIC volume for Bullseye to -26 dB
  (git-fixes).
- ALSA: sb: Fix two use after free in snd_sb_qsound_build
  (git-fixes).
- ASoC: Intel: kbl_da7219_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
  (git-fixes).
- ALSA: hda/realtek - Headset Mic issue on HP platform
  (git-fixes).
- ALSA: usb-audio: DJM-750: ensure format is set (git-fixes).
- ALSA: hda/realtek: GA503 use same quirks as GA401 (git-fixes).
- ALSA: hda/realtek: fix mic boost on Intel NUC 8 (git-fixes).
- ALSA: usb-audio: Explicitly set up the clock selector
  (git-fixes).
- ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX (git-fixes).
- ALSA: hda/cirrus: Make CS8409 driver more generic by using
  fixups (git-fixes).
- ALSA: hda/cirrus: Fix CS42L42 Headset Mic volume control name
  (git-fixes).
- ALSA: hda/cirrus: Cleanup patch_cirrus.c code (git-fixes).
- ALSA: hda/cirrus: Add error handling into CS8409 I2C functions
  (git-fixes).
- ALSA: hda/cirrus: Add Headphone and Headset MIC Volume Control
  (git-fixes).
- ALSA: hda/cirrus: Add jack detect interrupt support from
  CS42L42 companion codec (git-fixes).
- ALSA: hda/cirrus: Add support for CS8409 HDA bridge and CS42L42
  companion codec (git-fixes).
- ALSA: usb-audio: Configure Pioneer DJM-850 samplerate
  (git-fixes).
- ALSA: usb-audio: Fix Pioneer DJM devices URB_CONTROL request
  direction to set samplerate (git-fixes).
- ALSA: usb-audio: Add DJM450 to Pioneer format quirk (git-fixes).
- commit 82d06eb</changelog>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="fe002a0a7967fb22601c7a3b6973efb7a1e40dbd4eaa0883986cf18ae86e6e36" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.14.1"/>
  <changelog author="dbueso@suse.de" date="1622203200">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376002">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="neilb@suse.de" date="1622462401">- SUNRPC: More fixes for backlog congestion (bsc#1185428).
- commit c0de1ec</changelog>
  <changelog author="hare@suse.de" date="1622462402">- blk-mq: Swap two calls in blk_mq_exit_queue() (git-fixes).
- block: Fix three kernel-doc warnings (git-fixes).
- commit e222970</changelog>
  <changelog author="tiwai@suse.de" date="1622462403">- i2c: s3c2410: fix possible NULL pointer deref on read message
  after write (git-fixes).
- i2c: i801: Don't generate an interrupt on bus reset (git-fixes).
- i2c: sh_mobile: Use new clock calculation formulas for RZ/G2E
  (git-fixes).
- iio: adc: ad7793: Add missing error code in ad7793_setup()
  (git-fixes).
- iio: adc: ad7768-1: Fix too small buffer passed to
  iio_push_to_buffers_with_timestamp() (git-fixes).
- iio: gyro: fxas21002c: balance runtime power in error path
  (git-fixes).
- staging: iio: cdc: ad7746: avoid overwrite of num_channels
  (git-fixes).
- iio: adc: ad7124: Fix potential overflow due to non sequential
  channel numbers (git-fixes).
- iio: adc: ad7124: Fix missbalanced regulator enable / disable
  on error (git-fixes).
- staging: emxx_udc: fix loop in _nbu2ss_nuke() (git-fixes).
- serial: sh-sci: Fix off-by-one error in FIFO threshold register
  setting (git-fixes).
- serial: core: fix suspicious security_locked_down() call
  (git-fixes).
- serial: tegra: Fix a mask operation that is always true
  (git-fixes).
- thunderbolt: dma_port: Fix NVM read buffer bounds and offset
  issue (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen()
  (git-fixes).
- USB: trancevibrator: fix control-request direction (git-fixes).
- misc/uss720: fix memory leak in uss720_probe (git-fixes).
- drm/meson: fix shutdown crash when component not probed
  (git-fixes).
- net: usb: fix memory leak in smsc75xx_bind (git-fixes).
- cdrom: gdrom: initialize global variable at init time
  (git-fixes).
- cdrom: gdrom: deallocate struct gdrom_unit fields in
  remove_gdrom (git-fixes).
- Revert "gdrom: fix a memory leak bug" (git-fixes).
- usb: dwc3: gadget: Enable suspend events (git-fixes).
- commit 62c76a6</changelog>
  <changelog author="hare@suse.de" date="1622462404">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="ykaukab@suse.de" date="1622462406">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462408">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462409">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
</package>
<package pkgid="1b0422e5aae478f498fc243ac2ce1e05784015700f8f36ac6ab4705ebaa5f43a" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="78e3ffd9ac75504907b2ea7c32ec303476d7f4ee3f5a2ed3bd28bac07f5cf1fa" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="5e740060be9f24c3a444820988447d30c0ace794acae7e6a32ce8b8c2b54fb49" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.8.1"/>
  <changelog author="bp@suse.de" date="1618228800">- RAS/CEC: Correct ce_add_elem()'s returned values (bsc#1152489).
- commit 1be7dba</changelog>
  <changelog author="bp@suse.de" date="1618228801">- blacklist.conf: dd926880da8d x86/apic/of: Fix CPU devicetree-node lookups
- commit 92f0632</changelog>
  <changelog author="tiwai@suse.de" date="1618228802">- rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)
  The devel package requires the kernel binary package itself for building
  modules externally.
- commit 794be7b</changelog>
  <changelog author="jroedel@suse.de" date="1618228803">- KVM: SVM: avoid infinite loop on NPF from bad address (CVE-2020-36310 bsc#1184512).
- commit 3916df4</changelog>
  <changelog author="oneukum@suse.com" date="1618228804">- Documentation/ABI: sysfs-platform-ideapad-laptop: update device
  attribute paths (git-fixes).
- commit 2559651</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: lantiq: Wait for the GPHY firmware to be ready (git-fixes).
- commit d0452d2</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315210">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315211">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315212">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315213">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315214">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="9612a7e9f15b9475be14b23b854be40a39a73858527a1458e1ba96bc279dadf8" name="dlm-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.11.1"/>
  <changelog author="schwab@suse.de" date="1619784000">- rpm/constraints.in: bump disk space to 45GB on riscv64
- commit f8b883f</changelog>
  <changelog author="tiwai@suse.de" date="1619784001">- net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
  (git-fixes).
- net: phy: marvell: fix m88e1111_set_downshift (git-fixes).
- net: phy: marvell: fix m88e1011_set_downshift (git-fixes).
- net: phy: intel-xway: enable integrated led functions
  (git-fixes).
- ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock
  without lock (git-fixes).
- ath9k: Fix error check in ath9k_hw_read_revisions() for PCI
  devices (git-fixes).
- mac80211: bail out if cipher schemes are invalid (git-fixes).
- rtw88: Fix array overrun in rtw_get_tx_power_params()
  (git-fixes).
- rsi: Use resume_noirq for SDIO (git-fixes).
- ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
  (git-fixes).
- rtlwifi: 8821ae: upgrade PHY and RF parameters (git-fixes).
- mt7601u: fix always true expression (git-fixes).
- liquidio: Fix unintented sign extension of a left shift of a
  u16 (git-fixes).
- nfc: pn533: prevent potential memory corruption (git-fixes).
- commit 4c3b252</changelog>
  <changelog author="tiwai@suse.de" date="1619784002">- net: geneve: modify IP header check in geneve6_xmit_skb and
  geneve_xmit_skb (git-fixes).
- commit f8b6668</changelog>
  <changelog author="tiwai@suse.de" date="1619870400">- i2c: cadence: add IRQ check (git-fixes).
- i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  (git-fixes).
- i2c: omap: fix reference leak when pm_runtime_get_sync fails
  (git-fixes).
- i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync
  fails (git-fixes).
- i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  (git-fixes).
- HID: plantronics: Workaround for double volume key presses
  (git-fixes).
- ASoC: ak5558: correct reset polarity (git-fixes).
- ASoC: simple-card: fix possible uninitialized single_cpu local
  variable (git-fixes).
- ASoC: ak5558: Fix s/show/slow/ typo (git-fixes).
- ASoC: samsung: tm2_wm5110: check of of_parse return value
  (git-fixes).
- ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops
  (git-fixes).
- ALSA: usb-audio: Fix implicit sync clearance at stopping stream
  (git-fixes).
- ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check
  fails (git-fixes).
- ALSA: usb-audio: Add error checks for
  usb_driver_claim_interface() calls (git-fixes).
- ALSA: core: remove redundant spin_lock pair in
  snd_card_disconnect (git-fixes).
- drm/i915/gvt: Fix error code in intel_gvt_init_device()
  (git-fixes).
- commit 2b66742</changelog>
  <changelog author="tiwai@suse.de" date="1619870401">- pinctrl: core: Fix kernel doc string for pin_get_name()
  (git-fixes).
- pinctrl: Ingenic: Add missing pins to the JZ4770 MAC MII group
  (git-fixes).
- i2c: sh7760: add IRQ check (git-fixes).
- i2c: jz4780: add IRQ check (git-fixes).
- i2c: emev2: add IRQ check (git-fixes).
- commit da2180a</changelog>
  <changelog author="tiwai@suse.de" date="1619870402">- i2c: sh7760: fix IRQ error path (git-fixes).
- commit e315f49</changelog>
  <changelog author="tiwai@suse.de" date="1619870403">- ALSA: hda/realtek: Remove redundant entry for ALC861
  Haier/Uniwill devices (git-fixes).
- ALSA: hda/realtek: Re-order ALC662 quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx (git-fixes).
- ALSA: hda/cirrus: Use CS8409 filter to fix abnormal sounds on
  Bullseye (git-fixes).
- ALSA: hda/cirrus: Set Initial DMIC volume for Bullseye to -26 dB
  (git-fixes).
- ALSA: sb: Fix two use after free in snd_sb_qsound_build
  (git-fixes).
- ASoC: Intel: kbl_da7219_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
  (git-fixes).
- ALSA: hda/realtek - Headset Mic issue on HP platform
  (git-fixes).
- ALSA: usb-audio: DJM-750: ensure format is set (git-fixes).
- ALSA: hda/realtek: GA503 use same quirks as GA401 (git-fixes).
- ALSA: hda/realtek: fix mic boost on Intel NUC 8 (git-fixes).
- ALSA: usb-audio: Explicitly set up the clock selector
  (git-fixes).
- ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX (git-fixes).
- ALSA: hda/cirrus: Make CS8409 driver more generic by using
  fixups (git-fixes).
- ALSA: hda/cirrus: Fix CS42L42 Headset Mic volume control name
  (git-fixes).
- ALSA: hda/cirrus: Cleanup patch_cirrus.c code (git-fixes).
- ALSA: hda/cirrus: Add error handling into CS8409 I2C functions
  (git-fixes).
- ALSA: hda/cirrus: Add Headphone and Headset MIC Volume Control
  (git-fixes).
- ALSA: hda/cirrus: Add jack detect interrupt support from
  CS42L42 companion codec (git-fixes).
- ALSA: hda/cirrus: Add support for CS8409 HDA bridge and CS42L42
  companion codec (git-fixes).
- ALSA: usb-audio: Configure Pioneer DJM-850 samplerate
  (git-fixes).
- ALSA: usb-audio: Fix Pioneer DJM devices URB_CONTROL request
  direction to set samplerate (git-fixes).
- ALSA: usb-audio: Add DJM450 to Pioneer format quirk (git-fixes).
- commit 82d06eb</changelog>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="961584232e5141953220b7aecd16c59de9882db2a06706db029d44d266a64994" name="dlm-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.14.1"/>
  <changelog author="dbueso@suse.de" date="1622203200">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376002">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="neilb@suse.de" date="1622462401">- SUNRPC: More fixes for backlog congestion (bsc#1185428).
- commit c0de1ec</changelog>
  <changelog author="hare@suse.de" date="1622462402">- blk-mq: Swap two calls in blk_mq_exit_queue() (git-fixes).
- block: Fix three kernel-doc warnings (git-fixes).
- commit e222970</changelog>
  <changelog author="tiwai@suse.de" date="1622462403">- i2c: s3c2410: fix possible NULL pointer deref on read message
  after write (git-fixes).
- i2c: i801: Don't generate an interrupt on bus reset (git-fixes).
- i2c: sh_mobile: Use new clock calculation formulas for RZ/G2E
  (git-fixes).
- iio: adc: ad7793: Add missing error code in ad7793_setup()
  (git-fixes).
- iio: adc: ad7768-1: Fix too small buffer passed to
  iio_push_to_buffers_with_timestamp() (git-fixes).
- iio: gyro: fxas21002c: balance runtime power in error path
  (git-fixes).
- staging: iio: cdc: ad7746: avoid overwrite of num_channels
  (git-fixes).
- iio: adc: ad7124: Fix potential overflow due to non sequential
  channel numbers (git-fixes).
- iio: adc: ad7124: Fix missbalanced regulator enable / disable
  on error (git-fixes).
- staging: emxx_udc: fix loop in _nbu2ss_nuke() (git-fixes).
- serial: sh-sci: Fix off-by-one error in FIFO threshold register
  setting (git-fixes).
- serial: core: fix suspicious security_locked_down() call
  (git-fixes).
- serial: tegra: Fix a mask operation that is always true
  (git-fixes).
- thunderbolt: dma_port: Fix NVM read buffer bounds and offset
  issue (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen()
  (git-fixes).
- USB: trancevibrator: fix control-request direction (git-fixes).
- misc/uss720: fix memory leak in uss720_probe (git-fixes).
- drm/meson: fix shutdown crash when component not probed
  (git-fixes).
- net: usb: fix memory leak in smsc75xx_bind (git-fixes).
- cdrom: gdrom: initialize global variable at init time
  (git-fixes).
- cdrom: gdrom: deallocate struct gdrom_unit fields in
  remove_gdrom (git-fixes).
- Revert "gdrom: fix a memory leak bug" (git-fixes).
- usb: dwc3: gadget: Enable suspend events (git-fixes).
- commit 62c76a6</changelog>
  <changelog author="hare@suse.de" date="1622462404">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="ykaukab@suse.de" date="1622462406">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462408">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462409">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
</package>
<package pkgid="3736e1a676a2197177a2dc7bd7e20b8e866132743f21ab91f633a4ab592fc9aa" name="dlm-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="97e6ebbb67f7cbe2cf8cc82258f4e71bd69f99d9c354f85dc891570ff8f33df5" name="dlm-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="b23d8f56c87c12a0aac9901b08456614d5afa9b32962572a90faf4d398c95b09" name="dlm-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.8.1"/>
  <changelog author="bp@suse.de" date="1618228800">- RAS/CEC: Correct ce_add_elem()'s returned values (bsc#1152489).
- commit 1be7dba</changelog>
  <changelog author="bp@suse.de" date="1618228801">- blacklist.conf: dd926880da8d x86/apic/of: Fix CPU devicetree-node lookups
- commit 92f0632</changelog>
  <changelog author="tiwai@suse.de" date="1618228802">- rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)
  The devel package requires the kernel binary package itself for building
  modules externally.
- commit 794be7b</changelog>
  <changelog author="jroedel@suse.de" date="1618228803">- KVM: SVM: avoid infinite loop on NPF from bad address (CVE-2020-36310 bsc#1184512).
- commit 3916df4</changelog>
  <changelog author="oneukum@suse.com" date="1618228804">- Documentation/ABI: sysfs-platform-ideapad-laptop: update device
  attribute paths (git-fixes).
- commit 2559651</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: lantiq: Wait for the GPHY firmware to be ready (git-fixes).
- commit d0452d2</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315210">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315211">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315212">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315213">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315214">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="693b5177348c3cc17517c3e1bc230eb8d51c85af2b9603bcb63e2fddf2e7a206" name="dmidecode" arch="i586">
  <version epoch="0" ver="3.2" rel="lp152.6.3.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
</package>
<package pkgid="f64fde07b8ba61277564040de0f8b8119b97e7ff478ef8b30a74f7fe535acf03" name="dmidecode" arch="src">
  <version epoch="0" ver="3.2" rel="lp152.6.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jdelvare@suse.de" date="1366804800">- Update to upstream version 2.12:
  * Adds support for SMBIOS 2.8. This includes new enumerated
    values for recent hardware.
  * Obsoletes dmidecode-add-SMBIOS-2_7_1-support.patch and
    dmidecode-fix-memory-array-location-overrun.patch.
  * Various minor fixes and clean-ups.
- dmidecode-1.173-drop-cast.patch: Drop unneeded and possibly
  dangerous cast.
- dmidecode-1.175-fix-SMBIOS-2.8.0.patch: Fix support for new
  processor upgrade types (DMI type 4) and new memory device type
  (DMI type 17.)</changelog>
  <changelog author="guillaume@opensuse.org" date="1366977600">- Enable build for ARM</changelog>
  <changelog author="jdelvare@suse.de" date="1389614400">- dmidecode-1.176-SMBIOS-2.8-is-supported.patch: Bump
  SUPPORTED_SMBIOS_VER so that SMBIOS 2.8 implementations don't
  trigger a warning.
- dmidecode-1.177-decode-pcie3-slot-id.patch: Decode ID of PCI
  Express 3 slots (DMI type 9.)
  https://savannah.nongnu.org/bugs/?40178</changelog>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
</package>
<package pkgid="e726a20bb3cab571e47e0cd64fd8a8ae64ce0c93e8cb1f25075289456a9f21a4" name="dmidecode" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp152.6.3.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
</package>
<package pkgid="52601690e8a7676c91573004a2298145b4d331818f922abe5f335deba10d8b0d" name="dmidecode" arch="i586">
  <version epoch="0" ver="3.2" rel="lp152.6.6.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
</package>
<package pkgid="2ee26100d9e707343c98417f7f0d8396e4d32db1f8dbd3a5b3db86b7a6e2d7f6" name="dmidecode" arch="src">
  <version epoch="0" ver="3.2" rel="lp152.6.6.1"/>
  <changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jdelvare@suse.de" date="1366804800">- Update to upstream version 2.12:
  * Adds support for SMBIOS 2.8. This includes new enumerated
    values for recent hardware.
  * Obsoletes dmidecode-add-SMBIOS-2_7_1-support.patch and
    dmidecode-fix-memory-array-location-overrun.patch.
  * Various minor fixes and clean-ups.
- dmidecode-1.173-drop-cast.patch: Drop unneeded and possibly
  dangerous cast.
- dmidecode-1.175-fix-SMBIOS-2.8.0.patch: Fix support for new
  processor upgrade types (DMI type 4) and new memory device type
  (DMI type 17.)</changelog>
  <changelog author="guillaume@opensuse.org" date="1366977600">- Enable build for ARM</changelog>
  <changelog author="jdelvare@suse.de" date="1389614400">- dmidecode-1.176-SMBIOS-2.8-is-supported.patch: Bump
  SUPPORTED_SMBIOS_VER so that SMBIOS 2.8 implementations don't
  trigger a warning.
- dmidecode-1.177-decode-pcie3-slot-id.patch: Decode ID of PCI
  Express 3 slots (DMI type 9.)
  https://savannah.nongnu.org/bugs/?40178</changelog>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
</package>
<package pkgid="a22bde341c175c5d8453cfa280889cadd109e0b58e6d93a6534b0c929ef6f796" name="dmidecode" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp152.6.6.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
</package>
<package pkgid="e60f98b4ee317679bdb3b43bc034ac9e2700e30beeb13e63b505ff16ead68166" name="dnsmasq" arch="i586">
  <version epoch="0" ver="2.78" rel="lp152.7.3.1"/>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1608292800">- Retry query to other servers on receipt of SERVFAIL rcode
  (bsc#1176076, dnsmasq-servfail.patch)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1610625600">- bsc#1177077: Fixed DNSpooq vulnerabilities (dnsmasq-dnspooq.patch)
- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:
  Fixed multiple Cache Poisoning attacks.
- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:
  Fixed multiple potential Heap-based overflows when DNSSEC is
  enabled.</changelog>
</package>
<package pkgid="15ea8d6ecaaa845b9c302d5d4dd5040c3c7beecde2c9680eb2bc0cf4734d86c8" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.78" rel="lp152.7.3.1"/>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1608292800">- Retry query to other servers on receipt of SERVFAIL rcode
  (bsc#1176076, dnsmasq-servfail.patch)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1610625600">- bsc#1177077: Fixed DNSpooq vulnerabilities (dnsmasq-dnspooq.patch)
- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:
  Fixed multiple Cache Poisoning attacks.
- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:
  Fixed multiple potential Heap-based overflows when DNSSEC is
  enabled.</changelog>
</package>
<package pkgid="39ef3832ae8fd4aa23b20b5402ccd2cd96490e938a9f87b6f915dae2118fd58a" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.78" rel="lp152.7.3.1"/>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1608292800">- Retry query to other servers on receipt of SERVFAIL rcode
  (bsc#1176076, dnsmasq-servfail.patch)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1610625600">- bsc#1177077: Fixed DNSpooq vulnerabilities (dnsmasq-dnspooq.patch)
- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:
  Fixed multiple Cache Poisoning attacks.
- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:
  Fixed multiple potential Heap-based overflows when DNSSEC is
  enabled.</changelog>
</package>
<package pkgid="d408db77dc0b127b7408c36db4f8310dea5c8b6c61f2fe12e7b3c8cfd45a9f6e" name="dnsmasq" arch="i586">
  <version epoch="0" ver="2.86" rel="lp152.7.6.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540209600">- Ensure neutrality of descriptions. / Replace description with
  new upstream description.
- Do not hide failures from user/group additions.
- Replace old $RPM_* shell vars by macros.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1548244800">- libidn should not be used anymore, switch to libidn2</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1550836800">- Drop use of $FIRST_ARG in .spec
  The use of $FIRST_ARG was probably required because of the
  %service_* rpm macros were playing tricks with the shell positional
  parameters. This is bad practice and error prones so let's assume
  that no macros should do that anymore and hence it's safe to assume
  that positional parameters remains unchanged after any rpm macro
  call.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1562760000">- add 0001-fix-build-after-y2038-changes-in-glibc.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1563883200">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1567598400">- Add Fix-build-with-libnettle-3.5.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1143454: Require user(tftp) instead of creating it ourselves.
- Package contrib/lease-tools/dhcp_release6.
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1575115200">- Remove redundant %else without meaning (if/else/else/endif?)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588680000">- Update to 2.81:
  * Improve cache behaviour for TCP connections
  * Remove the NO_FORK compile-time option, and support for uclinux
  * Fix line-counting when reading /etc/hosts and friends
  * Fix bug in DNS non-terminal code, added in 2.80, which could
  sometimes cause a NODATA rather than an NXDOMAIN reply.
  * Support TCP-fastopen (RFC-7413) on both incoming and
  outgoing TCP connections, if supported and enabled in the OS.
  * Improve kernel-capability manipulation code under Linux
  * Add --shared-network config. This enables allocation of addresses
  by the DHCP server in subnets where the server (or relay) does not
  have an interface on the network in that subnet. Many thanks to
  kamp.de for sponsoring this feature.
  * Fix broken contrib/lease_tools/dhcp_lease_time.c. A packet
  validation check got borked in commit 2b38e382 and release 2.80.
  Thanks to Tomasz Szajner for spotting this.
  * Fix compilation against nettle version 3.5 and later.
  * Fix spurious DNSSEC validation failures when the auth section
  of a reply contains unsigned RRs from a signed zone,
  with the exception that NSEC and NSEC3 RRs must always be signed.
    Thanks to Tore Anderson for spotting and diagnosing the bug.
  * Add --dhcp-ignore-clid. This disables reading of DHCP client
  identifier option (option 61), so clients are only identified by
  MAC addresses.
  * Fix a bug which stopped --dhcp-name-match from working when a hostname
  is supplied in --dhcp-host. Thanks to James Feeney for spotting this.
  * Fix bug which caused very rarely caused zero-length DHCPv6 packets.
  Thanks to Dereck Higgins for spotting this.
  * Add --tftp-single-port option.
  * Enhance --conf-dir to load files in a deterministic order
  * Add filtering by tag of --dhcp-host directives
  * Remove DSA signature verification from DNSSEC, as specified in
  RFC 8624
  * Add --script-on-renewal option.
- Remove Fix-build-with-libnettle-3.5.patch
- Remove 0001-fix-build-after-y2038-changes-in-glibc.patch
- Remove dnsmasq-CVE-2019-14834.patch</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1595937600">- Update to 2.82:
  * Improve behaviour in the face of network interfaces which come
    and go and change index.
  * Convert hard startup failure on NETLINK_NO_ENOBUFS under
    qemu-user to a warning.
  * Allow IPv6 addresses ofthe form [::ffff:1.2.3.4] in
  - -dhcp-option.
  * Fix crash under heavy TCP connection load introduced in 2.81.
  * Change default lease time for DHCPv6 to one day.
  * Alter calculation of preferred and valid times in router
    advertisements, so that these do not have a floor applied of
    the lease time in the dhcp-range if this is not explicitly
    specified and is merely the default.
- Reformat spec file with spec-cleaner</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1611057600">- Update to 2.83:
  * bsc#1177077: Fixed DNSpooq vulnerabilities
  * Use the values of --min-port and --max-port in outgoing
    TCP connections to upstream DNS servers.
  * Fix a remote buffer overflow problem in the DNSSEC code.
    Any dnsmasq with DNSSEC compiled in and enabled is vulnerable
    to this, referenced by CVE-2020-25681, CVE-2020-25682,
    CVE-2020-25683 CVE-2020-25687.
  * Be sure to only accept UDP DNS query replies at the address
    from which the query was originated. This keeps as much
    entropy in the {query-ID, random-port} tuple as possible, to
    help defeat cache poisoning attacks. Refer: CVE-2020-25684.
  * Use the SHA-256 hash function to verify that DNS answers
    received are for the questions originally asked. This replaces
    the slightly insecure SHA-1 (when compiled with DNSSEC) or
    the very insecure CRC32 (otherwise). Refer: CVE-2020-25685
  * Handle multiple identical near simultaneous DNS queries better.
    Previously, such queries would all be forwarded independently.
    This is, in theory, inefficent but in practise not a problem,
    _except_ that is means that an answer for any of the forwarded
    queries will be accepted and cached.
    An attacker can send a query multiple times, and for each
    repeat, another {port, ID} becomes capable of accepting the
    answer he is sending in the blind, to random IDs and ports.
    The chance of a succesful attack is therefore multiplied by the
    number of repeats of the query. The new behaviour detects
    repeated queries and merely stores the clients sending repeats
    so that when the first query completes, the answer can be sent
    to all the clients who asked. Refer: CVE-2020-25686.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611748800">- Fix building with lua54</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612785600">- update to 2.84:
  * Change HAVE_NETTLEHASH compile-time to HAVE_CRYPTOHASH
  * Tidy initialisation in hash_questions.c
  * Optimise sort_rrset for the case where the RR type
  * Move fd into frec_src</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1618833600">- Update to 2.85:
  * Fix problem with DNS retries in 2.83/2.84.
  * Tweak sort order of tags in get-version.
  * Avoid treating a --dhcp-host which has an IPv6 address as
    eligible for use with DHCPv4 on the grounds that it has
    no address, and vice-versa.
  * Add --dynamic-host option: A and AAAA records which take their
    network part from the network of a local interface. Useful
    for routers with dynamically prefixes.
  * Teach --bogus-nxdomain and --ignore-address to take an IPv4
    subnet.
  * CVE-2021-3448, bsc#1183709: Use random source ports where
    possible if source addresses/interfaces in use.
  * Change the method of allocation of random source ports for DNS.
  * Scale the size of the DNS random-port pool based on the
    value of the --dns-forward-max configuration.
  * Tweak TFTP code to check sender of all received packets, as
    specified in RFC 1350 para 4.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622635200">- Change to using systemd-sysusers on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1631880000">- Update to 2.86:
  * Handle DHCPREBIND requests in the DHCPv6 server code.
  * Fix bug which caused dnsmasq to lose track of processes forked
    to handle TCP DNS connections under heavy load.
  * Major rewrite of the DNS server and domain handling code. This
    should be largely transparent, but it drastically improves
    performance and reduces memory foot-print when configuring
    large numbers of domains.
  * Revise resource handling for number of concurrent DNS queries.
  * Improve efficiency of DNSSEC.
  * Connection track mark based DNS query filtering.
  * Allow smaller than 64 prefix lengths in synth-domain, with
    caveats.
  - -synth-domain=1234:4567::/56,example.com is now valid.
  * Make domains generated by --synth-domain appear in replies
    when in authoritative mode.
  * Ensure CAP_NET_ADMIN capability is available when conntrack
    is configured.
  * When --dhcp-hostsfile --dhcp-optsfile and --addn-hosts are
    given a directory as argument, define the order in which files
    within that directory are read (alphabetical order of filename).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1632398400">- jsc#SLE-17936: Sync this state from Factory to SLE-15-SP1.
- SLE bugs that got fixed upstream between 2.79 and 2.86, but for
  which we need to keep references when syncing:
  * bsc#1176076: dnsmasq-servfail.patch
  * bsc#1156543: dnsmasq-siocgstamp.patch
  * bsc#1138743: dnsmasq-cache-size.patch
  * bsc#1076958: CVE-2017-15107, dnsmasq-CVE-2017-15107.patch
  * bsc#1180914: Open inotify socket only when used.
  * removed dnsmasq-dnspooq.patch
- bsc#1173646, CVE-2020-14312: Set --local-service by default.</changelog>
</package>
<package pkgid="6d355f69342db68e5b1ea1ffc0205466273eed7bf3eeebaace294ca507ce6482" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.86" rel="lp152.7.6.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540209600">- Ensure neutrality of descriptions. / Replace description with
  new upstream description.
- Do not hide failures from user/group additions.
- Replace old $RPM_* shell vars by macros.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1548244800">- libidn should not be used anymore, switch to libidn2</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1550836800">- Drop use of $FIRST_ARG in .spec
  The use of $FIRST_ARG was probably required because of the
  %service_* rpm macros were playing tricks with the shell positional
  parameters. This is bad practice and error prones so let's assume
  that no macros should do that anymore and hence it's safe to assume
  that positional parameters remains unchanged after any rpm macro
  call.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1562760000">- add 0001-fix-build-after-y2038-changes-in-glibc.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1563883200">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1567598400">- Add Fix-build-with-libnettle-3.5.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1143454: Require user(tftp) instead of creating it ourselves.
- Package contrib/lease-tools/dhcp_release6.
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1575115200">- Remove redundant %else without meaning (if/else/else/endif?)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588680000">- Update to 2.81:
  * Improve cache behaviour for TCP connections
  * Remove the NO_FORK compile-time option, and support for uclinux
  * Fix line-counting when reading /etc/hosts and friends
  * Fix bug in DNS non-terminal code, added in 2.80, which could
  sometimes cause a NODATA rather than an NXDOMAIN reply.
  * Support TCP-fastopen (RFC-7413) on both incoming and
  outgoing TCP connections, if supported and enabled in the OS.
  * Improve kernel-capability manipulation code under Linux
  * Add --shared-network config. This enables allocation of addresses
  by the DHCP server in subnets where the server (or relay) does not
  have an interface on the network in that subnet. Many thanks to
  kamp.de for sponsoring this feature.
  * Fix broken contrib/lease_tools/dhcp_lease_time.c. A packet
  validation check got borked in commit 2b38e382 and release 2.80.
  Thanks to Tomasz Szajner for spotting this.
  * Fix compilation against nettle version 3.5 and later.
  * Fix spurious DNSSEC validation failures when the auth section
  of a reply contains unsigned RRs from a signed zone,
  with the exception that NSEC and NSEC3 RRs must always be signed.
    Thanks to Tore Anderson for spotting and diagnosing the bug.
  * Add --dhcp-ignore-clid. This disables reading of DHCP client
  identifier option (option 61), so clients are only identified by
  MAC addresses.
  * Fix a bug which stopped --dhcp-name-match from working when a hostname
  is supplied in --dhcp-host. Thanks to James Feeney for spotting this.
  * Fix bug which caused very rarely caused zero-length DHCPv6 packets.
  Thanks to Dereck Higgins for spotting this.
  * Add --tftp-single-port option.
  * Enhance --conf-dir to load files in a deterministic order
  * Add filtering by tag of --dhcp-host directives
  * Remove DSA signature verification from DNSSEC, as specified in
  RFC 8624
  * Add --script-on-renewal option.
- Remove Fix-build-with-libnettle-3.5.patch
- Remove 0001-fix-build-after-y2038-changes-in-glibc.patch
- Remove dnsmasq-CVE-2019-14834.patch</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1595937600">- Update to 2.82:
  * Improve behaviour in the face of network interfaces which come
    and go and change index.
  * Convert hard startup failure on NETLINK_NO_ENOBUFS under
    qemu-user to a warning.
  * Allow IPv6 addresses ofthe form [::ffff:1.2.3.4] in
  - -dhcp-option.
  * Fix crash under heavy TCP connection load introduced in 2.81.
  * Change default lease time for DHCPv6 to one day.
  * Alter calculation of preferred and valid times in router
    advertisements, so that these do not have a floor applied of
    the lease time in the dhcp-range if this is not explicitly
    specified and is merely the default.
- Reformat spec file with spec-cleaner</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1611057600">- Update to 2.83:
  * bsc#1177077: Fixed DNSpooq vulnerabilities
  * Use the values of --min-port and --max-port in outgoing
    TCP connections to upstream DNS servers.
  * Fix a remote buffer overflow problem in the DNSSEC code.
    Any dnsmasq with DNSSEC compiled in and enabled is vulnerable
    to this, referenced by CVE-2020-25681, CVE-2020-25682,
    CVE-2020-25683 CVE-2020-25687.
  * Be sure to only accept UDP DNS query replies at the address
    from which the query was originated. This keeps as much
    entropy in the {query-ID, random-port} tuple as possible, to
    help defeat cache poisoning attacks. Refer: CVE-2020-25684.
  * Use the SHA-256 hash function to verify that DNS answers
    received are for the questions originally asked. This replaces
    the slightly insecure SHA-1 (when compiled with DNSSEC) or
    the very insecure CRC32 (otherwise). Refer: CVE-2020-25685
  * Handle multiple identical near simultaneous DNS queries better.
    Previously, such queries would all be forwarded independently.
    This is, in theory, inefficent but in practise not a problem,
    _except_ that is means that an answer for any of the forwarded
    queries will be accepted and cached.
    An attacker can send a query multiple times, and for each
    repeat, another {port, ID} becomes capable of accepting the
    answer he is sending in the blind, to random IDs and ports.
    The chance of a succesful attack is therefore multiplied by the
    number of repeats of the query. The new behaviour detects
    repeated queries and merely stores the clients sending repeats
    so that when the first query completes, the answer can be sent
    to all the clients who asked. Refer: CVE-2020-25686.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611748800">- Fix building with lua54</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612785600">- update to 2.84:
  * Change HAVE_NETTLEHASH compile-time to HAVE_CRYPTOHASH
  * Tidy initialisation in hash_questions.c
  * Optimise sort_rrset for the case where the RR type
  * Move fd into frec_src</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1618833600">- Update to 2.85:
  * Fix problem with DNS retries in 2.83/2.84.
  * Tweak sort order of tags in get-version.
  * Avoid treating a --dhcp-host which has an IPv6 address as
    eligible for use with DHCPv4 on the grounds that it has
    no address, and vice-versa.
  * Add --dynamic-host option: A and AAAA records which take their
    network part from the network of a local interface. Useful
    for routers with dynamically prefixes.
  * Teach --bogus-nxdomain and --ignore-address to take an IPv4
    subnet.
  * CVE-2021-3448, bsc#1183709: Use random source ports where
    possible if source addresses/interfaces in use.
  * Change the method of allocation of random source ports for DNS.
  * Scale the size of the DNS random-port pool based on the
    value of the --dns-forward-max configuration.
  * Tweak TFTP code to check sender of all received packets, as
    specified in RFC 1350 para 4.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622635200">- Change to using systemd-sysusers on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1631880000">- Update to 2.86:
  * Handle DHCPREBIND requests in the DHCPv6 server code.
  * Fix bug which caused dnsmasq to lose track of processes forked
    to handle TCP DNS connections under heavy load.
  * Major rewrite of the DNS server and domain handling code. This
    should be largely transparent, but it drastically improves
    performance and reduces memory foot-print when configuring
    large numbers of domains.
  * Revise resource handling for number of concurrent DNS queries.
  * Improve efficiency of DNSSEC.
  * Connection track mark based DNS query filtering.
  * Allow smaller than 64 prefix lengths in synth-domain, with
    caveats.
  - -synth-domain=1234:4567::/56,example.com is now valid.
  * Make domains generated by --synth-domain appear in replies
    when in authoritative mode.
  * Ensure CAP_NET_ADMIN capability is available when conntrack
    is configured.
  * When --dhcp-hostsfile --dhcp-optsfile and --addn-hosts are
    given a directory as argument, define the order in which files
    within that directory are read (alphabetical order of filename).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1632398400">- jsc#SLE-17936: Sync this state from Factory to SLE-15-SP1.
- SLE bugs that got fixed upstream between 2.79 and 2.86, but for
  which we need to keep references when syncing:
  * bsc#1176076: dnsmasq-servfail.patch
  * bsc#1156543: dnsmasq-siocgstamp.patch
  * bsc#1138743: dnsmasq-cache-size.patch
  * bsc#1076958: CVE-2017-15107, dnsmasq-CVE-2017-15107.patch
  * bsc#1180914: Open inotify socket only when used.
  * removed dnsmasq-dnspooq.patch
- bsc#1173646, CVE-2020-14312: Set --local-service by default.</changelog>
</package>
<package pkgid="ac2ce42c8adaad13827c3d9e19cb4ba925b608633fab2c5225a3c106f5b679d2" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.86" rel="lp152.7.6.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540209600">- Ensure neutrality of descriptions. / Replace description with
  new upstream description.
- Do not hide failures from user/group additions.
- Replace old $RPM_* shell vars by macros.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1548244800">- libidn should not be used anymore, switch to libidn2</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1550836800">- Drop use of $FIRST_ARG in .spec
  The use of $FIRST_ARG was probably required because of the
  %service_* rpm macros were playing tricks with the shell positional
  parameters. This is bad practice and error prones so let's assume
  that no macros should do that anymore and hence it's safe to assume
  that positional parameters remains unchanged after any rpm macro
  call.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1562760000">- add 0001-fix-build-after-y2038-changes-in-glibc.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1563883200">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1567598400">- Add Fix-build-with-libnettle-3.5.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1143454: Require user(tftp) instead of creating it ourselves.
- Package contrib/lease-tools/dhcp_release6.
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1575115200">- Remove redundant %else without meaning (if/else/else/endif?)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588680000">- Update to 2.81:
  * Improve cache behaviour for TCP connections
  * Remove the NO_FORK compile-time option, and support for uclinux
  * Fix line-counting when reading /etc/hosts and friends
  * Fix bug in DNS non-terminal code, added in 2.80, which could
  sometimes cause a NODATA rather than an NXDOMAIN reply.
  * Support TCP-fastopen (RFC-7413) on both incoming and
  outgoing TCP connections, if supported and enabled in the OS.
  * Improve kernel-capability manipulation code under Linux
  * Add --shared-network config. This enables allocation of addresses
  by the DHCP server in subnets where the server (or relay) does not
  have an interface on the network in that subnet. Many thanks to
  kamp.de for sponsoring this feature.
  * Fix broken contrib/lease_tools/dhcp_lease_time.c. A packet
  validation check got borked in commit 2b38e382 and release 2.80.
  Thanks to Tomasz Szajner for spotting this.
  * Fix compilation against nettle version 3.5 and later.
  * Fix spurious DNSSEC validation failures when the auth section
  of a reply contains unsigned RRs from a signed zone,
  with the exception that NSEC and NSEC3 RRs must always be signed.
    Thanks to Tore Anderson for spotting and diagnosing the bug.
  * Add --dhcp-ignore-clid. This disables reading of DHCP client
  identifier option (option 61), so clients are only identified by
  MAC addresses.
  * Fix a bug which stopped --dhcp-name-match from working when a hostname
  is supplied in --dhcp-host. Thanks to James Feeney for spotting this.
  * Fix bug which caused very rarely caused zero-length DHCPv6 packets.
  Thanks to Dereck Higgins for spotting this.
  * Add --tftp-single-port option.
  * Enhance --conf-dir to load files in a deterministic order
  * Add filtering by tag of --dhcp-host directives
  * Remove DSA signature verification from DNSSEC, as specified in
  RFC 8624
  * Add --script-on-renewal option.
- Remove Fix-build-with-libnettle-3.5.patch
- Remove 0001-fix-build-after-y2038-changes-in-glibc.patch
- Remove dnsmasq-CVE-2019-14834.patch</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1595937600">- Update to 2.82:
  * Improve behaviour in the face of network interfaces which come
    and go and change index.
  * Convert hard startup failure on NETLINK_NO_ENOBUFS under
    qemu-user to a warning.
  * Allow IPv6 addresses ofthe form [::ffff:1.2.3.4] in
  - -dhcp-option.
  * Fix crash under heavy TCP connection load introduced in 2.81.
  * Change default lease time for DHCPv6 to one day.
  * Alter calculation of preferred and valid times in router
    advertisements, so that these do not have a floor applied of
    the lease time in the dhcp-range if this is not explicitly
    specified and is merely the default.
- Reformat spec file with spec-cleaner</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1611057600">- Update to 2.83:
  * bsc#1177077: Fixed DNSpooq vulnerabilities
  * Use the values of --min-port and --max-port in outgoing
    TCP connections to upstream DNS servers.
  * Fix a remote buffer overflow problem in the DNSSEC code.
    Any dnsmasq with DNSSEC compiled in and enabled is vulnerable
    to this, referenced by CVE-2020-25681, CVE-2020-25682,
    CVE-2020-25683 CVE-2020-25687.
  * Be sure to only accept UDP DNS query replies at the address
    from which the query was originated. This keeps as much
    entropy in the {query-ID, random-port} tuple as possible, to
    help defeat cache poisoning attacks. Refer: CVE-2020-25684.
  * Use the SHA-256 hash function to verify that DNS answers
    received are for the questions originally asked. This replaces
    the slightly insecure SHA-1 (when compiled with DNSSEC) or
    the very insecure CRC32 (otherwise). Refer: CVE-2020-25685
  * Handle multiple identical near simultaneous DNS queries better.
    Previously, such queries would all be forwarded independently.
    This is, in theory, inefficent but in practise not a problem,
    _except_ that is means that an answer for any of the forwarded
    queries will be accepted and cached.
    An attacker can send a query multiple times, and for each
    repeat, another {port, ID} becomes capable of accepting the
    answer he is sending in the blind, to random IDs and ports.
    The chance of a succesful attack is therefore multiplied by the
    number of repeats of the query. The new behaviour detects
    repeated queries and merely stores the clients sending repeats
    so that when the first query completes, the answer can be sent
    to all the clients who asked. Refer: CVE-2020-25686.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611748800">- Fix building with lua54</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612785600">- update to 2.84:
  * Change HAVE_NETTLEHASH compile-time to HAVE_CRYPTOHASH
  * Tidy initialisation in hash_questions.c
  * Optimise sort_rrset for the case where the RR type
  * Move fd into frec_src</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1618833600">- Update to 2.85:
  * Fix problem with DNS retries in 2.83/2.84.
  * Tweak sort order of tags in get-version.
  * Avoid treating a --dhcp-host which has an IPv6 address as
    eligible for use with DHCPv4 on the grounds that it has
    no address, and vice-versa.
  * Add --dynamic-host option: A and AAAA records which take their
    network part from the network of a local interface. Useful
    for routers with dynamically prefixes.
  * Teach --bogus-nxdomain and --ignore-address to take an IPv4
    subnet.
  * CVE-2021-3448, bsc#1183709: Use random source ports where
    possible if source addresses/interfaces in use.
  * Change the method of allocation of random source ports for DNS.
  * Scale the size of the DNS random-port pool based on the
    value of the --dns-forward-max configuration.
  * Tweak TFTP code to check sender of all received packets, as
    specified in RFC 1350 para 4.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622635200">- Change to using systemd-sysusers on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1631880000">- Update to 2.86:
  * Handle DHCPREBIND requests in the DHCPv6 server code.
  * Fix bug which caused dnsmasq to lose track of processes forked
    to handle TCP DNS connections under heavy load.
  * Major rewrite of the DNS server and domain handling code. This
    should be largely transparent, but it drastically improves
    performance and reduces memory foot-print when configuring
    large numbers of domains.
  * Revise resource handling for number of concurrent DNS queries.
  * Improve efficiency of DNSSEC.
  * Connection track mark based DNS query filtering.
  * Allow smaller than 64 prefix lengths in synth-domain, with
    caveats.
  - -synth-domain=1234:4567::/56,example.com is now valid.
  * Make domains generated by --synth-domain appear in replies
    when in authoritative mode.
  * Ensure CAP_NET_ADMIN capability is available when conntrack
    is configured.
  * When --dhcp-hostsfile --dhcp-optsfile and --addn-hosts are
    given a directory as argument, define the order in which files
    within that directory are read (alphabetical order of filename).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1632398400">- jsc#SLE-17936: Sync this state from Factory to SLE-15-SP1.
- SLE bugs that got fixed upstream between 2.79 and 2.86, but for
  which we need to keep references when syncing:
  * bsc#1176076: dnsmasq-servfail.patch
  * bsc#1156543: dnsmasq-siocgstamp.patch
  * bsc#1138743: dnsmasq-cache-size.patch
  * bsc#1076958: CVE-2017-15107, dnsmasq-CVE-2017-15107.patch
  * bsc#1180914: Open inotify socket only when used.
  * removed dnsmasq-dnspooq.patch
- bsc#1173646, CVE-2020-14312: Set --local-service by default.</changelog>
</package>
<package pkgid="8128f7c386df52ae23ef6705702114d6f33f98c0900b1041f7993867474bab8d" name="dnsmasq-utils" arch="i586">
  <version epoch="0" ver="2.78" rel="lp152.7.3.1"/>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1608292800">- Retry query to other servers on receipt of SERVFAIL rcode
  (bsc#1176076, dnsmasq-servfail.patch)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1610625600">- bsc#1177077: Fixed DNSpooq vulnerabilities (dnsmasq-dnspooq.patch)
- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:
  Fixed multiple Cache Poisoning attacks.
- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:
  Fixed multiple potential Heap-based overflows when DNSSEC is
  enabled.</changelog>
</package>
<package pkgid="55d956b705f769cf467001935c313759c8e999756f3cac58769fa1f4524de35f" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.78" rel="lp152.7.3.1"/>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1608292800">- Retry query to other servers on receipt of SERVFAIL rcode
  (bsc#1176076, dnsmasq-servfail.patch)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1610625600">- bsc#1177077: Fixed DNSpooq vulnerabilities (dnsmasq-dnspooq.patch)
- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:
  Fixed multiple Cache Poisoning attacks.
- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:
  Fixed multiple potential Heap-based overflows when DNSSEC is
  enabled.</changelog>
</package>
<package pkgid="4e32fec4978e552d3c8f7dc76fc0bae80d570feefe4b6a3c56a8c05c6dfff3df" name="dnsmasq-utils" arch="i586">
  <version epoch="0" ver="2.86" rel="lp152.7.6.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540209600">- Ensure neutrality of descriptions. / Replace description with
  new upstream description.
- Do not hide failures from user/group additions.
- Replace old $RPM_* shell vars by macros.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1548244800">- libidn should not be used anymore, switch to libidn2</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1550836800">- Drop use of $FIRST_ARG in .spec
  The use of $FIRST_ARG was probably required because of the
  %service_* rpm macros were playing tricks with the shell positional
  parameters. This is bad practice and error prones so let's assume
  that no macros should do that anymore and hence it's safe to assume
  that positional parameters remains unchanged after any rpm macro
  call.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1562760000">- add 0001-fix-build-after-y2038-changes-in-glibc.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1563883200">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1567598400">- Add Fix-build-with-libnettle-3.5.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1143454: Require user(tftp) instead of creating it ourselves.
- Package contrib/lease-tools/dhcp_release6.
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1575115200">- Remove redundant %else without meaning (if/else/else/endif?)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588680000">- Update to 2.81:
  * Improve cache behaviour for TCP connections
  * Remove the NO_FORK compile-time option, and support for uclinux
  * Fix line-counting when reading /etc/hosts and friends
  * Fix bug in DNS non-terminal code, added in 2.80, which could
  sometimes cause a NODATA rather than an NXDOMAIN reply.
  * Support TCP-fastopen (RFC-7413) on both incoming and
  outgoing TCP connections, if supported and enabled in the OS.
  * Improve kernel-capability manipulation code under Linux
  * Add --shared-network config. This enables allocation of addresses
  by the DHCP server in subnets where the server (or relay) does not
  have an interface on the network in that subnet. Many thanks to
  kamp.de for sponsoring this feature.
  * Fix broken contrib/lease_tools/dhcp_lease_time.c. A packet
  validation check got borked in commit 2b38e382 and release 2.80.
  Thanks to Tomasz Szajner for spotting this.
  * Fix compilation against nettle version 3.5 and later.
  * Fix spurious DNSSEC validation failures when the auth section
  of a reply contains unsigned RRs from a signed zone,
  with the exception that NSEC and NSEC3 RRs must always be signed.
    Thanks to Tore Anderson for spotting and diagnosing the bug.
  * Add --dhcp-ignore-clid. This disables reading of DHCP client
  identifier option (option 61), so clients are only identified by
  MAC addresses.
  * Fix a bug which stopped --dhcp-name-match from working when a hostname
  is supplied in --dhcp-host. Thanks to James Feeney for spotting this.
  * Fix bug which caused very rarely caused zero-length DHCPv6 packets.
  Thanks to Dereck Higgins for spotting this.
  * Add --tftp-single-port option.
  * Enhance --conf-dir to load files in a deterministic order
  * Add filtering by tag of --dhcp-host directives
  * Remove DSA signature verification from DNSSEC, as specified in
  RFC 8624
  * Add --script-on-renewal option.
- Remove Fix-build-with-libnettle-3.5.patch
- Remove 0001-fix-build-after-y2038-changes-in-glibc.patch
- Remove dnsmasq-CVE-2019-14834.patch</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1595937600">- Update to 2.82:
  * Improve behaviour in the face of network interfaces which come
    and go and change index.
  * Convert hard startup failure on NETLINK_NO_ENOBUFS under
    qemu-user to a warning.
  * Allow IPv6 addresses ofthe form [::ffff:1.2.3.4] in
  - -dhcp-option.
  * Fix crash under heavy TCP connection load introduced in 2.81.
  * Change default lease time for DHCPv6 to one day.
  * Alter calculation of preferred and valid times in router
    advertisements, so that these do not have a floor applied of
    the lease time in the dhcp-range if this is not explicitly
    specified and is merely the default.
- Reformat spec file with spec-cleaner</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1611057600">- Update to 2.83:
  * bsc#1177077: Fixed DNSpooq vulnerabilities
  * Use the values of --min-port and --max-port in outgoing
    TCP connections to upstream DNS servers.
  * Fix a remote buffer overflow problem in the DNSSEC code.
    Any dnsmasq with DNSSEC compiled in and enabled is vulnerable
    to this, referenced by CVE-2020-25681, CVE-2020-25682,
    CVE-2020-25683 CVE-2020-25687.
  * Be sure to only accept UDP DNS query replies at the address
    from which the query was originated. This keeps as much
    entropy in the {query-ID, random-port} tuple as possible, to
    help defeat cache poisoning attacks. Refer: CVE-2020-25684.
  * Use the SHA-256 hash function to verify that DNS answers
    received are for the questions originally asked. This replaces
    the slightly insecure SHA-1 (when compiled with DNSSEC) or
    the very insecure CRC32 (otherwise). Refer: CVE-2020-25685
  * Handle multiple identical near simultaneous DNS queries better.
    Previously, such queries would all be forwarded independently.
    This is, in theory, inefficent but in practise not a problem,
    _except_ that is means that an answer for any of the forwarded
    queries will be accepted and cached.
    An attacker can send a query multiple times, and for each
    repeat, another {port, ID} becomes capable of accepting the
    answer he is sending in the blind, to random IDs and ports.
    The chance of a succesful attack is therefore multiplied by the
    number of repeats of the query. The new behaviour detects
    repeated queries and merely stores the clients sending repeats
    so that when the first query completes, the answer can be sent
    to all the clients who asked. Refer: CVE-2020-25686.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611748800">- Fix building with lua54</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612785600">- update to 2.84:
  * Change HAVE_NETTLEHASH compile-time to HAVE_CRYPTOHASH
  * Tidy initialisation in hash_questions.c
  * Optimise sort_rrset for the case where the RR type
  * Move fd into frec_src</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1618833600">- Update to 2.85:
  * Fix problem with DNS retries in 2.83/2.84.
  * Tweak sort order of tags in get-version.
  * Avoid treating a --dhcp-host which has an IPv6 address as
    eligible for use with DHCPv4 on the grounds that it has
    no address, and vice-versa.
  * Add --dynamic-host option: A and AAAA records which take their
    network part from the network of a local interface. Useful
    for routers with dynamically prefixes.
  * Teach --bogus-nxdomain and --ignore-address to take an IPv4
    subnet.
  * CVE-2021-3448, bsc#1183709: Use random source ports where
    possible if source addresses/interfaces in use.
  * Change the method of allocation of random source ports for DNS.
  * Scale the size of the DNS random-port pool based on the
    value of the --dns-forward-max configuration.
  * Tweak TFTP code to check sender of all received packets, as
    specified in RFC 1350 para 4.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622635200">- Change to using systemd-sysusers on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1631880000">- Update to 2.86:
  * Handle DHCPREBIND requests in the DHCPv6 server code.
  * Fix bug which caused dnsmasq to lose track of processes forked
    to handle TCP DNS connections under heavy load.
  * Major rewrite of the DNS server and domain handling code. This
    should be largely transparent, but it drastically improves
    performance and reduces memory foot-print when configuring
    large numbers of domains.
  * Revise resource handling for number of concurrent DNS queries.
  * Improve efficiency of DNSSEC.
  * Connection track mark based DNS query filtering.
  * Allow smaller than 64 prefix lengths in synth-domain, with
    caveats.
  - -synth-domain=1234:4567::/56,example.com is now valid.
  * Make domains generated by --synth-domain appear in replies
    when in authoritative mode.
  * Ensure CAP_NET_ADMIN capability is available when conntrack
    is configured.
  * When --dhcp-hostsfile --dhcp-optsfile and --addn-hosts are
    given a directory as argument, define the order in which files
    within that directory are read (alphabetical order of filename).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1632398400">- jsc#SLE-17936: Sync this state from Factory to SLE-15-SP1.
- SLE bugs that got fixed upstream between 2.79 and 2.86, but for
  which we need to keep references when syncing:
  * bsc#1176076: dnsmasq-servfail.patch
  * bsc#1156543: dnsmasq-siocgstamp.patch
  * bsc#1138743: dnsmasq-cache-size.patch
  * bsc#1076958: CVE-2017-15107, dnsmasq-CVE-2017-15107.patch
  * bsc#1180914: Open inotify socket only when used.
  * removed dnsmasq-dnspooq.patch
- bsc#1173646, CVE-2020-14312: Set --local-service by default.</changelog>
</package>
<package pkgid="f6d4c8e0ff80770f44dea3a5dc13ba5ec535bdd1b7d04f7ec10fc66e0f3d89e9" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.86" rel="lp152.7.6.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540209600">- Ensure neutrality of descriptions. / Replace description with
  new upstream description.
- Do not hide failures from user/group additions.
- Replace old $RPM_* shell vars by macros.</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1548244800">- libidn should not be used anymore, switch to libidn2</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1550836800">- Drop use of $FIRST_ARG in .spec
  The use of $FIRST_ARG was probably required because of the
  %service_* rpm macros were playing tricks with the shell positional
  parameters. This is bad practice and error prones so let's assume
  that no macros should do that anymore and hence it's safe to assume
  that positional parameters remains unchanged after any rpm macro
  call.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1562760000">- add 0001-fix-build-after-y2038-changes-in-glibc.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1563883200">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1567598400">- Add Fix-build-with-libnettle-3.5.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1143454: Require user(tftp) instead of creating it ourselves.
- Package contrib/lease-tools/dhcp_release6.
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1575115200">- Remove redundant %else without meaning (if/else/else/endif?)</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1588680000">- Update to 2.81:
  * Improve cache behaviour for TCP connections
  * Remove the NO_FORK compile-time option, and support for uclinux
  * Fix line-counting when reading /etc/hosts and friends
  * Fix bug in DNS non-terminal code, added in 2.80, which could
  sometimes cause a NODATA rather than an NXDOMAIN reply.
  * Support TCP-fastopen (RFC-7413) on both incoming and
  outgoing TCP connections, if supported and enabled in the OS.
  * Improve kernel-capability manipulation code under Linux
  * Add --shared-network config. This enables allocation of addresses
  by the DHCP server in subnets where the server (or relay) does not
  have an interface on the network in that subnet. Many thanks to
  kamp.de for sponsoring this feature.
  * Fix broken contrib/lease_tools/dhcp_lease_time.c. A packet
  validation check got borked in commit 2b38e382 and release 2.80.
  Thanks to Tomasz Szajner for spotting this.
  * Fix compilation against nettle version 3.5 and later.
  * Fix spurious DNSSEC validation failures when the auth section
  of a reply contains unsigned RRs from a signed zone,
  with the exception that NSEC and NSEC3 RRs must always be signed.
    Thanks to Tore Anderson for spotting and diagnosing the bug.
  * Add --dhcp-ignore-clid. This disables reading of DHCP client
  identifier option (option 61), so clients are only identified by
  MAC addresses.
  * Fix a bug which stopped --dhcp-name-match from working when a hostname
  is supplied in --dhcp-host. Thanks to James Feeney for spotting this.
  * Fix bug which caused very rarely caused zero-length DHCPv6 packets.
  Thanks to Dereck Higgins for spotting this.
  * Add --tftp-single-port option.
  * Enhance --conf-dir to load files in a deterministic order
  * Add filtering by tag of --dhcp-host directives
  * Remove DSA signature verification from DNSSEC, as specified in
  RFC 8624
  * Add --script-on-renewal option.
- Remove Fix-build-with-libnettle-3.5.patch
- Remove 0001-fix-build-after-y2038-changes-in-glibc.patch
- Remove dnsmasq-CVE-2019-14834.patch</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1595937600">- Update to 2.82:
  * Improve behaviour in the face of network interfaces which come
    and go and change index.
  * Convert hard startup failure on NETLINK_NO_ENOBUFS under
    qemu-user to a warning.
  * Allow IPv6 addresses ofthe form [::ffff:1.2.3.4] in
  - -dhcp-option.
  * Fix crash under heavy TCP connection load introduced in 2.81.
  * Change default lease time for DHCPv6 to one day.
  * Alter calculation of preferred and valid times in router
    advertisements, so that these do not have a floor applied of
    the lease time in the dhcp-range if this is not explicitly
    specified and is merely the default.
- Reformat spec file with spec-cleaner</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1611057600">- Update to 2.83:
  * bsc#1177077: Fixed DNSpooq vulnerabilities
  * Use the values of --min-port and --max-port in outgoing
    TCP connections to upstream DNS servers.
  * Fix a remote buffer overflow problem in the DNSSEC code.
    Any dnsmasq with DNSSEC compiled in and enabled is vulnerable
    to this, referenced by CVE-2020-25681, CVE-2020-25682,
    CVE-2020-25683 CVE-2020-25687.
  * Be sure to only accept UDP DNS query replies at the address
    from which the query was originated. This keeps as much
    entropy in the {query-ID, random-port} tuple as possible, to
    help defeat cache poisoning attacks. Refer: CVE-2020-25684.
  * Use the SHA-256 hash function to verify that DNS answers
    received are for the questions originally asked. This replaces
    the slightly insecure SHA-1 (when compiled with DNSSEC) or
    the very insecure CRC32 (otherwise). Refer: CVE-2020-25685
  * Handle multiple identical near simultaneous DNS queries better.
    Previously, such queries would all be forwarded independently.
    This is, in theory, inefficent but in practise not a problem,
    _except_ that is means that an answer for any of the forwarded
    queries will be accepted and cached.
    An attacker can send a query multiple times, and for each
    repeat, another {port, ID} becomes capable of accepting the
    answer he is sending in the blind, to random IDs and ports.
    The chance of a succesful attack is therefore multiplied by the
    number of repeats of the query. The new behaviour detects
    repeated queries and merely stores the clients sending repeats
    so that when the first query completes, the answer can be sent
    to all the clients who asked. Refer: CVE-2020-25686.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611748800">- Fix building with lua54</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612785600">- update to 2.84:
  * Change HAVE_NETTLEHASH compile-time to HAVE_CRYPTOHASH
  * Tidy initialisation in hash_questions.c
  * Optimise sort_rrset for the case where the RR type
  * Move fd into frec_src</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1618833600">- Update to 2.85:
  * Fix problem with DNS retries in 2.83/2.84.
  * Tweak sort order of tags in get-version.
  * Avoid treating a --dhcp-host which has an IPv6 address as
    eligible for use with DHCPv4 on the grounds that it has
    no address, and vice-versa.
  * Add --dynamic-host option: A and AAAA records which take their
    network part from the network of a local interface. Useful
    for routers with dynamically prefixes.
  * Teach --bogus-nxdomain and --ignore-address to take an IPv4
    subnet.
  * CVE-2021-3448, bsc#1183709: Use random source ports where
    possible if source addresses/interfaces in use.
  * Change the method of allocation of random source ports for DNS.
  * Scale the size of the DNS random-port pool based on the
    value of the --dns-forward-max configuration.
  * Tweak TFTP code to check sender of all received packets, as
    specified in RFC 1350 para 4.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1622635200">- Change to using systemd-sysusers on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1631880000">- Update to 2.86:
  * Handle DHCPREBIND requests in the DHCPv6 server code.
  * Fix bug which caused dnsmasq to lose track of processes forked
    to handle TCP DNS connections under heavy load.
  * Major rewrite of the DNS server and domain handling code. This
    should be largely transparent, but it drastically improves
    performance and reduces memory foot-print when configuring
    large numbers of domains.
  * Revise resource handling for number of concurrent DNS queries.
  * Improve efficiency of DNSSEC.
  * Connection track mark based DNS query filtering.
  * Allow smaller than 64 prefix lengths in synth-domain, with
    caveats.
  - -synth-domain=1234:4567::/56,example.com is now valid.
  * Make domains generated by --synth-domain appear in replies
    when in authoritative mode.
  * Ensure CAP_NET_ADMIN capability is available when conntrack
    is configured.
  * When --dhcp-hostsfile --dhcp-optsfile and --addn-hosts are
    given a directory as argument, define the order in which files
    within that directory are read (alphabetical order of filename).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1632398400">- jsc#SLE-17936: Sync this state from Factory to SLE-15-SP1.
- SLE bugs that got fixed upstream between 2.79 and 2.86, but for
  which we need to keep references when syncing:
  * bsc#1176076: dnsmasq-servfail.patch
  * bsc#1156543: dnsmasq-siocgstamp.patch
  * bsc#1138743: dnsmasq-cache-size.patch
  * bsc#1076958: CVE-2017-15107, dnsmasq-CVE-2017-15107.patch
  * bsc#1180914: Open inotify socket only when used.
  * removed dnsmasq-dnspooq.patch
- bsc#1173646, CVE-2020-14312: Set --local-service by default.</changelog>
</package>
<package pkgid="f0ed51ac3a4e078eec45a873acc9bfd9788ee6dbc1e52889471366da08f44664" name="docker" arch="src">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
</package>
<package pkgid="4ef7eaea8520ba2ae8a8f2d4339ceec0dc884449112f8fe195ea561cf180dda6" name="docker" arch="x86_64">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
</package>
<package pkgid="dc2e9eef6bf1982fa98513e927a4b123a63e43b208b29b036f78167ae42a477d" name="docker" arch="src">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.6.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1613217600">- disable firewalld patch unconditionally. (official fix will come)
  (bsc#1182168)</changelog>
</package>
<package pkgid="701778ffaa021a53298414bf376c48d859379e12308883c49974a9ac511de38f" name="docker" arch="x86_64">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.6.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1613217600">- disable firewalld patch unconditionally. (official fix will come)
  (bsc#1182168)</changelog>
</package>
<package pkgid="43a8e9c9ff59c2145788cb0959e6fb72e067a10bf331b60d4896c0dfa46f4fec" name="docker" arch="src">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.9.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
</package>
<package pkgid="db18480ba106f1512108a86af9dec07414d4080af8977c82b0aec001a3c3a912" name="docker" arch="x86_64">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.9.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
</package>
<package pkgid="ae5cd24c5417668bb9f8da6a6a583098458893ffc36d0b182ad3ad471d2bda13" name="docker" arch="src">
  <version epoch="0" ver="20.10.6_ce" rel="lp152.2.12.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="4ed1749632b7f4f38a47c67889b65289b971a2a285f43eaddee8bc1de4256a75" name="docker" arch="x86_64">
  <version epoch="0" ver="20.10.6_ce" rel="lp152.2.12.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="5b8c8571f9bd5f74ca8ac9622f2fa25795e475758daa50654f7e6d2fba2bc208" name="docker" arch="src">
  <version epoch="0" ver="20.10.6_ce" rel="lp152.2.15.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
</package>
<package pkgid="e6a129caefdd41bb9dccee7992f05af4b609f750239ec015ab21660857756709" name="docker" arch="x86_64">
  <version epoch="0" ver="20.10.6_ce" rel="lp152.2.15.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
</package>
<package pkgid="05f35a1d81db195dfee22d1b3ebaffd13e1943032ad5eb773a046a214ab9a093" name="docker" arch="src">
  <version epoch="0" ver="20.10.9_ce" rel="lp152.2.18.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1191355
  CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
</package>
<package pkgid="7aa1fab2ebf387ece5b2cc0e7090c0fcec0f602844023e53d95ca456fbeb9efe" name="docker" arch="x86_64">
  <version epoch="0" ver="20.10.9_ce" rel="lp152.2.18.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1191355
  CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
</package>
<package pkgid="86efdb46342786e9fe9154db88eae2e511b3af202607f4a853e09e41b7bdc7a7" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
</package>
<package pkgid="9591235dad52aaf1aa0214a86b5b8c547b19a19ad25d9a4c3c7e475cce591cd7" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.6.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1613217600">- disable firewalld patch unconditionally. (official fix will come)
  (bsc#1182168)</changelog>
</package>
<package pkgid="435ab459bb59969cb024f5e8cf9defb8ce51bd11a7bd14a6dbd60c14fd4a5172" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.9.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
</package>
<package pkgid="128a58fda55e2b021431cf5eb2824374475ca00603288e4167f3983caa6b5fbb" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="lp152.2.12.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="f03b5508a613efc20e003046dd69a828ac4aa2fa337ff0f55668db2e8595ea1e" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="lp152.2.15.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
</package>
<package pkgid="a31689bded8ae40a7bf26c5578e56e688d4bc1ce3fde53af019e234d64ff916e" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="20.10.9_ce" rel="lp152.2.18.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1191355
  CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
</package>
<package pkgid="dd65d694de5f772f9fdb7738422ea2df450e3fb6ef9c1c5e72621e2bdfd393dd" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
</package>
<package pkgid="d87a3f91cb79d5b2485b185bbf797f5f66a968d3680c10bf7212297a0cba5fdb" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.6.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1613217600">- disable firewalld patch unconditionally. (official fix will come)
  (bsc#1182168)</changelog>
</package>
<package pkgid="ae57a6f626d8a69c8c960e30c8991fea762d8f2fc95424862b5645ac8fcbb2ce" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.9.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
</package>
<package pkgid="445ba46501718d4cb9419b4fa87e6ee6e4916712873063d8455994671b9bbbfe" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="lp152.2.12.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="fb0d0e88d3f14e704f51385b09491e6f37f6dcc2b432e8966c2e930b2f06edfc" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="lp152.2.15.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
</package>
<package pkgid="02c2dc9c333adfaa2bedc8acbdd6aa3f1d230c3cd73b6683085c5d0da936b2fb" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="20.10.9_ce" rel="lp152.2.18.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1191355
  CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
</package>
<package pkgid="611180c7bbe4d45c155a5aab9ade81e759b985b35bd1a009dc5000b7a12f1f34" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2908_55e924b8a842" rel="lp152.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to libnetwork 45c710223c5f, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1572004800">- Update to libnetwork 3eb39382bfa6, which is required for Docker 19.03.4-ce.
  bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to libnetwork 153d0769a118, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to libnetwork 026aabaa6598, which is required for Docker 19.03.12-ce.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add patch which makes libnetwork compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to libnetwork 55e924b8a842, which is required for Docker 19.03.14-ce.
  bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
</package>
<package pkgid="80c15bde7e494ee78c1ff24bbdb88cd14271bcf8bf1a59c1b6ec38dc843e9087" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2908_55e924b8a842" rel="lp152.2.6.1"/>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to libnetwork 45c710223c5f, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1572004800">- Update to libnetwork 3eb39382bfa6, which is required for Docker 19.03.4-ce.
  bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to libnetwork 153d0769a118, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to libnetwork 026aabaa6598, which is required for Docker 19.03.12-ce.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add patch which makes libnetwork compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to libnetwork 55e924b8a842, which is required for Docker 19.03.14-ce.
  bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
</package>
<package pkgid="5ee1ff27ae0cc54c7544d385e9c0cbd06b9a3b3343b35405e3bd8e5edcf09d80" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc10+gitr3981_dc9208a3303f" rel="lp152.2.3.1"/>
  <changelog author="dcassany@suse.com" date="1528200000">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to runc 3e425f80a8c9, which is required for Docker 19.03.3-ce.
  bsc#1153367
- Rebase CVE-2019-16884 fix (3e425f80a8c9 doesn't contain the entire fix).
  bsc#1152308
  - CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579003200">- Add backported fix for CVE-2019-19921. bsc#1160452
  + CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579262400">- Update CVE-2019-19921 patch to match upstream PR.
  * CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to runc v1.0.0-rc10, which is required for Docker 19.03.11-ce.
  bsc#1172377
- Remove upstreamed patches:
  - CVE-2019-16884.patch
  - CVE-2019-19921.patch
- Synchronise patches with 'runc' package:
  + bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  * bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Switch to Go 1.13 for build.</changelog>
</package>
<package pkgid="0a0f0708db42214490ea1621bba8a466701eb809cab4c6225783efb0b14d8cb1" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc10+gitr3981_dc9208a3303f" rel="lp152.2.3.1"/>
  <changelog author="dcassany@suse.com" date="1528200000">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to runc 3e425f80a8c9, which is required for Docker 19.03.3-ce.
  bsc#1153367
- Rebase CVE-2019-16884 fix (3e425f80a8c9 doesn't contain the entire fix).
  bsc#1152308
  - CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579003200">- Add backported fix for CVE-2019-19921. bsc#1160452
  + CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579262400">- Update CVE-2019-19921 patch to match upstream PR.
  * CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to runc v1.0.0-rc10, which is required for Docker 19.03.11-ce.
  bsc#1172377
- Remove upstreamed patches:
  - CVE-2019-16884.patch
  - CVE-2019-19921.patch
- Synchronise patches with 'runc' package:
  + bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  * bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Switch to Go 1.13 for build.</changelog>
</package>
<package pkgid="741d312c7073de1cb2f851ce6af0e3ae0a8e2f950dc8033d815488e9ac426991" name="docker-test" arch="x86_64">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
</package>
<package pkgid="e0794b3ed8348333d67ff3594e831cbeae86d8993c8a55515d25bb36731cda37" name="docker-test" arch="x86_64">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.6.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1613217600">- disable firewalld patch unconditionally. (official fix will come)
  (bsc#1182168)</changelog>
</package>
<package pkgid="f967d71eaabee04113cc73deae8dee00f77398a5e79438b79098e3156ec270e8" name="docker-test" arch="x86_64">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.9.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
</package>
<package pkgid="33bdd1d1023b349f643d93acc388db572c42a387ec49071132bd7605b5dcf848" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
</package>
<package pkgid="e09e6e6517e4bb7445fd59cb2774543cf952c550f5edbde1f0d9534ea9797bc6" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.6.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1613217600">- disable firewalld patch unconditionally. (official fix will come)
  (bsc#1182168)</changelog>
</package>
<package pkgid="d996cec53d549ec5a2c1993af3a572647c012614b9b82773a33e0f29f567e6d7" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.9.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
</package>
<package pkgid="25502014d08567ea710beb4cc49cddbceea6ad5cfd2f644e9dbe3f80de110f04" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="lp152.2.12.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="aa69b29c8e5d5ac14c4f0246d2404030c3081d8b7a5a1176bf8e20975ebd5959" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="lp152.2.15.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
</package>
<package pkgid="95b340a0bd9195c260b40bed2b2430b36743f0e2ac298d3c87c43e2ee35dff8c" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="20.10.9_ce" rel="lp152.2.18.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1191355
  CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
</package>
<package pkgid="0ceab244c2fe87198bdeb9e0f609c8acac9b181d81182750648e3b0f94f0c875" name="dosfstools" arch="i586">
  <version epoch="0" ver="4.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1394107200">- updated to 3.0.25:
  * Prevent corruption of FAT during fsck on 64 bit platforms.
    unsigned long is 64 bit on x86-64, which means set_fat was writing two
    entries, which corrupts the next entry. This can cause loss of data in
    another file.
  * Fixed remaining 64 bit build warnings.</changelog>
  <changelog author="pgajdos@suse.com" date="1395057600">- updated to 3.0.26:
  * Fix "odd" files created by frequent power-loss.</changelog>
  <changelog author="pgajdos@suse.com" date="1403784000">- added fsck.{v,}fat and mkfs.{v,}fat compat symlinks in /sbin
  [bnc#884516]
- call spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1622030400">- Add fix-calculation.patch (gh#dosfstools/dosfstools#153, bsc#1172863)
  to work with different size of clusters.</changelog>
</package>
<package pkgid="f929808935bd54eeaeef8c313cf10664bbaa10105390363dff64e3b0b5aa383f" name="dosfstools" arch="src">
  <version epoch="0" ver="4.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1362398400">- update to 3.0.16: label fixes
  * dropped upstreamed
  - dosfstools-create-rootdir-label.patch
  - dosfstools-dosfslabel-forbid-lowercase.patch
  - dosfstools-dosfslabel-from-rootdir.patch
  - dosfstools-fsck-file-name.patch
  - dosfstools-mkdosfs-no-label.patch
  - dosfstools-mkdosfs-uppercase-label.patch</changelog>
  <changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="pgajdos@suse.com" date="1370260800">- update to 3.0.17:
  * Fixing segfault in dosfslabel.
  * Allow operation on SH4 CPUs.
  * Finish cleanup of byteswap code.
  * Fix offsetof definition.
  * etc., see ChangeLog
- refreshed ppc-reserved-sectors-fix.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1370952000">- update to 3.0.18:
  * Adding initial i18n support for manpages with po4a.
  * Renaming tools to sane namespace and keeping legacy symlinks in place.
    | dosfslabel becomes fatlabel,
    | dosfsck becomes fsck.fat,
    | and mkdosfs becomes mkfs.fat.
  * Correcting spelling typo in boot.c.
  * dosfslabel: Do not read beyond string length (Closes: #709587).
- refreshed both dosfstools-suse-dirs.patch and
  ppc-reserved-sectors-fix.patch
- added dosfstools-system_id-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1371038400">- update to 3.0.19:
  * This release fixes  a  segfault with fortify.
- removed dosfstools-system_id-overflow.patch</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 3.0.20
  * This release updates default sectors per cluster for FAT32.
- Remove ppc-reserved-sectors-fix.patch (implemented upstream)
  (use -a switch to disable aligning structures)
- Signature verification; more robust make install call</changelog>
  <changelog author="pgajdos@suse.com" date="1374062400">- updated to 3.0.21
  * Minor miscellaneous cleanups.</changelog>
  <changelog author="pgajdos@suse.com" date="1375099200">- updated to 3.0.22:
  * Improved boot compatiblity.</changelog>
  <changelog author="pgajdos@suse.com" date="1381924800">- updated to 3.0.23:
  * Corrects clustersize to fix issues with EFI System Partitions.</changelog>
  <changelog author="pgajdos@suse.com" date="1385380800">- updated to 3.0.24:
  * Fixed dosfsck on big endian platforms.</changelog>
  <changelog author="pgajdos@suse.com" date="1394107200">- updated to 3.0.25:
  * Prevent corruption of FAT during fsck on 64 bit platforms.
    unsigned long is 64 bit on x86-64, which means set_fat was writing two
    entries, which corrupts the next entry. This can cause loss of data in
    another file.
  * Fixed remaining 64 bit build warnings.</changelog>
  <changelog author="pgajdos@suse.com" date="1395057600">- updated to 3.0.26:
  * Fix "odd" files created by frequent power-loss.</changelog>
  <changelog author="pgajdos@suse.com" date="1403784000">- added fsck.{v,}fat and mkfs.{v,}fat compat symlinks in /sbin
  [bnc#884516]
- call spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1622030400">- Add fix-calculation.patch (gh#dosfstools/dosfstools#153, bsc#1172863)
  to work with different size of clusters.</changelog>
</package>
<package pkgid="e64ef794f0c7ec2e1a8faafc7b9e449f3bd815c8dab2670dea9aefc619696e7f" name="dosfstools" arch="x86_64">
  <version epoch="0" ver="4.1" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1394107200">- updated to 3.0.25:
  * Prevent corruption of FAT during fsck on 64 bit platforms.
    unsigned long is 64 bit on x86-64, which means set_fat was writing two
    entries, which corrupts the next entry. This can cause loss of data in
    another file.
  * Fixed remaining 64 bit build warnings.</changelog>
  <changelog author="pgajdos@suse.com" date="1395057600">- updated to 3.0.26:
  * Fix "odd" files created by frequent power-loss.</changelog>
  <changelog author="pgajdos@suse.com" date="1403784000">- added fsck.{v,}fat and mkfs.{v,}fat compat symlinks in /sbin
  [bnc#884516]
- call spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1622030400">- Add fix-calculation.patch (gh#dosfstools/dosfstools#153, bsc#1172863)
  to work with different size of clusters.</changelog>
</package>
<package pkgid="a3ffc4648808b0a84839f0653a71c346acbec4d6702290313eff591b876c0e48" name="double-conversion" arch="src">
  <version epoch="0" ver="3.1.5" rel="lp152.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1406203200">- Initial package, version 2.0.1</changelog>
  <changelog author="mpluskal@suse.com" date="1454328000">- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1475668800">- Add baselibs.conf: Build 32-bit support (boo#1002561).</changelog>
  <changelog author="jengelh@inai.de" date="1500033600">- Fix RPM groups.
  Slightly trim/compact descriptions.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551355200">- Update to version 3.0.3
  * Support RISC-V
  * Bug fixes
- Switch to cmake
- Use %license</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1563796800">- Update to version 3.1.5 jsc#ECO-1190, jsc#SLE-11474
  * Fix `0x` for string-&gt;double conversion when Hex Floats are allowed.
    Avoid integer overflow when exponents for hex floats were too big.
    Update version number.
  * Fixed warning in gcc4.9.
  * Merged changes to install libraries in the correct place when
    using 64-bit libraries.
  * Use relative includes in the library. This shouldn't have any visible effect
    for consumers of the library.
  * Fix typo in test.
  * Fix separator characters when they they don't fit into 8 bits.
  * Check correctly for _MSC_VER.
  * Allow the library to be compiled for Emscripten.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580990400">- Use proper cmake calls
- Do not pull in py2 that is EOL but use python3 for build</changelog>
</package>
<package pkgid="55feefcf6164b0ed06bf0bbbe20719e4a4ec3d1848618314db7f53c34ab2b94e" name="double-conversion-devel" arch="i586">
  <version epoch="0" ver="3.1.5" rel="lp152.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1406203200">- Initial package, version 2.0.1</changelog>
  <changelog author="mpluskal@suse.com" date="1454328000">- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1475668800">- Add baselibs.conf: Build 32-bit support (boo#1002561).</changelog>
  <changelog author="jengelh@inai.de" date="1500033600">- Fix RPM groups.
  Slightly trim/compact descriptions.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551355200">- Update to version 3.0.3
  * Support RISC-V
  * Bug fixes
- Switch to cmake
- Use %license</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1563796800">- Update to version 3.1.5 jsc#ECO-1190, jsc#SLE-11474
  * Fix `0x` for string-&gt;double conversion when Hex Floats are allowed.
    Avoid integer overflow when exponents for hex floats were too big.
    Update version number.
  * Fixed warning in gcc4.9.
  * Merged changes to install libraries in the correct place when
    using 64-bit libraries.
  * Use relative includes in the library. This shouldn't have any visible effect
    for consumers of the library.
  * Fix typo in test.
  * Fix separator characters when they they don't fit into 8 bits.
  * Check correctly for _MSC_VER.
  * Allow the library to be compiled for Emscripten.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580990400">- Use proper cmake calls
- Do not pull in py2 that is EOL but use python3 for build</changelog>
</package>
<package pkgid="c60b8ccbd2e8f55fb23871846b1feaf1bd1942536e14fd2c3477dbd45ec03f02" name="double-conversion-devel" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="lp152.2.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1406203200">- Initial package, version 2.0.1</changelog>
  <changelog author="mpluskal@suse.com" date="1454328000">- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1475668800">- Add baselibs.conf: Build 32-bit support (boo#1002561).</changelog>
  <changelog author="jengelh@inai.de" date="1500033600">- Fix RPM groups.
  Slightly trim/compact descriptions.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551355200">- Update to version 3.0.3
  * Support RISC-V
  * Bug fixes
- Switch to cmake
- Use %license</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1563796800">- Update to version 3.1.5 jsc#ECO-1190, jsc#SLE-11474
  * Fix `0x` for string-&gt;double conversion when Hex Floats are allowed.
    Avoid integer overflow when exponents for hex floats were too big.
    Update version number.
  * Fixed warning in gcc4.9.
  * Merged changes to install libraries in the correct place when
    using 64-bit libraries.
  * Use relative includes in the library. This shouldn't have any visible effect
    for consumers of the library.
  * Fix typo in test.
  * Fix separator characters when they they don't fit into 8 bits.
  * Check correctly for _MSC_VER.
  * Allow the library to be compiled for Emscripten.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1580990400">- Use proper cmake calls
- Do not pull in py2 that is EOL but use python3 for build</changelog>
</package>
<package pkgid="b1ba0995309af46367df4b0561a766200904f238054b252aabdb959b7c4428c0" name="dovecot" arch="noarch">
  <version epoch="0" ver="2.3" rel="lp152.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1410177600">- copy the correct file as init script in the non systemd case
- remove %buildroot from %pre script just in case we uncomment that
  part at some point
- only have %post in the systemd case</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- make the /etc/dovecot handling consistent between dovecot and
  dovecotXY. both now use:
  %dir /etc/dovecot
  %ghost %config(noreplace) /etc/dovecot/*</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1411041600">- add reload support to the dovecot service file</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in pre script</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- updated README.SUSE:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1513771200">- bump to dovecot 2.3</changelog>
  <changelog author="mrueckert@suse.de" date="1514116800">- copy example config from /usr/share/dovecot/example-config/
  instead of the documentation directory. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514116801">- bump recommends to 2.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1619092800">- /var/run in /usr/lib/tmpfiles.d/dovecot.conf is deprecated, please
  use /run instead (bsc#1185074)
  The home directories of the internal users was moved from
  /var/run/dovecot to /run/dovecot too.</changelog>
</package>
<package pkgid="d46a36d5dc6f09b7ba667897a5d05ea88966fa2ad457b539198ff6649f38ff73" name="dovecot" arch="src">
  <version epoch="0" ver="2.3" rel="lp152.4.3.1"/>
  <changelog author="mrueckert@suse.de" date="1409832000">- start an unversioned wrapper package again</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- make the dovecot implementation a prereq</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- added trigger scripts</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move ldconfig to the versioned packages
- own the shared var directories.
- kick out the triggerin script as we dont need it.
- restart dovecot also when the module packages are updated</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- no longer restart the socket activation. this seems to kill the
  dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918404">- as we cant use service_del_preun we should still check if it is
  the last package that we install otherwise we kill it
  unconditionally</changelog>
  <changelog author="mrueckert@suse.de" date="1409918405">- remove triggers again. when we handle the dovecot update problems
  by manually stopping in %pre and manually starting up again in
  %postun we dont need them anymore.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- we dont need a dovecot implementation at build time just at
  install time. add BuildIgnore to get around the loop.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- copy the correct file as init script in the non systemd case
- remove %buildroot from %pre script just in case we uncomment that
  part at some point
- only have %post in the systemd case</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- make the /etc/dovecot handling consistent between dovecot and
  dovecotXY. both now use:
  %dir /etc/dovecot
  %ghost %config(noreplace) /etc/dovecot/*</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1411041600">- add reload support to the dovecot service file</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in pre script</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- updated README.SUSE:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1513771200">- bump to dovecot 2.3</changelog>
  <changelog author="mrueckert@suse.de" date="1514116800">- copy example config from /usr/share/dovecot/example-config/
  instead of the documentation directory. (boo#1070871)</changelog>
  <changelog author="mrueckert@suse.de" date="1514116801">- bump recommends to 2.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1619092800">- /var/run in /usr/lib/tmpfiles.d/dovecot.conf is deprecated, please
  use /run instead (bsc#1185074)
  The home directories of the internal users was moved from
  /var/run/dovecot to /run/dovecot too.</changelog>
</package>
<package pkgid="c1b94a9bd13eecae83a29ff20acae689ee4e2c57d392b21ddb5590002dff892b" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="bfd831be00f250d21aeac08d8244de386392ddec40c9d20e968aa5849a406318" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="aa407944baa47fdd36aa000648048154145f5ca6a0972380c51b9cdb104d03a2" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="fa323f04448e72c295532dd3c5a6b6b42d523d0628d1a9056ceeffcc2d50fe17" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="13adae4395dcbe0560f94b57e8a2e03506ee5f32eb009dab51842c8284fa7f9d" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="ff75c6a1efcd444ef0080fdb29e05a605e793db8b4afcb156954bf5a856af3bd" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="478ab2eca4edacf52a4f1e7b7b748f19d407faa95d10e011b19ef1918cb10396" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.15" rel="lp152.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1624363200">- Update to version 2.3.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access.
    Local attacker can login as any user and access their emails
  - CVE-2021-33515:  On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client.
    Attacker can potentially steal user credentials and mails
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * Dovecot now depends on libsystemd for systemd integration.
  * Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
  * config: Some settings are now marked as "hidden". It's discouraged to
    change these settings. They will no longer be visible in doveconf
    output, except if they have been changed or if doveconf -s parameter
    is used. See https://doc.dovecot.org/settings/advanced/ for details.
  * imap-compress: Compression level is now algorithm specific.
    See https://doc.dovecot.org/settings/plugin/compress-plugin/
  * indexer-worker: Convert "Indexed" info logs to an event named
    "indexer_worker_indexing_finished". See
    https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
  + Add TSLv1.3 support to min_protocols.
  + Allow configuring ssl_cipher_suites. (for TLSv1.3+)
  + acl: Add acl_ignore_namespace setting which allows to entirely ignore
    ACLs for the listed namespaces.
  + imap: Support official RFC8970 preview/snippet syntax. Old methods of
    retrieving preview information via IMAP commands ("SNIPPET and PREVIEW
    with explicit algorithm selection") have been deprecated.
  + imapc: Support INDEXPVT for imapc storage to enable private
    message flags for cluster wide shared mailboxes.
  + lib-storage: Add new events: mail_opened, mail_expunge_requested,
    mail_expunged, mail_cache_lookup_finished. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail
  + zlib, imap-compression, fs-compress: Support compression levels that
    the algorithm supports. Before, we would allow hardcoded value between
    1 to 9 and would default to 6. Now we allow using per-algorithm value
    range and default to whatever default the algorithm specifies.
  - *-login: Commands pipelined together with and just after the authenticate
    command cause these commands to be executed twice. This applies to all
    protocols that involve user login, which currently comprises of imap,
    pop3, submisision and managesieve.
  - *-login: Processes are supposed to disconnect the oldest non-logged in
    connection when process_limit was reached. This didn't actually happen
    with the default "high-security mode" (with service_count=1) where each
    connection is handled by a separate process.
  - *-login: When login process reaches client/process limits, oldest
    client connections are disconnected. If one of these was still doing
    anvil lookup, this caused a crash. This could happen only if the login
    process limits were very low or if the server was overloaded.
  - Fixed building with link time optimizations (-flto).
  - auth: Userdb iteration with passwd driver does not always return all
    users with some nss drivers.
  - dsync: Shared INBOX not synced when "mail_shared_explicit_inbox" was
    disabled. If a user has a shared mailbox which is another user's INBOX,
    dsync didn't include the mailbox in syncing unless explicit naming is
    enabled with "mail_shared_explicit_inbox" set to "yes".
  - dsync: Shared namespaces were not synced with "-n" flag.
  - dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
    If a user has a shared mailbox that is another user's INBOX, dsync
    failed to export the mailbox if mail attributes are disabled.
  - fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
    requests to assert-crash: Panic: file http-client-request.c: line 1232
    (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
  - fts-tika: 5xx errors returned by Tika server as indexing failures.
    However, Tika can return 5xx for some attachments every time.
    So the 5xx error should be retried once, but treated as success if it
    happens on the retry as well. v2.3 regression.
  - fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
    resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - imap: SETMETADATA could not be used to unset metadata values.
    Instead NIL was handled as a "NIL" string. v2.3.14 regression.
  - imap: IMAP BINARY FETCH crashes at least on empty base64 body:
    Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
    assertion failed: (block_count == 0 || block_idx+1 == block_count)
  - imap: If IMAP client using the NOTIFY command was disconnected while
    sending FETCH notifications to the client, imap could crash with
    Panic: Trying to close mailbox INBOX with open transactions.
  - imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
    when IMAP commands are &gt;8 kB long.
  - imapc: If remote server sent BYE but didn't immediately disconnect, it
    could cause infinite busy-loop.
  - lib-index: Corrupted cache record size in dovecot.index.cache file
    could have caused a crash (segfault) when accessing it.
  - lib-oauth2: JWT token time validation now works correctly with
    32-bit systems.
  - lib-ssl-iostream: Checking hostnames against an SSL certificate was
    case-sensitive.
  - lib-storage: Corrupted mime.parts in dovecot.index.cache may have
    resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
    assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
  - lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
    preserve the "hdr-pop3-uidl" header. Because of this, the next pop3
    session could have accessed all of the emails' metadata to read their
    POP3 UIDL (opening dbox files).
  - listescape: When using the listescape plugin and a shared namespace
    the plugin didn't work properly anymore resulting in errors like:
    "Invalid mailbox name: Name must not have '/' character."
  - lmtp: Connection crashes if connection gets disconnected due to
    multiple bad commands and the last bad command is BDAT.
  - lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
    forwarded by LMTP proxy without checking that the backend has support.
    This caused a command parameter error from the backend if it was
    running an older Dovecot release. This could only occur in more complex
    setups where the message was proxied twice; when the proxy generated
    the XRCPTFORWARD parameter itself the problem did not occur, so this
    only happened when it was forwarded.
  - lmtp: The LMTP proxy crashes with a panic when the remote server
    replies with an error while the mail is still being forwarded through
    a DATA/BDAT command.
  - lmtp: Username may have been missing from lmtp log line prefixes when
    it was performing autoexpunging.
  - master: Dovecot would incorrectly fail with haproxy 2.0.14 service
    checks.
  - master: Systemd service: Dovecot announces readiness for accepting
    connections earlier than it should. The following environment variables
    are now imported automatically and can be omitted from
    import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
  - master: service { process_min_avail } was launching processes too
    slowly when master was forking a lot of processes.
  - util: Make the health-check.sh example script POSIX shell compatible.
  * Added new aliases for some variables. Usage of the old ones is possible,
    but discouraged. (These were partially added already to v2.3.13.)
    See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
    for more information.
  * Optimize imap/pop3/submission/managesieve proxies to use less CPU at
    the cost of extra memory usage.
  * Remove autocreate, expire, snarf and mail-filter plugins.
  * Remove cydir storage driver.
  * Remove XZ/LZMA write support. Read support will be removed in future release.
  * doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
    environment variable is not set. Timestamp format is taken from
    log_timestamp setting.
  * If BROKENCHAR or listescape plugin is used, the escaped folder names
    may be slightly different from before in some situations. This is
    unlikely to cause issues, although caching clients may redownload the
    folders.
  * imapc: It now enables BROKENCHAR=~ by default to escape remote folder
    names if necessary. This also means that if there are any '~'
    characters in the remote folder names, they will be visible as "~7e".
  * imapc: When using local index files folder names were escaped on
    filesystem a bit differently. This affects only if there are folder
    names that actually require escaping, which isn't so common. The old
    style folders will be automatically deleted from filesystem.
  * stats: Update exported metrics to be compliant with OpenMetrics standard.
  + doveadm: Add an optional '-p' parameter to metadata list command. If
    enabled, "/private", and "/shared" metadata prefixes will be prepended
    to the keys in the list output.
  + doveconf: Support environment variables in config files. See
    https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
    for more details.
  + indexer-worker: Change indexer to disconnect from indexer-worker
    after each request. This allows service indexer-worker's service_count &amp;
    idle_kill settings to work. These can be used to restart indexer-worker
    processes once in a while to reduce their memory usage.
  - auth: "nodelay" with various authentication mechanisms such as apop
    and digest-md5 crashed AUTH process if authentication failed.
  - auth: Auth lua script generating an error triggered an assertion
    failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
    assertion failed: (lua_gettop(script-&gt;L) == 0).
  - configure: Fix libunwind detection to work on other than x86_64 systems.
  - doveadm-server: Process could crash if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or Panic:
    file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - dsync: Folder name escaping with BROKENCHAR didn't work completely
    correctly. This especially caused problems with dsync-migrations using
    imapc where some of the remote folder names may not have been accessible.
  - dsync: doveadm sync + imapc doesn't always sync all mails when doing
    an incremental sync (-1), which could lead to mail loss when it's used
    for migration. This happens only when GUIDs aren't used (i.e.
    imapc without imapc_features=guid-forced).
  - fts-tika: When tika server returns error, some mails cause Panic:
    file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
    resulted in crashes. This exposed that Dovecot was wrongly accepting
    atoms in "nstring" handling. Changed the IMAP parsing to be more
    strict about this now.
  - lib-index: If dovecot.index.cache has corrupted message size, fetching
    BODY/BODYSTRUCTURE may cause assert-crash:
    Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
    assertion failed: (mail-&gt;data.parts != NULL).
  - lib-index: Minor error handling and race condition fixes related to
    rotating dovecot.index.log. These didn't usually cause problems,
    unless the log files were rotated rapidly.
  - lib-lua: Lua scripts using coroutines or lua libraries using coroutines
    (e.g., cqueues) panicked.
  - Message PREVIEW handled whitespace wrong so first space would get
    eaten from between words.
  - FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for IMAP clients
    and also Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
    use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
    (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
  - event filters: NOT keyword did not have the correct associativity.
  - Ignore ECONNRESET when closing socket. This avoids logging useless
    errors on systems like FreeBSD.
  - event filters: event filter syntax error may lead to Panic:
    file event-filter.c: line 137 (event_filter_parse): assertion failed:
    (state.output == NULL)
  - lib: timeval_cmp_margin() was broken on 32-bit systems. This could
    potentially have caused HTTP timeouts to be handled incorrectly.
  - log: instance_name wasn't used as syslog ident by the log process.
  - master: After a service reached process_limit and client_limit, it
    could have taken up to 1 second to realize that more client connections
    became available. During this time client connections could have been
    unnecessarily rejected and a warning logged:
    Warning: service(...): process_limit (...) reached, client connections are being dropped
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
  - stats: Event filters comparing against empty strings crash the stats
    process.
  * CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
    allow logged in user to access other people's emails and filesystem
    information.
  * Metric filter and global event filter variable syntax changed to a
    SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
  * auth: Added new aliases for %{variables}. Usage of the old ones is
    possible, but discouraged.
  * auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
    mechanism and related password schemes.
  * auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
  * auth: Removed postfix postmap socket
  + auth: Added new fields for auth server events. These fields are now
    also available for all auth events. See
    https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
    for details.
  + imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
    and imap_client_unhibernate_retried events. See
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + lib-index: Added new mail_index_recreated event. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
  + lib-sql: Support TLS options for cassandra driver. This requires
    cpp-driver v2.15 (or later) to work reliably.
  + lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
    added to existing mails if mail_attachment_detection_option=add-flags
    and it can be done inexpensively.
  + login proxy: Added login_proxy_max_reconnects setting (default 3) to
    control how many reconnections are attempted.
  + login proxy: imap/pop3/submission/managesieve proxying now supports
    reconnection retrying on more than just connect() failure. Any error
    except a non-temporary authentication failure will result in reconnect
    attempts.
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - auth: SASL authentication PLAIN mechanism could be used to trigger
    read buffer overflow. However, this doesn't seem to be exploitable in
    any way.
  - auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
    disallows NUL bytes for it.
  - dict: Process used too much CPU when iterating keys, because each key
    used a separate write() syscall.
  - doveadm-server: Crash could occur if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or
    Panic: file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
    process via starttls assert-crashed if there were no ssl=yes listeners:
    Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
    assertion failed: (service-&gt;ssl_ctx_initialized).
  - fts-solr: HTTP requests may have assert-crashed:
    Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
    assertion failed: (req-&gt;payload_input != NULL)
  - imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
    configuration that causes errors. Sending the error responses to the
    client can cause the segmentation fault. This can for example happen
    when several namespaces use the same mail storage location.
  - imap: IMAP NOTIFY used on a shared namespace that doesn't actually
    exist (e.g. public namespace for a nonexistent user) can crash with a panic:
    Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
  - imap: IMAP session can crash with QRESYNC extension if many changes
    are done before asking for expunged mails since last sync.
  - imap: Process might hang indefinitely if client disconnects after
    sending some long-running commands pipelined, for example FETCH+LOGOUT.
  - lib-compress: Mitigate crashes when configuring a not compiled in
    compression. Errors with compression configuration now distinguish
    between not supported and unknown.
  - lib-compression: Using xz/lzma compression in v2.3.11 could have
    written truncated output in some situations. This would result in
    "Broken pipe" read errors when trying to read it back.
  - lib-compression: zstd compression could have crashed in some situations:
    Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
  - lib-dict: dict client could have crashed in some rare situations when
    iterating keys.
  - lib-http: Fix several assert-crashes in HTTP client.
  - lib-index: v2.3.11 regression: When mails were expunged at the same
    time as lots of new content was being saved to the cache (e.g. cache
    file was lost and is being re-filled) a deadlock could occur with
    dovecot.index.cache / dovecot.index.log.
  - lib-index: v2.3.11 regression: dovecot.index.cache file was being
    purged (rewritten) too often when it had a field that hadn't been
    accessed for over 1 month, but less than 2 months. Every cache file
    change caused a purging in this situation.
  - lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
    Regression caused by fixing CVE-2020-12100.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for both IMAP
    clients and Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
    10000th MIME part was message/rfc822 (or if parent was multipart/digest):
    Panic: file message-parser.c: line 167 (message_part_append):
    assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
  - lib-oauth2: Dovecot incorrectly required oauth2 server introspection
    reply to contain username with invalid token.
  - lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
    deprecated APIs disabled.
  - lib-storage: When mail's size is different from the cached one (in
    dovecot.index.cache or Maildir S=size in the filename), this is
    handled by logging "Cached message size smaller/larger than expected"
    error. However, in some situations this also ended up crashing with:
    Panic: file istream.c: line 315 (i_stream_read_memarea):
    assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
  - lib-storage: v2.3 regression: Copying/moving mails was taking much more
    memory than before. This was mainly visible when copying/moving
    thousands of mails in a single transaction.
  - lib-storage: v2.3.11 regression: Searching messages assert-crashed
    (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
    assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
  - lib: Dovecot v2.3 moved signal handlers around in ioloops,
    causing more CPU usage than in v2.2.
  - lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
    in error if it happened to be at read boundary. Any NUL characters and
    '\u0000' will now result in parsing error instead of silently
    truncating the data.
  - lmtp, submission: Server may hang if SSL client connection disconnects
    during the delivery. If this happened repeated, it could have ended
    up reaching process_limit and preventing any further lmtp/submission
    deliveries.
  - lmtp: Proxy does not always properly log TLS connection problems as
    errors; in some cases, only a debug message is logged if enabled.
  - lmtp: The LMTP service can hang when commands are pipelined. This can
    particularly occur when one command in the middle of the pipeline fails.
    One example of this occurs for proxied LMTP transactions in which the
    final DATA or BDAT command is pipelined after a failing RCPT command.
  - login-proxy: The login_source_ips setting has no effect, and therefore
    the proxy source IPs are not cycled through as they should be.
  - master: Process was using 100% CPU in some situations when a broken
    service was being throttled.
  - pop3-login: POP3 login would fail with "Input buffer full" if the
    initial response for SASL was too long.
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
- Update pigeonhole to version 0.5.15
  * CVE-2020-28200: Sieve interpreter is not protected against abusive
    scripts that claim excessive resource usage. Fixed by limiting the
    user CPU time per single script execution and cumulatively over
    several script runs within a configurable timeout period. Sufficiently
    large CPU time usage is summed in the Sieve script binary and execution
    is blocked when the sum exceeds the limit within that time. The block
    is lifted when the script is updated after the resource usage times out.
    (bsc#1187420) Attacker can DoS the mail delivery system
    (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * managesieve: Commands pipelined together with and just after the
    authenticate command cause these commands to be executed twice.
  * duplicate: The test was handled badly in a multiscript (sieve_before,
    sieve_after) scenario in which an earlier script in the sequence with
    a duplicate test succeeded, while a later script caused a runtime
    failure. In that case, the message is recorded for duplicate tracking,
    while the message may not actually have been delivered in the end.
  * editheader: Sieve interpreter entered infinite loop at startup when
    the "editheader" configuration listed an invalid header name. This
    problem can only be triggered by the administrator.
  * relational: The Sieve relational extension can cause a segfault at
    compile time. This is triggered by invalid script syntax. The segfault
    happens when this match type is the last argument of the test command.
    This situation is not possible in a valid script; positional arguments
    are normally present after that, which would prevent the segfault.
  * sieve: For some Sieve commands the provided mailbox name is not
    properly checked for UTF-8 validity, which can cause assert crashes at
    runtime when an invalid mailbox name is encountered. This can be
    caused by the user by writing a bad Sieve script involving the
    affected commands ("mailboxexists", "specialuse_exists").
    This can be triggered by the remote sender only when the user has
    written a Sieve script that passes message content to one of the
    affected commands.
  * sieve: Large sequences of 8-bit octets passed to certain Sieve
    commands that create or modify message headers that allow UTF-8 text
    (vacation, notify and addheader) can cause the delivery or IMAP
    process (when IMAPSieve is used) to enter a memory-consuming
    semi-infinite loop that ends when the process exceeds its memory
    limits. Logged in users can cause these hangs only for their own
    processes.
- Remove upstream applied pathces:
  0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
  0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
  0002-imap-Add-unit-test-for-imap-client-hibernate.patch
  0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="8e59c4323c215e254920a78d82a3660edf6712cd6f55c6c50482e9d1815591b2" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.15" rel="lp152.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1624363200">- Update to version 2.3.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access.
    Local attacker can login as any user and access their emails
  - CVE-2021-33515:  On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client.
    Attacker can potentially steal user credentials and mails
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * Dovecot now depends on libsystemd for systemd integration.
  * Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
  * config: Some settings are now marked as "hidden". It's discouraged to
    change these settings. They will no longer be visible in doveconf
    output, except if they have been changed or if doveconf -s parameter
    is used. See https://doc.dovecot.org/settings/advanced/ for details.
  * imap-compress: Compression level is now algorithm specific.
    See https://doc.dovecot.org/settings/plugin/compress-plugin/
  * indexer-worker: Convert "Indexed" info logs to an event named
    "indexer_worker_indexing_finished". See
    https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
  + Add TSLv1.3 support to min_protocols.
  + Allow configuring ssl_cipher_suites. (for TLSv1.3+)
  + acl: Add acl_ignore_namespace setting which allows to entirely ignore
    ACLs for the listed namespaces.
  + imap: Support official RFC8970 preview/snippet syntax. Old methods of
    retrieving preview information via IMAP commands ("SNIPPET and PREVIEW
    with explicit algorithm selection") have been deprecated.
  + imapc: Support INDEXPVT for imapc storage to enable private
    message flags for cluster wide shared mailboxes.
  + lib-storage: Add new events: mail_opened, mail_expunge_requested,
    mail_expunged, mail_cache_lookup_finished. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail
  + zlib, imap-compression, fs-compress: Support compression levels that
    the algorithm supports. Before, we would allow hardcoded value between
    1 to 9 and would default to 6. Now we allow using per-algorithm value
    range and default to whatever default the algorithm specifies.
  - *-login: Commands pipelined together with and just after the authenticate
    command cause these commands to be executed twice. This applies to all
    protocols that involve user login, which currently comprises of imap,
    pop3, submisision and managesieve.
  - *-login: Processes are supposed to disconnect the oldest non-logged in
    connection when process_limit was reached. This didn't actually happen
    with the default "high-security mode" (with service_count=1) where each
    connection is handled by a separate process.
  - *-login: When login process reaches client/process limits, oldest
    client connections are disconnected. If one of these was still doing
    anvil lookup, this caused a crash. This could happen only if the login
    process limits were very low or if the server was overloaded.
  - Fixed building with link time optimizations (-flto).
  - auth: Userdb iteration with passwd driver does not always return all
    users with some nss drivers.
  - dsync: Shared INBOX not synced when "mail_shared_explicit_inbox" was
    disabled. If a user has a shared mailbox which is another user's INBOX,
    dsync didn't include the mailbox in syncing unless explicit naming is
    enabled with "mail_shared_explicit_inbox" set to "yes".
  - dsync: Shared namespaces were not synced with "-n" flag.
  - dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
    If a user has a shared mailbox that is another user's INBOX, dsync
    failed to export the mailbox if mail attributes are disabled.
  - fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
    requests to assert-crash: Panic: file http-client-request.c: line 1232
    (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
  - fts-tika: 5xx errors returned by Tika server as indexing failures.
    However, Tika can return 5xx for some attachments every time.
    So the 5xx error should be retried once, but treated as success if it
    happens on the retry as well. v2.3 regression.
  - fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
    resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - imap: SETMETADATA could not be used to unset metadata values.
    Instead NIL was handled as a "NIL" string. v2.3.14 regression.
  - imap: IMAP BINARY FETCH crashes at least on empty base64 body:
    Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
    assertion failed: (block_count == 0 || block_idx+1 == block_count)
  - imap: If IMAP client using the NOTIFY command was disconnected while
    sending FETCH notifications to the client, imap could crash with
    Panic: Trying to close mailbox INBOX with open transactions.
  - imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
    when IMAP commands are &gt;8 kB long.
  - imapc: If remote server sent BYE but didn't immediately disconnect, it
    could cause infinite busy-loop.
  - lib-index: Corrupted cache record size in dovecot.index.cache file
    could have caused a crash (segfault) when accessing it.
  - lib-oauth2: JWT token time validation now works correctly with
    32-bit systems.
  - lib-ssl-iostream: Checking hostnames against an SSL certificate was
    case-sensitive.
  - lib-storage: Corrupted mime.parts in dovecot.index.cache may have
    resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
    assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
  - lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
    preserve the "hdr-pop3-uidl" header. Because of this, the next pop3
    session could have accessed all of the emails' metadata to read their
    POP3 UIDL (opening dbox files).
  - listescape: When using the listescape plugin and a shared namespace
    the plugin didn't work properly anymore resulting in errors like:
    "Invalid mailbox name: Name must not have '/' character."
  - lmtp: Connection crashes if connection gets disconnected due to
    multiple bad commands and the last bad command is BDAT.
  - lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
    forwarded by LMTP proxy without checking that the backend has support.
    This caused a command parameter error from the backend if it was
    running an older Dovecot release. This could only occur in more complex
    setups where the message was proxied twice; when the proxy generated
    the XRCPTFORWARD parameter itself the problem did not occur, so this
    only happened when it was forwarded.
  - lmtp: The LMTP proxy crashes with a panic when the remote server
    replies with an error while the mail is still being forwarded through
    a DATA/BDAT command.
  - lmtp: Username may have been missing from lmtp log line prefixes when
    it was performing autoexpunging.
  - master: Dovecot would incorrectly fail with haproxy 2.0.14 service
    checks.
  - master: Systemd service: Dovecot announces readiness for accepting
    connections earlier than it should. The following environment variables
    are now imported automatically and can be omitted from
    import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
  - master: service { process_min_avail } was launching processes too
    slowly when master was forking a lot of processes.
  - util: Make the health-check.sh example script POSIX shell compatible.
  * Added new aliases for some variables. Usage of the old ones is possible,
    but discouraged. (These were partially added already to v2.3.13.)
    See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
    for more information.
  * Optimize imap/pop3/submission/managesieve proxies to use less CPU at
    the cost of extra memory usage.
  * Remove autocreate, expire, snarf and mail-filter plugins.
  * Remove cydir storage driver.
  * Remove XZ/LZMA write support. Read support will be removed in future release.
  * doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
    environment variable is not set. Timestamp format is taken from
    log_timestamp setting.
  * If BROKENCHAR or listescape plugin is used, the escaped folder names
    may be slightly different from before in some situations. This is
    unlikely to cause issues, although caching clients may redownload the
    folders.
  * imapc: It now enables BROKENCHAR=~ by default to escape remote folder
    names if necessary. This also means that if there are any '~'
    characters in the remote folder names, they will be visible as "~7e".
  * imapc: When using local index files folder names were escaped on
    filesystem a bit differently. This affects only if there are folder
    names that actually require escaping, which isn't so common. The old
    style folders will be automatically deleted from filesystem.
  * stats: Update exported metrics to be compliant with OpenMetrics standard.
  + doveadm: Add an optional '-p' parameter to metadata list command. If
    enabled, "/private", and "/shared" metadata prefixes will be prepended
    to the keys in the list output.
  + doveconf: Support environment variables in config files. See
    https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
    for more details.
  + indexer-worker: Change indexer to disconnect from indexer-worker
    after each request. This allows service indexer-worker's service_count &amp;
    idle_kill settings to work. These can be used to restart indexer-worker
    processes once in a while to reduce their memory usage.
  - auth: "nodelay" with various authentication mechanisms such as apop
    and digest-md5 crashed AUTH process if authentication failed.
  - auth: Auth lua script generating an error triggered an assertion
    failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
    assertion failed: (lua_gettop(script-&gt;L) == 0).
  - configure: Fix libunwind detection to work on other than x86_64 systems.
  - doveadm-server: Process could crash if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or Panic:
    file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - dsync: Folder name escaping with BROKENCHAR didn't work completely
    correctly. This especially caused problems with dsync-migrations using
    imapc where some of the remote folder names may not have been accessible.
  - dsync: doveadm sync + imapc doesn't always sync all mails when doing
    an incremental sync (-1), which could lead to mail loss when it's used
    for migration. This happens only when GUIDs aren't used (i.e.
    imapc without imapc_features=guid-forced).
  - fts-tika: When tika server returns error, some mails cause Panic:
    file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
    resulted in crashes. This exposed that Dovecot was wrongly accepting
    atoms in "nstring" handling. Changed the IMAP parsing to be more
    strict about this now.
  - lib-index: If dovecot.index.cache has corrupted message size, fetching
    BODY/BODYSTRUCTURE may cause assert-crash:
    Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
    assertion failed: (mail-&gt;data.parts != NULL).
  - lib-index: Minor error handling and race condition fixes related to
    rotating dovecot.index.log. These didn't usually cause problems,
    unless the log files were rotated rapidly.
  - lib-lua: Lua scripts using coroutines or lua libraries using coroutines
    (e.g., cqueues) panicked.
  - Message PREVIEW handled whitespace wrong so first space would get
    eaten from between words.
  - FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for IMAP clients
    and also Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
    use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
    (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
  - event filters: NOT keyword did not have the correct associativity.
  - Ignore ECONNRESET when closing socket. This avoids logging useless
    errors on systems like FreeBSD.
  - event filters: event filter syntax error may lead to Panic:
    file event-filter.c: line 137 (event_filter_parse): assertion failed:
    (state.output == NULL)
  - lib: timeval_cmp_margin() was broken on 32-bit systems. This could
    potentially have caused HTTP timeouts to be handled incorrectly.
  - log: instance_name wasn't used as syslog ident by the log process.
  - master: After a service reached process_limit and client_limit, it
    could have taken up to 1 second to realize that more client connections
    became available. During this time client connections could have been
    unnecessarily rejected and a warning logged:
    Warning: service(...): process_limit (...) reached, client connections are being dropped
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
  - stats: Event filters comparing against empty strings crash the stats
    process.
  * CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
    allow logged in user to access other people's emails and filesystem
    information.
  * Metric filter and global event filter variable syntax changed to a
    SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
  * auth: Added new aliases for %{variables}. Usage of the old ones is
    possible, but discouraged.
  * auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
    mechanism and related password schemes.
  * auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
  * auth: Removed postfix postmap socket
  + auth: Added new fields for auth server events. These fields are now
    also available for all auth events. See
    https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
    for details.
  + imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
    and imap_client_unhibernate_retried events. See
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + lib-index: Added new mail_index_recreated event. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
  + lib-sql: Support TLS options for cassandra driver. This requires
    cpp-driver v2.15 (or later) to work reliably.
  + lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
    added to existing mails if mail_attachment_detection_option=add-flags
    and it can be done inexpensively.
  + login proxy: Added login_proxy_max_reconnects setting (default 3) to
    control how many reconnections are attempted.
  + login proxy: imap/pop3/submission/managesieve proxying now supports
    reconnection retrying on more than just connect() failure. Any error
    except a non-temporary authentication failure will result in reconnect
    attempts.
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - auth: SASL authentication PLAIN mechanism could be used to trigger
    read buffer overflow. However, this doesn't seem to be exploitable in
    any way.
  - auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
    disallows NUL bytes for it.
  - dict: Process used too much CPU when iterating keys, because each key
    used a separate write() syscall.
  - doveadm-server: Crash could occur if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or
    Panic: file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
    process via starttls assert-crashed if there were no ssl=yes listeners:
    Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
    assertion failed: (service-&gt;ssl_ctx_initialized).
  - fts-solr: HTTP requests may have assert-crashed:
    Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
    assertion failed: (req-&gt;payload_input != NULL)
  - imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
    configuration that causes errors. Sending the error responses to the
    client can cause the segmentation fault. This can for example happen
    when several namespaces use the same mail storage location.
  - imap: IMAP NOTIFY used on a shared namespace that doesn't actually
    exist (e.g. public namespace for a nonexistent user) can crash with a panic:
    Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
  - imap: IMAP session can crash with QRESYNC extension if many changes
    are done before asking for expunged mails since last sync.
  - imap: Process might hang indefinitely if client disconnects after
    sending some long-running commands pipelined, for example FETCH+LOGOUT.
  - lib-compress: Mitigate crashes when configuring a not compiled in
    compression. Errors with compression configuration now distinguish
    between not supported and unknown.
  - lib-compression: Using xz/lzma compression in v2.3.11 could have
    written truncated output in some situations. This would result in
    "Broken pipe" read errors when trying to read it back.
  - lib-compression: zstd compression could have crashed in some situations:
    Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
  - lib-dict: dict client could have crashed in some rare situations when
    iterating keys.
  - lib-http: Fix several assert-crashes in HTTP client.
  - lib-index: v2.3.11 regression: When mails were expunged at the same
    time as lots of new content was being saved to the cache (e.g. cache
    file was lost and is being re-filled) a deadlock could occur with
    dovecot.index.cache / dovecot.index.log.
  - lib-index: v2.3.11 regression: dovecot.index.cache file was being
    purged (rewritten) too often when it had a field that hadn't been
    accessed for over 1 month, but less than 2 months. Every cache file
    change caused a purging in this situation.
  - lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
    Regression caused by fixing CVE-2020-12100.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for both IMAP
    clients and Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
    10000th MIME part was message/rfc822 (or if parent was multipart/digest):
    Panic: file message-parser.c: line 167 (message_part_append):
    assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
  - lib-oauth2: Dovecot incorrectly required oauth2 server introspection
    reply to contain username with invalid token.
  - lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
    deprecated APIs disabled.
  - lib-storage: When mail's size is different from the cached one (in
    dovecot.index.cache or Maildir S=size in the filename), this is
    handled by logging "Cached message size smaller/larger than expected"
    error. However, in some situations this also ended up crashing with:
    Panic: file istream.c: line 315 (i_stream_read_memarea):
    assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
  - lib-storage: v2.3 regression: Copying/moving mails was taking much more
    memory than before. This was mainly visible when copying/moving
    thousands of mails in a single transaction.
  - lib-storage: v2.3.11 regression: Searching messages assert-crashed
    (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
    assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
  - lib: Dovecot v2.3 moved signal handlers around in ioloops,
    causing more CPU usage than in v2.2.
  - lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
    in error if it happened to be at read boundary. Any NUL characters and
    '\u0000' will now result in parsing error instead of silently
    truncating the data.
  - lmtp, submission: Server may hang if SSL client connection disconnects
    during the delivery. If this happened repeated, it could have ended
    up reaching process_limit and preventing any further lmtp/submission
    deliveries.
  - lmtp: Proxy does not always properly log TLS connection problems as
    errors; in some cases, only a debug message is logged if enabled.
  - lmtp: The LMTP service can hang when commands are pipelined. This can
    particularly occur when one command in the middle of the pipeline fails.
    One example of this occurs for proxied LMTP transactions in which the
    final DATA or BDAT command is pipelined after a failing RCPT command.
  - login-proxy: The login_source_ips setting has no effect, and therefore
    the proxy source IPs are not cycled through as they should be.
  - master: Process was using 100% CPU in some situations when a broken
    service was being throttled.
  - pop3-login: POP3 login would fail with "Input buffer full" if the
    initial response for SASL was too long.
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
- Update pigeonhole to version 0.5.15
  * CVE-2020-28200: Sieve interpreter is not protected against abusive
    scripts that claim excessive resource usage. Fixed by limiting the
    user CPU time per single script execution and cumulatively over
    several script runs within a configurable timeout period. Sufficiently
    large CPU time usage is summed in the Sieve script binary and execution
    is blocked when the sum exceeds the limit within that time. The block
    is lifted when the script is updated after the resource usage times out.
    (bsc#1187420) Attacker can DoS the mail delivery system
    (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * managesieve: Commands pipelined together with and just after the
    authenticate command cause these commands to be executed twice.
  * duplicate: The test was handled badly in a multiscript (sieve_before,
    sieve_after) scenario in which an earlier script in the sequence with
    a duplicate test succeeded, while a later script caused a runtime
    failure. In that case, the message is recorded for duplicate tracking,
    while the message may not actually have been delivered in the end.
  * editheader: Sieve interpreter entered infinite loop at startup when
    the "editheader" configuration listed an invalid header name. This
    problem can only be triggered by the administrator.
  * relational: The Sieve relational extension can cause a segfault at
    compile time. This is triggered by invalid script syntax. The segfault
    happens when this match type is the last argument of the test command.
    This situation is not possible in a valid script; positional arguments
    are normally present after that, which would prevent the segfault.
  * sieve: For some Sieve commands the provided mailbox name is not
    properly checked for UTF-8 validity, which can cause assert crashes at
    runtime when an invalid mailbox name is encountered. This can be
    caused by the user by writing a bad Sieve script involving the
    affected commands ("mailboxexists", "specialuse_exists").
    This can be triggered by the remote sender only when the user has
    written a Sieve script that passes message content to one of the
    affected commands.
  * sieve: Large sequences of 8-bit octets passed to certain Sieve
    commands that create or modify message headers that allow UTF-8 text
    (vacation, notify and addheader) can cause the delivery or IMAP
    process (when IMAPSieve is used) to enter a memory-consuming
    semi-infinite loop that ends when the process exceeds its memory
    limits. Logged in users can cause these hangs only for their own
    processes.
- Remove upstream applied pathces:
  0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
  0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
  0002-imap-Add-unit-test-for-imap-client-hibernate.patch
  0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="f828595018206e165b8a69153fc452ffc99bef0ef569bf171e4e4ca3c8ba5ccb" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="5616d77816e8552b36229e74652e7ba28898fd7c400bc107babb135d0caa4ba7" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="a807b6a074970db71a701a4ec62c0194b3339701c5c7a5d9ef4d867377e94b4f" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="2c2e68b5407298edc049f28fed10729c3c788381a0da9d8e942e230a12010526" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.15" rel="lp152.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1624363200">- Update to version 2.3.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access.
    Local attacker can login as any user and access their emails
  - CVE-2021-33515:  On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client.
    Attacker can potentially steal user credentials and mails
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * Dovecot now depends on libsystemd for systemd integration.
  * Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
  * config: Some settings are now marked as "hidden". It's discouraged to
    change these settings. They will no longer be visible in doveconf
    output, except if they have been changed or if doveconf -s parameter
    is used. See https://doc.dovecot.org/settings/advanced/ for details.
  * imap-compress: Compression level is now algorithm specific.
    See https://doc.dovecot.org/settings/plugin/compress-plugin/
  * indexer-worker: Convert "Indexed" info logs to an event named
    "indexer_worker_indexing_finished". See
    https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
  + Add TSLv1.3 support to min_protocols.
  + Allow configuring ssl_cipher_suites. (for TLSv1.3+)
  + acl: Add acl_ignore_namespace setting which allows to entirely ignore
    ACLs for the listed namespaces.
  + imap: Support official RFC8970 preview/snippet syntax. Old methods of
    retrieving preview information via IMAP commands ("SNIPPET and PREVIEW
    with explicit algorithm selection") have been deprecated.
  + imapc: Support INDEXPVT for imapc storage to enable private
    message flags for cluster wide shared mailboxes.
  + lib-storage: Add new events: mail_opened, mail_expunge_requested,
    mail_expunged, mail_cache_lookup_finished. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail
  + zlib, imap-compression, fs-compress: Support compression levels that
    the algorithm supports. Before, we would allow hardcoded value between
    1 to 9 and would default to 6. Now we allow using per-algorithm value
    range and default to whatever default the algorithm specifies.
  - *-login: Commands pipelined together with and just after the authenticate
    command cause these commands to be executed twice. This applies to all
    protocols that involve user login, which currently comprises of imap,
    pop3, submisision and managesieve.
  - *-login: Processes are supposed to disconnect the oldest non-logged in
    connection when process_limit was reached. This didn't actually happen
    with the default "high-security mode" (with service_count=1) where each
    connection is handled by a separate process.
  - *-login: When login process reaches client/process limits, oldest
    client connections are disconnected. If one of these was still doing
    anvil lookup, this caused a crash. This could happen only if the login
    process limits were very low or if the server was overloaded.
  - Fixed building with link time optimizations (-flto).
  - auth: Userdb iteration with passwd driver does not always return all
    users with some nss drivers.
  - dsync: Shared INBOX not synced when "mail_shared_explicit_inbox" was
    disabled. If a user has a shared mailbox which is another user's INBOX,
    dsync didn't include the mailbox in syncing unless explicit naming is
    enabled with "mail_shared_explicit_inbox" set to "yes".
  - dsync: Shared namespaces were not synced with "-n" flag.
  - dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
    If a user has a shared mailbox that is another user's INBOX, dsync
    failed to export the mailbox if mail attributes are disabled.
  - fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
    requests to assert-crash: Panic: file http-client-request.c: line 1232
    (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
  - fts-tika: 5xx errors returned by Tika server as indexing failures.
    However, Tika can return 5xx for some attachments every time.
    So the 5xx error should be retried once, but treated as success if it
    happens on the retry as well. v2.3 regression.
  - fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
    resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - imap: SETMETADATA could not be used to unset metadata values.
    Instead NIL was handled as a "NIL" string. v2.3.14 regression.
  - imap: IMAP BINARY FETCH crashes at least on empty base64 body:
    Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
    assertion failed: (block_count == 0 || block_idx+1 == block_count)
  - imap: If IMAP client using the NOTIFY command was disconnected while
    sending FETCH notifications to the client, imap could crash with
    Panic: Trying to close mailbox INBOX with open transactions.
  - imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
    when IMAP commands are &gt;8 kB long.
  - imapc: If remote server sent BYE but didn't immediately disconnect, it
    could cause infinite busy-loop.
  - lib-index: Corrupted cache record size in dovecot.index.cache file
    could have caused a crash (segfault) when accessing it.
  - lib-oauth2: JWT token time validation now works correctly with
    32-bit systems.
  - lib-ssl-iostream: Checking hostnames against an SSL certificate was
    case-sensitive.
  - lib-storage: Corrupted mime.parts in dovecot.index.cache may have
    resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
    assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
  - lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
    preserve the "hdr-pop3-uidl" header. Because of this, the next pop3
    session could have accessed all of the emails' metadata to read their
    POP3 UIDL (opening dbox files).
  - listescape: When using the listescape plugin and a shared namespace
    the plugin didn't work properly anymore resulting in errors like:
    "Invalid mailbox name: Name must not have '/' character."
  - lmtp: Connection crashes if connection gets disconnected due to
    multiple bad commands and the last bad command is BDAT.
  - lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
    forwarded by LMTP proxy without checking that the backend has support.
    This caused a command parameter error from the backend if it was
    running an older Dovecot release. This could only occur in more complex
    setups where the message was proxied twice; when the proxy generated
    the XRCPTFORWARD parameter itself the problem did not occur, so this
    only happened when it was forwarded.
  - lmtp: The LMTP proxy crashes with a panic when the remote server
    replies with an error while the mail is still being forwarded through
    a DATA/BDAT command.
  - lmtp: Username may have been missing from lmtp log line prefixes when
    it was performing autoexpunging.
  - master: Dovecot would incorrectly fail with haproxy 2.0.14 service
    checks.
  - master: Systemd service: Dovecot announces readiness for accepting
    connections earlier than it should. The following environment variables
    are now imported automatically and can be omitted from
    import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
  - master: service { process_min_avail } was launching processes too
    slowly when master was forking a lot of processes.
  - util: Make the health-check.sh example script POSIX shell compatible.
  * Added new aliases for some variables. Usage of the old ones is possible,
    but discouraged. (These were partially added already to v2.3.13.)
    See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
    for more information.
  * Optimize imap/pop3/submission/managesieve proxies to use less CPU at
    the cost of extra memory usage.
  * Remove autocreate, expire, snarf and mail-filter plugins.
  * Remove cydir storage driver.
  * Remove XZ/LZMA write support. Read support will be removed in future release.
  * doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
    environment variable is not set. Timestamp format is taken from
    log_timestamp setting.
  * If BROKENCHAR or listescape plugin is used, the escaped folder names
    may be slightly different from before in some situations. This is
    unlikely to cause issues, although caching clients may redownload the
    folders.
  * imapc: It now enables BROKENCHAR=~ by default to escape remote folder
    names if necessary. This also means that if there are any '~'
    characters in the remote folder names, they will be visible as "~7e".
  * imapc: When using local index files folder names were escaped on
    filesystem a bit differently. This affects only if there are folder
    names that actually require escaping, which isn't so common. The old
    style folders will be automatically deleted from filesystem.
  * stats: Update exported metrics to be compliant with OpenMetrics standard.
  + doveadm: Add an optional '-p' parameter to metadata list command. If
    enabled, "/private", and "/shared" metadata prefixes will be prepended
    to the keys in the list output.
  + doveconf: Support environment variables in config files. See
    https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
    for more details.
  + indexer-worker: Change indexer to disconnect from indexer-worker
    after each request. This allows service indexer-worker's service_count &amp;
    idle_kill settings to work. These can be used to restart indexer-worker
    processes once in a while to reduce their memory usage.
  - auth: "nodelay" with various authentication mechanisms such as apop
    and digest-md5 crashed AUTH process if authentication failed.
  - auth: Auth lua script generating an error triggered an assertion
    failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
    assertion failed: (lua_gettop(script-&gt;L) == 0).
  - configure: Fix libunwind detection to work on other than x86_64 systems.
  - doveadm-server: Process could crash if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or Panic:
    file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - dsync: Folder name escaping with BROKENCHAR didn't work completely
    correctly. This especially caused problems with dsync-migrations using
    imapc where some of the remote folder names may not have been accessible.
  - dsync: doveadm sync + imapc doesn't always sync all mails when doing
    an incremental sync (-1), which could lead to mail loss when it's used
    for migration. This happens only when GUIDs aren't used (i.e.
    imapc without imapc_features=guid-forced).
  - fts-tika: When tika server returns error, some mails cause Panic:
    file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
    resulted in crashes. This exposed that Dovecot was wrongly accepting
    atoms in "nstring" handling. Changed the IMAP parsing to be more
    strict about this now.
  - lib-index: If dovecot.index.cache has corrupted message size, fetching
    BODY/BODYSTRUCTURE may cause assert-crash:
    Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
    assertion failed: (mail-&gt;data.parts != NULL).
  - lib-index: Minor error handling and race condition fixes related to
    rotating dovecot.index.log. These didn't usually cause problems,
    unless the log files were rotated rapidly.
  - lib-lua: Lua scripts using coroutines or lua libraries using coroutines
    (e.g., cqueues) panicked.
  - Message PREVIEW handled whitespace wrong so first space would get
    eaten from between words.
  - FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for IMAP clients
    and also Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
    use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
    (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
  - event filters: NOT keyword did not have the correct associativity.
  - Ignore ECONNRESET when closing socket. This avoids logging useless
    errors on systems like FreeBSD.
  - event filters: event filter syntax error may lead to Panic:
    file event-filter.c: line 137 (event_filter_parse): assertion failed:
    (state.output == NULL)
  - lib: timeval_cmp_margin() was broken on 32-bit systems. This could
    potentially have caused HTTP timeouts to be handled incorrectly.
  - log: instance_name wasn't used as syslog ident by the log process.
  - master: After a service reached process_limit and client_limit, it
    could have taken up to 1 second to realize that more client connections
    became available. During this time client connections could have been
    unnecessarily rejected and a warning logged:
    Warning: service(...): process_limit (...) reached, client connections are being dropped
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
  - stats: Event filters comparing against empty strings crash the stats
    process.
  * CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
    allow logged in user to access other people's emails and filesystem
    information.
  * Metric filter and global event filter variable syntax changed to a
    SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
  * auth: Added new aliases for %{variables}. Usage of the old ones is
    possible, but discouraged.
  * auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
    mechanism and related password schemes.
  * auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
  * auth: Removed postfix postmap socket
  + auth: Added new fields for auth server events. These fields are now
    also available for all auth events. See
    https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
    for details.
  + imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
    and imap_client_unhibernate_retried events. See
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + lib-index: Added new mail_index_recreated event. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
  + lib-sql: Support TLS options for cassandra driver. This requires
    cpp-driver v2.15 (or later) to work reliably.
  + lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
    added to existing mails if mail_attachment_detection_option=add-flags
    and it can be done inexpensively.
  + login proxy: Added login_proxy_max_reconnects setting (default 3) to
    control how many reconnections are attempted.
  + login proxy: imap/pop3/submission/managesieve proxying now supports
    reconnection retrying on more than just connect() failure. Any error
    except a non-temporary authentication failure will result in reconnect
    attempts.
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - auth: SASL authentication PLAIN mechanism could be used to trigger
    read buffer overflow. However, this doesn't seem to be exploitable in
    any way.
  - auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
    disallows NUL bytes for it.
  - dict: Process used too much CPU when iterating keys, because each key
    used a separate write() syscall.
  - doveadm-server: Crash could occur if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or
    Panic: file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
    process via starttls assert-crashed if there were no ssl=yes listeners:
    Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
    assertion failed: (service-&gt;ssl_ctx_initialized).
  - fts-solr: HTTP requests may have assert-crashed:
    Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
    assertion failed: (req-&gt;payload_input != NULL)
  - imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
    configuration that causes errors. Sending the error responses to the
    client can cause the segmentation fault. This can for example happen
    when several namespaces use the same mail storage location.
  - imap: IMAP NOTIFY used on a shared namespace that doesn't actually
    exist (e.g. public namespace for a nonexistent user) can crash with a panic:
    Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
  - imap: IMAP session can crash with QRESYNC extension if many changes
    are done before asking for expunged mails since last sync.
  - imap: Process might hang indefinitely if client disconnects after
    sending some long-running commands pipelined, for example FETCH+LOGOUT.
  - lib-compress: Mitigate crashes when configuring a not compiled in
    compression. Errors with compression configuration now distinguish
    between not supported and unknown.
  - lib-compression: Using xz/lzma compression in v2.3.11 could have
    written truncated output in some situations. This would result in
    "Broken pipe" read errors when trying to read it back.
  - lib-compression: zstd compression could have crashed in some situations:
    Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
  - lib-dict: dict client could have crashed in some rare situations when
    iterating keys.
  - lib-http: Fix several assert-crashes in HTTP client.
  - lib-index: v2.3.11 regression: When mails were expunged at the same
    time as lots of new content was being saved to the cache (e.g. cache
    file was lost and is being re-filled) a deadlock could occur with
    dovecot.index.cache / dovecot.index.log.
  - lib-index: v2.3.11 regression: dovecot.index.cache file was being
    purged (rewritten) too often when it had a field that hadn't been
    accessed for over 1 month, but less than 2 months. Every cache file
    change caused a purging in this situation.
  - lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
    Regression caused by fixing CVE-2020-12100.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for both IMAP
    clients and Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
    10000th MIME part was message/rfc822 (or if parent was multipart/digest):
    Panic: file message-parser.c: line 167 (message_part_append):
    assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
  - lib-oauth2: Dovecot incorrectly required oauth2 server introspection
    reply to contain username with invalid token.
  - lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
    deprecated APIs disabled.
  - lib-storage: When mail's size is different from the cached one (in
    dovecot.index.cache or Maildir S=size in the filename), this is
    handled by logging "Cached message size smaller/larger than expected"
    error. However, in some situations this also ended up crashing with:
    Panic: file istream.c: line 315 (i_stream_read_memarea):
    assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
  - lib-storage: v2.3 regression: Copying/moving mails was taking much more
    memory than before. This was mainly visible when copying/moving
    thousands of mails in a single transaction.
  - lib-storage: v2.3.11 regression: Searching messages assert-crashed
    (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
    assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
  - lib: Dovecot v2.3 moved signal handlers around in ioloops,
    causing more CPU usage than in v2.2.
  - lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
    in error if it happened to be at read boundary. Any NUL characters and
    '\u0000' will now result in parsing error instead of silently
    truncating the data.
  - lmtp, submission: Server may hang if SSL client connection disconnects
    during the delivery. If this happened repeated, it could have ended
    up reaching process_limit and preventing any further lmtp/submission
    deliveries.
  - lmtp: Proxy does not always properly log TLS connection problems as
    errors; in some cases, only a debug message is logged if enabled.
  - lmtp: The LMTP service can hang when commands are pipelined. This can
    particularly occur when one command in the middle of the pipeline fails.
    One example of this occurs for proxied LMTP transactions in which the
    final DATA or BDAT command is pipelined after a failing RCPT command.
  - login-proxy: The login_source_ips setting has no effect, and therefore
    the proxy source IPs are not cycled through as they should be.
  - master: Process was using 100% CPU in some situations when a broken
    service was being throttled.
  - pop3-login: POP3 login would fail with "Input buffer full" if the
    initial response for SASL was too long.
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
- Update pigeonhole to version 0.5.15
  * CVE-2020-28200: Sieve interpreter is not protected against abusive
    scripts that claim excessive resource usage. Fixed by limiting the
    user CPU time per single script execution and cumulatively over
    several script runs within a configurable timeout period. Sufficiently
    large CPU time usage is summed in the Sieve script binary and execution
    is blocked when the sum exceeds the limit within that time. The block
    is lifted when the script is updated after the resource usage times out.
    (bsc#1187420) Attacker can DoS the mail delivery system
    (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * managesieve: Commands pipelined together with and just after the
    authenticate command cause these commands to be executed twice.
  * duplicate: The test was handled badly in a multiscript (sieve_before,
    sieve_after) scenario in which an earlier script in the sequence with
    a duplicate test succeeded, while a later script caused a runtime
    failure. In that case, the message is recorded for duplicate tracking,
    while the message may not actually have been delivered in the end.
  * editheader: Sieve interpreter entered infinite loop at startup when
    the "editheader" configuration listed an invalid header name. This
    problem can only be triggered by the administrator.
  * relational: The Sieve relational extension can cause a segfault at
    compile time. This is triggered by invalid script syntax. The segfault
    happens when this match type is the last argument of the test command.
    This situation is not possible in a valid script; positional arguments
    are normally present after that, which would prevent the segfault.
  * sieve: For some Sieve commands the provided mailbox name is not
    properly checked for UTF-8 validity, which can cause assert crashes at
    runtime when an invalid mailbox name is encountered. This can be
    caused by the user by writing a bad Sieve script involving the
    affected commands ("mailboxexists", "specialuse_exists").
    This can be triggered by the remote sender only when the user has
    written a Sieve script that passes message content to one of the
    affected commands.
  * sieve: Large sequences of 8-bit octets passed to certain Sieve
    commands that create or modify message headers that allow UTF-8 text
    (vacation, notify and addheader) can cause the delivery or IMAP
    process (when IMAPSieve is used) to enter a memory-consuming
    semi-infinite loop that ends when the process exceeds its memory
    limits. Logged in users can cause these hangs only for their own
    processes.
- Remove upstream applied pathces:
  0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
  0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
  0002-imap-Add-unit-test-for-imap-client-hibernate.patch
  0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="106ced4d52cf30278581be807f5b68aaa804eefb44a4548381abaae8da71c42c" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="257fb087066a562030b6375985eb31eb5b6de6afa47d75fcca3b17e52e73d0fe" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="380bc46c3fa6e5e4fbd797c85d738f4cf6565b282b4665cbc2ca3a8669813b12" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="8e5e449980828d45c1b697793ef3555ad3b227d579b45cf55af96b290326389f" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.15" rel="lp152.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1624363200">- Update to version 2.3.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access.
    Local attacker can login as any user and access their emails
  - CVE-2021-33515:  On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client.
    Attacker can potentially steal user credentials and mails
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * Dovecot now depends on libsystemd for systemd integration.
  * Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
  * config: Some settings are now marked as "hidden". It's discouraged to
    change these settings. They will no longer be visible in doveconf
    output, except if they have been changed or if doveconf -s parameter
    is used. See https://doc.dovecot.org/settings/advanced/ for details.
  * imap-compress: Compression level is now algorithm specific.
    See https://doc.dovecot.org/settings/plugin/compress-plugin/
  * indexer-worker: Convert "Indexed" info logs to an event named
    "indexer_worker_indexing_finished". See
    https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
  + Add TSLv1.3 support to min_protocols.
  + Allow configuring ssl_cipher_suites. (for TLSv1.3+)
  + acl: Add acl_ignore_namespace setting which allows to entirely ignore
    ACLs for the listed namespaces.
  + imap: Support official RFC8970 preview/snippet syntax. Old methods of
    retrieving preview information via IMAP commands ("SNIPPET and PREVIEW
    with explicit algorithm selection") have been deprecated.
  + imapc: Support INDEXPVT for imapc storage to enable private
    message flags for cluster wide shared mailboxes.
  + lib-storage: Add new events: mail_opened, mail_expunge_requested,
    mail_expunged, mail_cache_lookup_finished. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail
  + zlib, imap-compression, fs-compress: Support compression levels that
    the algorithm supports. Before, we would allow hardcoded value between
    1 to 9 and would default to 6. Now we allow using per-algorithm value
    range and default to whatever default the algorithm specifies.
  - *-login: Commands pipelined together with and just after the authenticate
    command cause these commands to be executed twice. This applies to all
    protocols that involve user login, which currently comprises of imap,
    pop3, submisision and managesieve.
  - *-login: Processes are supposed to disconnect the oldest non-logged in
    connection when process_limit was reached. This didn't actually happen
    with the default "high-security mode" (with service_count=1) where each
    connection is handled by a separate process.
  - *-login: When login process reaches client/process limits, oldest
    client connections are disconnected. If one of these was still doing
    anvil lookup, this caused a crash. This could happen only if the login
    process limits were very low or if the server was overloaded.
  - Fixed building with link time optimizations (-flto).
  - auth: Userdb iteration with passwd driver does not always return all
    users with some nss drivers.
  - dsync: Shared INBOX not synced when "mail_shared_explicit_inbox" was
    disabled. If a user has a shared mailbox which is another user's INBOX,
    dsync didn't include the mailbox in syncing unless explicit naming is
    enabled with "mail_shared_explicit_inbox" set to "yes".
  - dsync: Shared namespaces were not synced with "-n" flag.
  - dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
    If a user has a shared mailbox that is another user's INBOX, dsync
    failed to export the mailbox if mail attributes are disabled.
  - fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
    requests to assert-crash: Panic: file http-client-request.c: line 1232
    (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
  - fts-tika: 5xx errors returned by Tika server as indexing failures.
    However, Tika can return 5xx for some attachments every time.
    So the 5xx error should be retried once, but treated as success if it
    happens on the retry as well. v2.3 regression.
  - fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
    resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - imap: SETMETADATA could not be used to unset metadata values.
    Instead NIL was handled as a "NIL" string. v2.3.14 regression.
  - imap: IMAP BINARY FETCH crashes at least on empty base64 body:
    Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
    assertion failed: (block_count == 0 || block_idx+1 == block_count)
  - imap: If IMAP client using the NOTIFY command was disconnected while
    sending FETCH notifications to the client, imap could crash with
    Panic: Trying to close mailbox INBOX with open transactions.
  - imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
    when IMAP commands are &gt;8 kB long.
  - imapc: If remote server sent BYE but didn't immediately disconnect, it
    could cause infinite busy-loop.
  - lib-index: Corrupted cache record size in dovecot.index.cache file
    could have caused a crash (segfault) when accessing it.
  - lib-oauth2: JWT token time validation now works correctly with
    32-bit systems.
  - lib-ssl-iostream: Checking hostnames against an SSL certificate was
    case-sensitive.
  - lib-storage: Corrupted mime.parts in dovecot.index.cache may have
    resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
    assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
  - lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
    preserve the "hdr-pop3-uidl" header. Because of this, the next pop3
    session could have accessed all of the emails' metadata to read their
    POP3 UIDL (opening dbox files).
  - listescape: When using the listescape plugin and a shared namespace
    the plugin didn't work properly anymore resulting in errors like:
    "Invalid mailbox name: Name must not have '/' character."
  - lmtp: Connection crashes if connection gets disconnected due to
    multiple bad commands and the last bad command is BDAT.
  - lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
    forwarded by LMTP proxy without checking that the backend has support.
    This caused a command parameter error from the backend if it was
    running an older Dovecot release. This could only occur in more complex
    setups where the message was proxied twice; when the proxy generated
    the XRCPTFORWARD parameter itself the problem did not occur, so this
    only happened when it was forwarded.
  - lmtp: The LMTP proxy crashes with a panic when the remote server
    replies with an error while the mail is still being forwarded through
    a DATA/BDAT command.
  - lmtp: Username may have been missing from lmtp log line prefixes when
    it was performing autoexpunging.
  - master: Dovecot would incorrectly fail with haproxy 2.0.14 service
    checks.
  - master: Systemd service: Dovecot announces readiness for accepting
    connections earlier than it should. The following environment variables
    are now imported automatically and can be omitted from
    import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
  - master: service { process_min_avail } was launching processes too
    slowly when master was forking a lot of processes.
  - util: Make the health-check.sh example script POSIX shell compatible.
  * Added new aliases for some variables. Usage of the old ones is possible,
    but discouraged. (These were partially added already to v2.3.13.)
    See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
    for more information.
  * Optimize imap/pop3/submission/managesieve proxies to use less CPU at
    the cost of extra memory usage.
  * Remove autocreate, expire, snarf and mail-filter plugins.
  * Remove cydir storage driver.
  * Remove XZ/LZMA write support. Read support will be removed in future release.
  * doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
    environment variable is not set. Timestamp format is taken from
    log_timestamp setting.
  * If BROKENCHAR or listescape plugin is used, the escaped folder names
    may be slightly different from before in some situations. This is
    unlikely to cause issues, although caching clients may redownload the
    folders.
  * imapc: It now enables BROKENCHAR=~ by default to escape remote folder
    names if necessary. This also means that if there are any '~'
    characters in the remote folder names, they will be visible as "~7e".
  * imapc: When using local index files folder names were escaped on
    filesystem a bit differently. This affects only if there are folder
    names that actually require escaping, which isn't so common. The old
    style folders will be automatically deleted from filesystem.
  * stats: Update exported metrics to be compliant with OpenMetrics standard.
  + doveadm: Add an optional '-p' parameter to metadata list command. If
    enabled, "/private", and "/shared" metadata prefixes will be prepended
    to the keys in the list output.
  + doveconf: Support environment variables in config files. See
    https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
    for more details.
  + indexer-worker: Change indexer to disconnect from indexer-worker
    after each request. This allows service indexer-worker's service_count &amp;
    idle_kill settings to work. These can be used to restart indexer-worker
    processes once in a while to reduce their memory usage.
  - auth: "nodelay" with various authentication mechanisms such as apop
    and digest-md5 crashed AUTH process if authentication failed.
  - auth: Auth lua script generating an error triggered an assertion
    failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
    assertion failed: (lua_gettop(script-&gt;L) == 0).
  - configure: Fix libunwind detection to work on other than x86_64 systems.
  - doveadm-server: Process could crash if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or Panic:
    file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - dsync: Folder name escaping with BROKENCHAR didn't work completely
    correctly. This especially caused problems with dsync-migrations using
    imapc where some of the remote folder names may not have been accessible.
  - dsync: doveadm sync + imapc doesn't always sync all mails when doing
    an incremental sync (-1), which could lead to mail loss when it's used
    for migration. This happens only when GUIDs aren't used (i.e.
    imapc without imapc_features=guid-forced).
  - fts-tika: When tika server returns error, some mails cause Panic:
    file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
    resulted in crashes. This exposed that Dovecot was wrongly accepting
    atoms in "nstring" handling. Changed the IMAP parsing to be more
    strict about this now.
  - lib-index: If dovecot.index.cache has corrupted message size, fetching
    BODY/BODYSTRUCTURE may cause assert-crash:
    Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
    assertion failed: (mail-&gt;data.parts != NULL).
  - lib-index: Minor error handling and race condition fixes related to
    rotating dovecot.index.log. These didn't usually cause problems,
    unless the log files were rotated rapidly.
  - lib-lua: Lua scripts using coroutines or lua libraries using coroutines
    (e.g., cqueues) panicked.
  - Message PREVIEW handled whitespace wrong so first space would get
    eaten from between words.
  - FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for IMAP clients
    and also Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
    use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
    (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
  - event filters: NOT keyword did not have the correct associativity.
  - Ignore ECONNRESET when closing socket. This avoids logging useless
    errors on systems like FreeBSD.
  - event filters: event filter syntax error may lead to Panic:
    file event-filter.c: line 137 (event_filter_parse): assertion failed:
    (state.output == NULL)
  - lib: timeval_cmp_margin() was broken on 32-bit systems. This could
    potentially have caused HTTP timeouts to be handled incorrectly.
  - log: instance_name wasn't used as syslog ident by the log process.
  - master: After a service reached process_limit and client_limit, it
    could have taken up to 1 second to realize that more client connections
    became available. During this time client connections could have been
    unnecessarily rejected and a warning logged:
    Warning: service(...): process_limit (...) reached, client connections are being dropped
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
  - stats: Event filters comparing against empty strings crash the stats
    process.
  * CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
    allow logged in user to access other people's emails and filesystem
    information.
  * Metric filter and global event filter variable syntax changed to a
    SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
  * auth: Added new aliases for %{variables}. Usage of the old ones is
    possible, but discouraged.
  * auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
    mechanism and related password schemes.
  * auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
  * auth: Removed postfix postmap socket
  + auth: Added new fields for auth server events. These fields are now
    also available for all auth events. See
    https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
    for details.
  + imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
    and imap_client_unhibernate_retried events. See
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + lib-index: Added new mail_index_recreated event. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
  + lib-sql: Support TLS options for cassandra driver. This requires
    cpp-driver v2.15 (or later) to work reliably.
  + lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
    added to existing mails if mail_attachment_detection_option=add-flags
    and it can be done inexpensively.
  + login proxy: Added login_proxy_max_reconnects setting (default 3) to
    control how many reconnections are attempted.
  + login proxy: imap/pop3/submission/managesieve proxying now supports
    reconnection retrying on more than just connect() failure. Any error
    except a non-temporary authentication failure will result in reconnect
    attempts.
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - auth: SASL authentication PLAIN mechanism could be used to trigger
    read buffer overflow. However, this doesn't seem to be exploitable in
    any way.
  - auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
    disallows NUL bytes for it.
  - dict: Process used too much CPU when iterating keys, because each key
    used a separate write() syscall.
  - doveadm-server: Crash could occur if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or
    Panic: file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
    process via starttls assert-crashed if there were no ssl=yes listeners:
    Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
    assertion failed: (service-&gt;ssl_ctx_initialized).
  - fts-solr: HTTP requests may have assert-crashed:
    Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
    assertion failed: (req-&gt;payload_input != NULL)
  - imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
    configuration that causes errors. Sending the error responses to the
    client can cause the segmentation fault. This can for example happen
    when several namespaces use the same mail storage location.
  - imap: IMAP NOTIFY used on a shared namespace that doesn't actually
    exist (e.g. public namespace for a nonexistent user) can crash with a panic:
    Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
  - imap: IMAP session can crash with QRESYNC extension if many changes
    are done before asking for expunged mails since last sync.
  - imap: Process might hang indefinitely if client disconnects after
    sending some long-running commands pipelined, for example FETCH+LOGOUT.
  - lib-compress: Mitigate crashes when configuring a not compiled in
    compression. Errors with compression configuration now distinguish
    between not supported and unknown.
  - lib-compression: Using xz/lzma compression in v2.3.11 could have
    written truncated output in some situations. This would result in
    "Broken pipe" read errors when trying to read it back.
  - lib-compression: zstd compression could have crashed in some situations:
    Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
  - lib-dict: dict client could have crashed in some rare situations when
    iterating keys.
  - lib-http: Fix several assert-crashes in HTTP client.
  - lib-index: v2.3.11 regression: When mails were expunged at the same
    time as lots of new content was being saved to the cache (e.g. cache
    file was lost and is being re-filled) a deadlock could occur with
    dovecot.index.cache / dovecot.index.log.
  - lib-index: v2.3.11 regression: dovecot.index.cache file was being
    purged (rewritten) too often when it had a field that hadn't been
    accessed for over 1 month, but less than 2 months. Every cache file
    change caused a purging in this situation.
  - lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
    Regression caused by fixing CVE-2020-12100.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for both IMAP
    clients and Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
    10000th MIME part was message/rfc822 (or if parent was multipart/digest):
    Panic: file message-parser.c: line 167 (message_part_append):
    assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
  - lib-oauth2: Dovecot incorrectly required oauth2 server introspection
    reply to contain username with invalid token.
  - lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
    deprecated APIs disabled.
  - lib-storage: When mail's size is different from the cached one (in
    dovecot.index.cache or Maildir S=size in the filename), this is
    handled by logging "Cached message size smaller/larger than expected"
    error. However, in some situations this also ended up crashing with:
    Panic: file istream.c: line 315 (i_stream_read_memarea):
    assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
  - lib-storage: v2.3 regression: Copying/moving mails was taking much more
    memory than before. This was mainly visible when copying/moving
    thousands of mails in a single transaction.
  - lib-storage: v2.3.11 regression: Searching messages assert-crashed
    (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
    assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
  - lib: Dovecot v2.3 moved signal handlers around in ioloops,
    causing more CPU usage than in v2.2.
  - lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
    in error if it happened to be at read boundary. Any NUL characters and
    '\u0000' will now result in parsing error instead of silently
    truncating the data.
  - lmtp, submission: Server may hang if SSL client connection disconnects
    during the delivery. If this happened repeated, it could have ended
    up reaching process_limit and preventing any further lmtp/submission
    deliveries.
  - lmtp: Proxy does not always properly log TLS connection problems as
    errors; in some cases, only a debug message is logged if enabled.
  - lmtp: The LMTP service can hang when commands are pipelined. This can
    particularly occur when one command in the middle of the pipeline fails.
    One example of this occurs for proxied LMTP transactions in which the
    final DATA or BDAT command is pipelined after a failing RCPT command.
  - login-proxy: The login_source_ips setting has no effect, and therefore
    the proxy source IPs are not cycled through as they should be.
  - master: Process was using 100% CPU in some situations when a broken
    service was being throttled.
  - pop3-login: POP3 login would fail with "Input buffer full" if the
    initial response for SASL was too long.
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
- Update pigeonhole to version 0.5.15
  * CVE-2020-28200: Sieve interpreter is not protected against abusive
    scripts that claim excessive resource usage. Fixed by limiting the
    user CPU time per single script execution and cumulatively over
    several script runs within a configurable timeout period. Sufficiently
    large CPU time usage is summed in the Sieve script binary and execution
    is blocked when the sum exceeds the limit within that time. The block
    is lifted when the script is updated after the resource usage times out.
    (bsc#1187420) Attacker can DoS the mail delivery system
    (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * managesieve: Commands pipelined together with and just after the
    authenticate command cause these commands to be executed twice.
  * duplicate: The test was handled badly in a multiscript (sieve_before,
    sieve_after) scenario in which an earlier script in the sequence with
    a duplicate test succeeded, while a later script caused a runtime
    failure. In that case, the message is recorded for duplicate tracking,
    while the message may not actually have been delivered in the end.
  * editheader: Sieve interpreter entered infinite loop at startup when
    the "editheader" configuration listed an invalid header name. This
    problem can only be triggered by the administrator.
  * relational: The Sieve relational extension can cause a segfault at
    compile time. This is triggered by invalid script syntax. The segfault
    happens when this match type is the last argument of the test command.
    This situation is not possible in a valid script; positional arguments
    are normally present after that, which would prevent the segfault.
  * sieve: For some Sieve commands the provided mailbox name is not
    properly checked for UTF-8 validity, which can cause assert crashes at
    runtime when an invalid mailbox name is encountered. This can be
    caused by the user by writing a bad Sieve script involving the
    affected commands ("mailboxexists", "specialuse_exists").
    This can be triggered by the remote sender only when the user has
    written a Sieve script that passes message content to one of the
    affected commands.
  * sieve: Large sequences of 8-bit octets passed to certain Sieve
    commands that create or modify message headers that allow UTF-8 text
    (vacation, notify and addheader) can cause the delivery or IMAP
    process (when IMAPSieve is used) to enter a memory-consuming
    semi-infinite loop that ends when the process exceeds its memory
    limits. Logged in users can cause these hangs only for their own
    processes.
- Remove upstream applied pathces:
  0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
  0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
  0002-imap-Add-unit-test-for-imap-client-hibernate.patch
  0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="f4628406cdda38e4e1cf56fd203dccb1cfd7eeb25543eac5e89f215cf6a41c78" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="a27118f6ab8f368f20f77e5f319af12cd9368a989a3223e2d86715ffcc992569" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="d22c196de7603bff9b40622083423d237dccd8daac0bec4b5d9bb68200027dfe" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="60d0667c2e1597002d8c067014f7f43d7769b4cd31053a72573d4a40c12783dc" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.15" rel="lp152.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1624363200">- Update to version 2.3.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access.
    Local attacker can login as any user and access their emails
  - CVE-2021-33515:  On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client.
    Attacker can potentially steal user credentials and mails
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * Dovecot now depends on libsystemd for systemd integration.
  * Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
  * config: Some settings are now marked as "hidden". It's discouraged to
    change these settings. They will no longer be visible in doveconf
    output, except if they have been changed or if doveconf -s parameter
    is used. See https://doc.dovecot.org/settings/advanced/ for details.
  * imap-compress: Compression level is now algorithm specific.
    See https://doc.dovecot.org/settings/plugin/compress-plugin/
  * indexer-worker: Convert "Indexed" info logs to an event named
    "indexer_worker_indexing_finished". See
    https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
  + Add TSLv1.3 support to min_protocols.
  + Allow configuring ssl_cipher_suites. (for TLSv1.3+)
  + acl: Add acl_ignore_namespace setting which allows to entirely ignore
    ACLs for the listed namespaces.
  + imap: Support official RFC8970 preview/snippet syntax. Old methods of
    retrieving preview information via IMAP commands ("SNIPPET and PREVIEW
    with explicit algorithm selection") have been deprecated.
  + imapc: Support INDEXPVT for imapc storage to enable private
    message flags for cluster wide shared mailboxes.
  + lib-storage: Add new events: mail_opened, mail_expunge_requested,
    mail_expunged, mail_cache_lookup_finished. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail
  + zlib, imap-compression, fs-compress: Support compression levels that
    the algorithm supports. Before, we would allow hardcoded value between
    1 to 9 and would default to 6. Now we allow using per-algorithm value
    range and default to whatever default the algorithm specifies.
  - *-login: Commands pipelined together with and just after the authenticate
    command cause these commands to be executed twice. This applies to all
    protocols that involve user login, which currently comprises of imap,
    pop3, submisision and managesieve.
  - *-login: Processes are supposed to disconnect the oldest non-logged in
    connection when process_limit was reached. This didn't actually happen
    with the default "high-security mode" (with service_count=1) where each
    connection is handled by a separate process.
  - *-login: When login process reaches client/process limits, oldest
    client connections are disconnected. If one of these was still doing
    anvil lookup, this caused a crash. This could happen only if the login
    process limits were very low or if the server was overloaded.
  - Fixed building with link time optimizations (-flto).
  - auth: Userdb iteration with passwd driver does not always return all
    users with some nss drivers.
  - dsync: Shared INBOX not synced when "mail_shared_explicit_inbox" was
    disabled. If a user has a shared mailbox which is another user's INBOX,
    dsync didn't include the mailbox in syncing unless explicit naming is
    enabled with "mail_shared_explicit_inbox" set to "yes".
  - dsync: Shared namespaces were not synced with "-n" flag.
  - dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
    If a user has a shared mailbox that is another user's INBOX, dsync
    failed to export the mailbox if mail attributes are disabled.
  - fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
    requests to assert-crash: Panic: file http-client-request.c: line 1232
    (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
  - fts-tika: 5xx errors returned by Tika server as indexing failures.
    However, Tika can return 5xx for some attachments every time.
    So the 5xx error should be retried once, but treated as success if it
    happens on the retry as well. v2.3 regression.
  - fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
    resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - imap: SETMETADATA could not be used to unset metadata values.
    Instead NIL was handled as a "NIL" string. v2.3.14 regression.
  - imap: IMAP BINARY FETCH crashes at least on empty base64 body:
    Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
    assertion failed: (block_count == 0 || block_idx+1 == block_count)
  - imap: If IMAP client using the NOTIFY command was disconnected while
    sending FETCH notifications to the client, imap could crash with
    Panic: Trying to close mailbox INBOX with open transactions.
  - imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
    when IMAP commands are &gt;8 kB long.
  - imapc: If remote server sent BYE but didn't immediately disconnect, it
    could cause infinite busy-loop.
  - lib-index: Corrupted cache record size in dovecot.index.cache file
    could have caused a crash (segfault) when accessing it.
  - lib-oauth2: JWT token time validation now works correctly with
    32-bit systems.
  - lib-ssl-iostream: Checking hostnames against an SSL certificate was
    case-sensitive.
  - lib-storage: Corrupted mime.parts in dovecot.index.cache may have
    resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
    assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
  - lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
    preserve the "hdr-pop3-uidl" header. Because of this, the next pop3
    session could have accessed all of the emails' metadata to read their
    POP3 UIDL (opening dbox files).
  - listescape: When using the listescape plugin and a shared namespace
    the plugin didn't work properly anymore resulting in errors like:
    "Invalid mailbox name: Name must not have '/' character."
  - lmtp: Connection crashes if connection gets disconnected due to
    multiple bad commands and the last bad command is BDAT.
  - lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
    forwarded by LMTP proxy without checking that the backend has support.
    This caused a command parameter error from the backend if it was
    running an older Dovecot release. This could only occur in more complex
    setups where the message was proxied twice; when the proxy generated
    the XRCPTFORWARD parameter itself the problem did not occur, so this
    only happened when it was forwarded.
  - lmtp: The LMTP proxy crashes with a panic when the remote server
    replies with an error while the mail is still being forwarded through
    a DATA/BDAT command.
  - lmtp: Username may have been missing from lmtp log line prefixes when
    it was performing autoexpunging.
  - master: Dovecot would incorrectly fail with haproxy 2.0.14 service
    checks.
  - master: Systemd service: Dovecot announces readiness for accepting
    connections earlier than it should. The following environment variables
    are now imported automatically and can be omitted from
    import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
  - master: service { process_min_avail } was launching processes too
    slowly when master was forking a lot of processes.
  - util: Make the health-check.sh example script POSIX shell compatible.
  * Added new aliases for some variables. Usage of the old ones is possible,
    but discouraged. (These were partially added already to v2.3.13.)
    See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
    for more information.
  * Optimize imap/pop3/submission/managesieve proxies to use less CPU at
    the cost of extra memory usage.
  * Remove autocreate, expire, snarf and mail-filter plugins.
  * Remove cydir storage driver.
  * Remove XZ/LZMA write support. Read support will be removed in future release.
  * doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
    environment variable is not set. Timestamp format is taken from
    log_timestamp setting.
  * If BROKENCHAR or listescape plugin is used, the escaped folder names
    may be slightly different from before in some situations. This is
    unlikely to cause issues, although caching clients may redownload the
    folders.
  * imapc: It now enables BROKENCHAR=~ by default to escape remote folder
    names if necessary. This also means that if there are any '~'
    characters in the remote folder names, they will be visible as "~7e".
  * imapc: When using local index files folder names were escaped on
    filesystem a bit differently. This affects only if there are folder
    names that actually require escaping, which isn't so common. The old
    style folders will be automatically deleted from filesystem.
  * stats: Update exported metrics to be compliant with OpenMetrics standard.
  + doveadm: Add an optional '-p' parameter to metadata list command. If
    enabled, "/private", and "/shared" metadata prefixes will be prepended
    to the keys in the list output.
  + doveconf: Support environment variables in config files. See
    https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
    for more details.
  + indexer-worker: Change indexer to disconnect from indexer-worker
    after each request. This allows service indexer-worker's service_count &amp;
    idle_kill settings to work. These can be used to restart indexer-worker
    processes once in a while to reduce their memory usage.
  - auth: "nodelay" with various authentication mechanisms such as apop
    and digest-md5 crashed AUTH process if authentication failed.
  - auth: Auth lua script generating an error triggered an assertion
    failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
    assertion failed: (lua_gettop(script-&gt;L) == 0).
  - configure: Fix libunwind detection to work on other than x86_64 systems.
  - doveadm-server: Process could crash if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or Panic:
    file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - dsync: Folder name escaping with BROKENCHAR didn't work completely
    correctly. This especially caused problems with dsync-migrations using
    imapc where some of the remote folder names may not have been accessible.
  - dsync: doveadm sync + imapc doesn't always sync all mails when doing
    an incremental sync (-1), which could lead to mail loss when it's used
    for migration. This happens only when GUIDs aren't used (i.e.
    imapc without imapc_features=guid-forced).
  - fts-tika: When tika server returns error, some mails cause Panic:
    file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
    resulted in crashes. This exposed that Dovecot was wrongly accepting
    atoms in "nstring" handling. Changed the IMAP parsing to be more
    strict about this now.
  - lib-index: If dovecot.index.cache has corrupted message size, fetching
    BODY/BODYSTRUCTURE may cause assert-crash:
    Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
    assertion failed: (mail-&gt;data.parts != NULL).
  - lib-index: Minor error handling and race condition fixes related to
    rotating dovecot.index.log. These didn't usually cause problems,
    unless the log files were rotated rapidly.
  - lib-lua: Lua scripts using coroutines or lua libraries using coroutines
    (e.g., cqueues) panicked.
  - Message PREVIEW handled whitespace wrong so first space would get
    eaten from between words.
  - FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for IMAP clients
    and also Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
    use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
    (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
  - event filters: NOT keyword did not have the correct associativity.
  - Ignore ECONNRESET when closing socket. This avoids logging useless
    errors on systems like FreeBSD.
  - event filters: event filter syntax error may lead to Panic:
    file event-filter.c: line 137 (event_filter_parse): assertion failed:
    (state.output == NULL)
  - lib: timeval_cmp_margin() was broken on 32-bit systems. This could
    potentially have caused HTTP timeouts to be handled incorrectly.
  - log: instance_name wasn't used as syslog ident by the log process.
  - master: After a service reached process_limit and client_limit, it
    could have taken up to 1 second to realize that more client connections
    became available. During this time client connections could have been
    unnecessarily rejected and a warning logged:
    Warning: service(...): process_limit (...) reached, client connections are being dropped
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
  - stats: Event filters comparing against empty strings crash the stats
    process.
  * CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
    allow logged in user to access other people's emails and filesystem
    information.
  * Metric filter and global event filter variable syntax changed to a
    SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
  * auth: Added new aliases for %{variables}. Usage of the old ones is
    possible, but discouraged.
  * auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
    mechanism and related password schemes.
  * auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
  * auth: Removed postfix postmap socket
  + auth: Added new fields for auth server events. These fields are now
    also available for all auth events. See
    https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
    for details.
  + imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
    and imap_client_unhibernate_retried events. See
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + lib-index: Added new mail_index_recreated event. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
  + lib-sql: Support TLS options for cassandra driver. This requires
    cpp-driver v2.15 (or later) to work reliably.
  + lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
    added to existing mails if mail_attachment_detection_option=add-flags
    and it can be done inexpensively.
  + login proxy: Added login_proxy_max_reconnects setting (default 3) to
    control how many reconnections are attempted.
  + login proxy: imap/pop3/submission/managesieve proxying now supports
    reconnection retrying on more than just connect() failure. Any error
    except a non-temporary authentication failure will result in reconnect
    attempts.
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - auth: SASL authentication PLAIN mechanism could be used to trigger
    read buffer overflow. However, this doesn't seem to be exploitable in
    any way.
  - auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
    disallows NUL bytes for it.
  - dict: Process used too much CPU when iterating keys, because each key
    used a separate write() syscall.
  - doveadm-server: Crash could occur if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or
    Panic: file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
    process via starttls assert-crashed if there were no ssl=yes listeners:
    Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
    assertion failed: (service-&gt;ssl_ctx_initialized).
  - fts-solr: HTTP requests may have assert-crashed:
    Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
    assertion failed: (req-&gt;payload_input != NULL)
  - imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
    configuration that causes errors. Sending the error responses to the
    client can cause the segmentation fault. This can for example happen
    when several namespaces use the same mail storage location.
  - imap: IMAP NOTIFY used on a shared namespace that doesn't actually
    exist (e.g. public namespace for a nonexistent user) can crash with a panic:
    Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
  - imap: IMAP session can crash with QRESYNC extension if many changes
    are done before asking for expunged mails since last sync.
  - imap: Process might hang indefinitely if client disconnects after
    sending some long-running commands pipelined, for example FETCH+LOGOUT.
  - lib-compress: Mitigate crashes when configuring a not compiled in
    compression. Errors with compression configuration now distinguish
    between not supported and unknown.
  - lib-compression: Using xz/lzma compression in v2.3.11 could have
    written truncated output in some situations. This would result in
    "Broken pipe" read errors when trying to read it back.
  - lib-compression: zstd compression could have crashed in some situations:
    Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
  - lib-dict: dict client could have crashed in some rare situations when
    iterating keys.
  - lib-http: Fix several assert-crashes in HTTP client.
  - lib-index: v2.3.11 regression: When mails were expunged at the same
    time as lots of new content was being saved to the cache (e.g. cache
    file was lost and is being re-filled) a deadlock could occur with
    dovecot.index.cache / dovecot.index.log.
  - lib-index: v2.3.11 regression: dovecot.index.cache file was being
    purged (rewritten) too often when it had a field that hadn't been
    accessed for over 1 month, but less than 2 months. Every cache file
    change caused a purging in this situation.
  - lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
    Regression caused by fixing CVE-2020-12100.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for both IMAP
    clients and Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
    10000th MIME part was message/rfc822 (or if parent was multipart/digest):
    Panic: file message-parser.c: line 167 (message_part_append):
    assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
  - lib-oauth2: Dovecot incorrectly required oauth2 server introspection
    reply to contain username with invalid token.
  - lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
    deprecated APIs disabled.
  - lib-storage: When mail's size is different from the cached one (in
    dovecot.index.cache or Maildir S=size in the filename), this is
    handled by logging "Cached message size smaller/larger than expected"
    error. However, in some situations this also ended up crashing with:
    Panic: file istream.c: line 315 (i_stream_read_memarea):
    assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
  - lib-storage: v2.3 regression: Copying/moving mails was taking much more
    memory than before. This was mainly visible when copying/moving
    thousands of mails in a single transaction.
  - lib-storage: v2.3.11 regression: Searching messages assert-crashed
    (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
    assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
  - lib: Dovecot v2.3 moved signal handlers around in ioloops,
    causing more CPU usage than in v2.2.
  - lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
    in error if it happened to be at read boundary. Any NUL characters and
    '\u0000' will now result in parsing error instead of silently
    truncating the data.
  - lmtp, submission: Server may hang if SSL client connection disconnects
    during the delivery. If this happened repeated, it could have ended
    up reaching process_limit and preventing any further lmtp/submission
    deliveries.
  - lmtp: Proxy does not always properly log TLS connection problems as
    errors; in some cases, only a debug message is logged if enabled.
  - lmtp: The LMTP service can hang when commands are pipelined. This can
    particularly occur when one command in the middle of the pipeline fails.
    One example of this occurs for proxied LMTP transactions in which the
    final DATA or BDAT command is pipelined after a failing RCPT command.
  - login-proxy: The login_source_ips setting has no effect, and therefore
    the proxy source IPs are not cycled through as they should be.
  - master: Process was using 100% CPU in some situations when a broken
    service was being throttled.
  - pop3-login: POP3 login would fail with "Input buffer full" if the
    initial response for SASL was too long.
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
- Update pigeonhole to version 0.5.15
  * CVE-2020-28200: Sieve interpreter is not protected against abusive
    scripts that claim excessive resource usage. Fixed by limiting the
    user CPU time per single script execution and cumulatively over
    several script runs within a configurable timeout period. Sufficiently
    large CPU time usage is summed in the Sieve script binary and execution
    is blocked when the sum exceeds the limit within that time. The block
    is lifted when the script is updated after the resource usage times out.
    (bsc#1187420) Attacker can DoS the mail delivery system
    (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * managesieve: Commands pipelined together with and just after the
    authenticate command cause these commands to be executed twice.
  * duplicate: The test was handled badly in a multiscript (sieve_before,
    sieve_after) scenario in which an earlier script in the sequence with
    a duplicate test succeeded, while a later script caused a runtime
    failure. In that case, the message is recorded for duplicate tracking,
    while the message may not actually have been delivered in the end.
  * editheader: Sieve interpreter entered infinite loop at startup when
    the "editheader" configuration listed an invalid header name. This
    problem can only be triggered by the administrator.
  * relational: The Sieve relational extension can cause a segfault at
    compile time. This is triggered by invalid script syntax. The segfault
    happens when this match type is the last argument of the test command.
    This situation is not possible in a valid script; positional arguments
    are normally present after that, which would prevent the segfault.
  * sieve: For some Sieve commands the provided mailbox name is not
    properly checked for UTF-8 validity, which can cause assert crashes at
    runtime when an invalid mailbox name is encountered. This can be
    caused by the user by writing a bad Sieve script involving the
    affected commands ("mailboxexists", "specialuse_exists").
    This can be triggered by the remote sender only when the user has
    written a Sieve script that passes message content to one of the
    affected commands.
  * sieve: Large sequences of 8-bit octets passed to certain Sieve
    commands that create or modify message headers that allow UTF-8 text
    (vacation, notify and addheader) can cause the delivery or IMAP
    process (when IMAPSieve is used) to enter a memory-consuming
    semi-infinite loop that ends when the process exceeds its memory
    limits. Logged in users can cause these hangs only for their own
    processes.
- Remove upstream applied pathces:
  0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
  0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
  0002-imap-Add-unit-test-for-imap-client-hibernate.patch
  0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="b12426b84db99c83a444f9dfd10fd5e8a095d8b4ace55ca2978116aeb067cba9" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="4f7ecbdab3bd79bac718d6798b44fd7dbc5120c3e5bd13b7f39ac548711d8175" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="a3babaebffac5e0a97070094a068c0cf05c3db630426c1515e72d72e38af21f9" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="e04f0df3330d3d342a0a77c7f066b4a0cf64b69b4fd4d3547d805c6728aa870f" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.15" rel="lp152.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1624363200">- Update to version 2.3.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access.
    Local attacker can login as any user and access their emails
  - CVE-2021-33515:  On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client.
    Attacker can potentially steal user credentials and mails
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * Dovecot now depends on libsystemd for systemd integration.
  * Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
  * config: Some settings are now marked as "hidden". It's discouraged to
    change these settings. They will no longer be visible in doveconf
    output, except if they have been changed or if doveconf -s parameter
    is used. See https://doc.dovecot.org/settings/advanced/ for details.
  * imap-compress: Compression level is now algorithm specific.
    See https://doc.dovecot.org/settings/plugin/compress-plugin/
  * indexer-worker: Convert "Indexed" info logs to an event named
    "indexer_worker_indexing_finished". See
    https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
  + Add TSLv1.3 support to min_protocols.
  + Allow configuring ssl_cipher_suites. (for TLSv1.3+)
  + acl: Add acl_ignore_namespace setting which allows to entirely ignore
    ACLs for the listed namespaces.
  + imap: Support official RFC8970 preview/snippet syntax. Old methods of
    retrieving preview information via IMAP commands ("SNIPPET and PREVIEW
    with explicit algorithm selection") have been deprecated.
  + imapc: Support INDEXPVT for imapc storage to enable private
    message flags for cluster wide shared mailboxes.
  + lib-storage: Add new events: mail_opened, mail_expunge_requested,
    mail_expunged, mail_cache_lookup_finished. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail
  + zlib, imap-compression, fs-compress: Support compression levels that
    the algorithm supports. Before, we would allow hardcoded value between
    1 to 9 and would default to 6. Now we allow using per-algorithm value
    range and default to whatever default the algorithm specifies.
  - *-login: Commands pipelined together with and just after the authenticate
    command cause these commands to be executed twice. This applies to all
    protocols that involve user login, which currently comprises of imap,
    pop3, submisision and managesieve.
  - *-login: Processes are supposed to disconnect the oldest non-logged in
    connection when process_limit was reached. This didn't actually happen
    with the default "high-security mode" (with service_count=1) where each
    connection is handled by a separate process.
  - *-login: When login process reaches client/process limits, oldest
    client connections are disconnected. If one of these was still doing
    anvil lookup, this caused a crash. This could happen only if the login
    process limits were very low or if the server was overloaded.
  - Fixed building with link time optimizations (-flto).
  - auth: Userdb iteration with passwd driver does not always return all
    users with some nss drivers.
  - dsync: Shared INBOX not synced when "mail_shared_explicit_inbox" was
    disabled. If a user has a shared mailbox which is another user's INBOX,
    dsync didn't include the mailbox in syncing unless explicit naming is
    enabled with "mail_shared_explicit_inbox" set to "yes".
  - dsync: Shared namespaces were not synced with "-n" flag.
  - dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
    If a user has a shared mailbox that is another user's INBOX, dsync
    failed to export the mailbox if mail attributes are disabled.
  - fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
    requests to assert-crash: Panic: file http-client-request.c: line 1232
    (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
  - fts-tika: 5xx errors returned by Tika server as indexing failures.
    However, Tika can return 5xx for some attachments every time.
    So the 5xx error should be retried once, but treated as success if it
    happens on the retry as well. v2.3 regression.
  - fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
    resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - imap: SETMETADATA could not be used to unset metadata values.
    Instead NIL was handled as a "NIL" string. v2.3.14 regression.
  - imap: IMAP BINARY FETCH crashes at least on empty base64 body:
    Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
    assertion failed: (block_count == 0 || block_idx+1 == block_count)
  - imap: If IMAP client using the NOTIFY command was disconnected while
    sending FETCH notifications to the client, imap could crash with
    Panic: Trying to close mailbox INBOX with open transactions.
  - imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
    when IMAP commands are &gt;8 kB long.
  - imapc: If remote server sent BYE but didn't immediately disconnect, it
    could cause infinite busy-loop.
  - lib-index: Corrupted cache record size in dovecot.index.cache file
    could have caused a crash (segfault) when accessing it.
  - lib-oauth2: JWT token time validation now works correctly with
    32-bit systems.
  - lib-ssl-iostream: Checking hostnames against an SSL certificate was
    case-sensitive.
  - lib-storage: Corrupted mime.parts in dovecot.index.cache may have
    resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
    assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
  - lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
    preserve the "hdr-pop3-uidl" header. Because of this, the next pop3
    session could have accessed all of the emails' metadata to read their
    POP3 UIDL (opening dbox files).
  - listescape: When using the listescape plugin and a shared namespace
    the plugin didn't work properly anymore resulting in errors like:
    "Invalid mailbox name: Name must not have '/' character."
  - lmtp: Connection crashes if connection gets disconnected due to
    multiple bad commands and the last bad command is BDAT.
  - lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
    forwarded by LMTP proxy without checking that the backend has support.
    This caused a command parameter error from the backend if it was
    running an older Dovecot release. This could only occur in more complex
    setups where the message was proxied twice; when the proxy generated
    the XRCPTFORWARD parameter itself the problem did not occur, so this
    only happened when it was forwarded.
  - lmtp: The LMTP proxy crashes with a panic when the remote server
    replies with an error while the mail is still being forwarded through
    a DATA/BDAT command.
  - lmtp: Username may have been missing from lmtp log line prefixes when
    it was performing autoexpunging.
  - master: Dovecot would incorrectly fail with haproxy 2.0.14 service
    checks.
  - master: Systemd service: Dovecot announces readiness for accepting
    connections earlier than it should. The following environment variables
    are now imported automatically and can be omitted from
    import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
  - master: service { process_min_avail } was launching processes too
    slowly when master was forking a lot of processes.
  - util: Make the health-check.sh example script POSIX shell compatible.
  * Added new aliases for some variables. Usage of the old ones is possible,
    but discouraged. (These were partially added already to v2.3.13.)
    See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
    for more information.
  * Optimize imap/pop3/submission/managesieve proxies to use less CPU at
    the cost of extra memory usage.
  * Remove autocreate, expire, snarf and mail-filter plugins.
  * Remove cydir storage driver.
  * Remove XZ/LZMA write support. Read support will be removed in future release.
  * doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
    environment variable is not set. Timestamp format is taken from
    log_timestamp setting.
  * If BROKENCHAR or listescape plugin is used, the escaped folder names
    may be slightly different from before in some situations. This is
    unlikely to cause issues, although caching clients may redownload the
    folders.
  * imapc: It now enables BROKENCHAR=~ by default to escape remote folder
    names if necessary. This also means that if there are any '~'
    characters in the remote folder names, they will be visible as "~7e".
  * imapc: When using local index files folder names were escaped on
    filesystem a bit differently. This affects only if there are folder
    names that actually require escaping, which isn't so common. The old
    style folders will be automatically deleted from filesystem.
  * stats: Update exported metrics to be compliant with OpenMetrics standard.
  + doveadm: Add an optional '-p' parameter to metadata list command. If
    enabled, "/private", and "/shared" metadata prefixes will be prepended
    to the keys in the list output.
  + doveconf: Support environment variables in config files. See
    https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
    for more details.
  + indexer-worker: Change indexer to disconnect from indexer-worker
    after each request. This allows service indexer-worker's service_count &amp;
    idle_kill settings to work. These can be used to restart indexer-worker
    processes once in a while to reduce their memory usage.
  - auth: "nodelay" with various authentication mechanisms such as apop
    and digest-md5 crashed AUTH process if authentication failed.
  - auth: Auth lua script generating an error triggered an assertion
    failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
    assertion failed: (lua_gettop(script-&gt;L) == 0).
  - configure: Fix libunwind detection to work on other than x86_64 systems.
  - doveadm-server: Process could crash if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or Panic:
    file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - dsync: Folder name escaping with BROKENCHAR didn't work completely
    correctly. This especially caused problems with dsync-migrations using
    imapc where some of the remote folder names may not have been accessible.
  - dsync: doveadm sync + imapc doesn't always sync all mails when doing
    an incremental sync (-1), which could lead to mail loss when it's used
    for migration. This happens only when GUIDs aren't used (i.e.
    imapc without imapc_features=guid-forced).
  - fts-tika: When tika server returns error, some mails cause Panic:
    file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
    resulted in crashes. This exposed that Dovecot was wrongly accepting
    atoms in "nstring" handling. Changed the IMAP parsing to be more
    strict about this now.
  - lib-index: If dovecot.index.cache has corrupted message size, fetching
    BODY/BODYSTRUCTURE may cause assert-crash:
    Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
    assertion failed: (mail-&gt;data.parts != NULL).
  - lib-index: Minor error handling and race condition fixes related to
    rotating dovecot.index.log. These didn't usually cause problems,
    unless the log files were rotated rapidly.
  - lib-lua: Lua scripts using coroutines or lua libraries using coroutines
    (e.g., cqueues) panicked.
  - Message PREVIEW handled whitespace wrong so first space would get
    eaten from between words.
  - FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for IMAP clients
    and also Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
    use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
    (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
  - event filters: NOT keyword did not have the correct associativity.
  - Ignore ECONNRESET when closing socket. This avoids logging useless
    errors on systems like FreeBSD.
  - event filters: event filter syntax error may lead to Panic:
    file event-filter.c: line 137 (event_filter_parse): assertion failed:
    (state.output == NULL)
  - lib: timeval_cmp_margin() was broken on 32-bit systems. This could
    potentially have caused HTTP timeouts to be handled incorrectly.
  - log: instance_name wasn't used as syslog ident by the log process.
  - master: After a service reached process_limit and client_limit, it
    could have taken up to 1 second to realize that more client connections
    became available. During this time client connections could have been
    unnecessarily rejected and a warning logged:
    Warning: service(...): process_limit (...) reached, client connections are being dropped
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
  - stats: Event filters comparing against empty strings crash the stats
    process.
  * CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
    allow logged in user to access other people's emails and filesystem
    information.
  * Metric filter and global event filter variable syntax changed to a
    SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
  * auth: Added new aliases for %{variables}. Usage of the old ones is
    possible, but discouraged.
  * auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
    mechanism and related password schemes.
  * auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
  * auth: Removed postfix postmap socket
  + auth: Added new fields for auth server events. These fields are now
    also available for all auth events. See
    https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
    for details.
  + imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
    and imap_client_unhibernate_retried events. See
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + lib-index: Added new mail_index_recreated event. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
  + lib-sql: Support TLS options for cassandra driver. This requires
    cpp-driver v2.15 (or later) to work reliably.
  + lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
    added to existing mails if mail_attachment_detection_option=add-flags
    and it can be done inexpensively.
  + login proxy: Added login_proxy_max_reconnects setting (default 3) to
    control how many reconnections are attempted.
  + login proxy: imap/pop3/submission/managesieve proxying now supports
    reconnection retrying on more than just connect() failure. Any error
    except a non-temporary authentication failure will result in reconnect
    attempts.
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - auth: SASL authentication PLAIN mechanism could be used to trigger
    read buffer overflow. However, this doesn't seem to be exploitable in
    any way.
  - auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
    disallows NUL bytes for it.
  - dict: Process used too much CPU when iterating keys, because each key
    used a separate write() syscall.
  - doveadm-server: Crash could occur if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or
    Panic: file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
    process via starttls assert-crashed if there were no ssl=yes listeners:
    Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
    assertion failed: (service-&gt;ssl_ctx_initialized).
  - fts-solr: HTTP requests may have assert-crashed:
    Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
    assertion failed: (req-&gt;payload_input != NULL)
  - imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
    configuration that causes errors. Sending the error responses to the
    client can cause the segmentation fault. This can for example happen
    when several namespaces use the same mail storage location.
  - imap: IMAP NOTIFY used on a shared namespace that doesn't actually
    exist (e.g. public namespace for a nonexistent user) can crash with a panic:
    Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
  - imap: IMAP session can crash with QRESYNC extension if many changes
    are done before asking for expunged mails since last sync.
  - imap: Process might hang indefinitely if client disconnects after
    sending some long-running commands pipelined, for example FETCH+LOGOUT.
  - lib-compress: Mitigate crashes when configuring a not compiled in
    compression. Errors with compression configuration now distinguish
    between not supported and unknown.
  - lib-compression: Using xz/lzma compression in v2.3.11 could have
    written truncated output in some situations. This would result in
    "Broken pipe" read errors when trying to read it back.
  - lib-compression: zstd compression could have crashed in some situations:
    Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
  - lib-dict: dict client could have crashed in some rare situations when
    iterating keys.
  - lib-http: Fix several assert-crashes in HTTP client.
  - lib-index: v2.3.11 regression: When mails were expunged at the same
    time as lots of new content was being saved to the cache (e.g. cache
    file was lost and is being re-filled) a deadlock could occur with
    dovecot.index.cache / dovecot.index.log.
  - lib-index: v2.3.11 regression: dovecot.index.cache file was being
    purged (rewritten) too often when it had a field that hadn't been
    accessed for over 1 month, but less than 2 months. Every cache file
    change caused a purging in this situation.
  - lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
    Regression caused by fixing CVE-2020-12100.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for both IMAP
    clients and Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
    10000th MIME part was message/rfc822 (or if parent was multipart/digest):
    Panic: file message-parser.c: line 167 (message_part_append):
    assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
  - lib-oauth2: Dovecot incorrectly required oauth2 server introspection
    reply to contain username with invalid token.
  - lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
    deprecated APIs disabled.
  - lib-storage: When mail's size is different from the cached one (in
    dovecot.index.cache or Maildir S=size in the filename), this is
    handled by logging "Cached message size smaller/larger than expected"
    error. However, in some situations this also ended up crashing with:
    Panic: file istream.c: line 315 (i_stream_read_memarea):
    assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
  - lib-storage: v2.3 regression: Copying/moving mails was taking much more
    memory than before. This was mainly visible when copying/moving
    thousands of mails in a single transaction.
  - lib-storage: v2.3.11 regression: Searching messages assert-crashed
    (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
    assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
  - lib: Dovecot v2.3 moved signal handlers around in ioloops,
    causing more CPU usage than in v2.2.
  - lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
    in error if it happened to be at read boundary. Any NUL characters and
    '\u0000' will now result in parsing error instead of silently
    truncating the data.
  - lmtp, submission: Server may hang if SSL client connection disconnects
    during the delivery. If this happened repeated, it could have ended
    up reaching process_limit and preventing any further lmtp/submission
    deliveries.
  - lmtp: Proxy does not always properly log TLS connection problems as
    errors; in some cases, only a debug message is logged if enabled.
  - lmtp: The LMTP service can hang when commands are pipelined. This can
    particularly occur when one command in the middle of the pipeline fails.
    One example of this occurs for proxied LMTP transactions in which the
    final DATA or BDAT command is pipelined after a failing RCPT command.
  - login-proxy: The login_source_ips setting has no effect, and therefore
    the proxy source IPs are not cycled through as they should be.
  - master: Process was using 100% CPU in some situations when a broken
    service was being throttled.
  - pop3-login: POP3 login would fail with "Input buffer full" if the
    initial response for SASL was too long.
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
- Update pigeonhole to version 0.5.15
  * CVE-2020-28200: Sieve interpreter is not protected against abusive
    scripts that claim excessive resource usage. Fixed by limiting the
    user CPU time per single script execution and cumulatively over
    several script runs within a configurable timeout period. Sufficiently
    large CPU time usage is summed in the Sieve script binary and execution
    is blocked when the sum exceeds the limit within that time. The block
    is lifted when the script is updated after the resource usage times out.
    (bsc#1187420) Attacker can DoS the mail delivery system
    (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * managesieve: Commands pipelined together with and just after the
    authenticate command cause these commands to be executed twice.
  * duplicate: The test was handled badly in a multiscript (sieve_before,
    sieve_after) scenario in which an earlier script in the sequence with
    a duplicate test succeeded, while a later script caused a runtime
    failure. In that case, the message is recorded for duplicate tracking,
    while the message may not actually have been delivered in the end.
  * editheader: Sieve interpreter entered infinite loop at startup when
    the "editheader" configuration listed an invalid header name. This
    problem can only be triggered by the administrator.
  * relational: The Sieve relational extension can cause a segfault at
    compile time. This is triggered by invalid script syntax. The segfault
    happens when this match type is the last argument of the test command.
    This situation is not possible in a valid script; positional arguments
    are normally present after that, which would prevent the segfault.
  * sieve: For some Sieve commands the provided mailbox name is not
    properly checked for UTF-8 validity, which can cause assert crashes at
    runtime when an invalid mailbox name is encountered. This can be
    caused by the user by writing a bad Sieve script involving the
    affected commands ("mailboxexists", "specialuse_exists").
    This can be triggered by the remote sender only when the user has
    written a Sieve script that passes message content to one of the
    affected commands.
  * sieve: Large sequences of 8-bit octets passed to certain Sieve
    commands that create or modify message headers that allow UTF-8 text
    (vacation, notify and addheader) can cause the delivery or IMAP
    process (when IMAPSieve is used) to enter a memory-consuming
    semi-infinite loop that ends when the process exceeds its memory
    limits. Logged in users can cause these hangs only for their own
    processes.
- Remove upstream applied pathces:
  0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
  0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
  0002-imap-Add-unit-test-for-imap-client-hibernate.patch
  0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="ee441b80f0d5f6de1cb428f3f863c1b43aeec469d355ab703fbf0da9f8a41feb" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="bcef6e1dd1d990eef3780930154cbc1dfb4e1c6e95b83d2455e481db731e23a0" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="05eff8b9784a603358b7121ee3b444a251e2c96aac1481fe2ad12c1679a56e4c" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="cb47b94ddd1bf01821d523d55c03d00c47e2c5f087088a5c29c1f0271a19bea3" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.15" rel="lp152.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1624363200">- Update to version 2.3.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access.
    Local attacker can login as any user and access their emails
  - CVE-2021-33515:  On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client.
    Attacker can potentially steal user credentials and mails
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * Dovecot now depends on libsystemd for systemd integration.
  * Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
  * config: Some settings are now marked as "hidden". It's discouraged to
    change these settings. They will no longer be visible in doveconf
    output, except if they have been changed or if doveconf -s parameter
    is used. See https://doc.dovecot.org/settings/advanced/ for details.
  * imap-compress: Compression level is now algorithm specific.
    See https://doc.dovecot.org/settings/plugin/compress-plugin/
  * indexer-worker: Convert "Indexed" info logs to an event named
    "indexer_worker_indexing_finished". See
    https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
  + Add TSLv1.3 support to min_protocols.
  + Allow configuring ssl_cipher_suites. (for TLSv1.3+)
  + acl: Add acl_ignore_namespace setting which allows to entirely ignore
    ACLs for the listed namespaces.
  + imap: Support official RFC8970 preview/snippet syntax. Old methods of
    retrieving preview information via IMAP commands ("SNIPPET and PREVIEW
    with explicit algorithm selection") have been deprecated.
  + imapc: Support INDEXPVT for imapc storage to enable private
    message flags for cluster wide shared mailboxes.
  + lib-storage: Add new events: mail_opened, mail_expunge_requested,
    mail_expunged, mail_cache_lookup_finished. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail
  + zlib, imap-compression, fs-compress: Support compression levels that
    the algorithm supports. Before, we would allow hardcoded value between
    1 to 9 and would default to 6. Now we allow using per-algorithm value
    range and default to whatever default the algorithm specifies.
  - *-login: Commands pipelined together with and just after the authenticate
    command cause these commands to be executed twice. This applies to all
    protocols that involve user login, which currently comprises of imap,
    pop3, submisision and managesieve.
  - *-login: Processes are supposed to disconnect the oldest non-logged in
    connection when process_limit was reached. This didn't actually happen
    with the default "high-security mode" (with service_count=1) where each
    connection is handled by a separate process.
  - *-login: When login process reaches client/process limits, oldest
    client connections are disconnected. If one of these was still doing
    anvil lookup, this caused a crash. This could happen only if the login
    process limits were very low or if the server was overloaded.
  - Fixed building with link time optimizations (-flto).
  - auth: Userdb iteration with passwd driver does not always return all
    users with some nss drivers.
  - dsync: Shared INBOX not synced when "mail_shared_explicit_inbox" was
    disabled. If a user has a shared mailbox which is another user's INBOX,
    dsync didn't include the mailbox in syncing unless explicit naming is
    enabled with "mail_shared_explicit_inbox" set to "yes".
  - dsync: Shared namespaces were not synced with "-n" flag.
  - dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
    If a user has a shared mailbox that is another user's INBOX, dsync
    failed to export the mailbox if mail attributes are disabled.
  - fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
    requests to assert-crash: Panic: file http-client-request.c: line 1232
    (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
  - fts-tika: 5xx errors returned by Tika server as indexing failures.
    However, Tika can return 5xx for some attachments every time.
    So the 5xx error should be retried once, but treated as success if it
    happens on the retry as well. v2.3 regression.
  - fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
    resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - imap: SETMETADATA could not be used to unset metadata values.
    Instead NIL was handled as a "NIL" string. v2.3.14 regression.
  - imap: IMAP BINARY FETCH crashes at least on empty base64 body:
    Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
    assertion failed: (block_count == 0 || block_idx+1 == block_count)
  - imap: If IMAP client using the NOTIFY command was disconnected while
    sending FETCH notifications to the client, imap could crash with
    Panic: Trying to close mailbox INBOX with open transactions.
  - imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
    when IMAP commands are &gt;8 kB long.
  - imapc: If remote server sent BYE but didn't immediately disconnect, it
    could cause infinite busy-loop.
  - lib-index: Corrupted cache record size in dovecot.index.cache file
    could have caused a crash (segfault) when accessing it.
  - lib-oauth2: JWT token time validation now works correctly with
    32-bit systems.
  - lib-ssl-iostream: Checking hostnames against an SSL certificate was
    case-sensitive.
  - lib-storage: Corrupted mime.parts in dovecot.index.cache may have
    resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
    assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
  - lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
    preserve the "hdr-pop3-uidl" header. Because of this, the next pop3
    session could have accessed all of the emails' metadata to read their
    POP3 UIDL (opening dbox files).
  - listescape: When using the listescape plugin and a shared namespace
    the plugin didn't work properly anymore resulting in errors like:
    "Invalid mailbox name: Name must not have '/' character."
  - lmtp: Connection crashes if connection gets disconnected due to
    multiple bad commands and the last bad command is BDAT.
  - lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
    forwarded by LMTP proxy without checking that the backend has support.
    This caused a command parameter error from the backend if it was
    running an older Dovecot release. This could only occur in more complex
    setups where the message was proxied twice; when the proxy generated
    the XRCPTFORWARD parameter itself the problem did not occur, so this
    only happened when it was forwarded.
  - lmtp: The LMTP proxy crashes with a panic when the remote server
    replies with an error while the mail is still being forwarded through
    a DATA/BDAT command.
  - lmtp: Username may have been missing from lmtp log line prefixes when
    it was performing autoexpunging.
  - master: Dovecot would incorrectly fail with haproxy 2.0.14 service
    checks.
  - master: Systemd service: Dovecot announces readiness for accepting
    connections earlier than it should. The following environment variables
    are now imported automatically and can be omitted from
    import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
  - master: service { process_min_avail } was launching processes too
    slowly when master was forking a lot of processes.
  - util: Make the health-check.sh example script POSIX shell compatible.
  * Added new aliases for some variables. Usage of the old ones is possible,
    but discouraged. (These were partially added already to v2.3.13.)
    See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
    for more information.
  * Optimize imap/pop3/submission/managesieve proxies to use less CPU at
    the cost of extra memory usage.
  * Remove autocreate, expire, snarf and mail-filter plugins.
  * Remove cydir storage driver.
  * Remove XZ/LZMA write support. Read support will be removed in future release.
  * doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
    environment variable is not set. Timestamp format is taken from
    log_timestamp setting.
  * If BROKENCHAR or listescape plugin is used, the escaped folder names
    may be slightly different from before in some situations. This is
    unlikely to cause issues, although caching clients may redownload the
    folders.
  * imapc: It now enables BROKENCHAR=~ by default to escape remote folder
    names if necessary. This also means that if there are any '~'
    characters in the remote folder names, they will be visible as "~7e".
  * imapc: When using local index files folder names were escaped on
    filesystem a bit differently. This affects only if there are folder
    names that actually require escaping, which isn't so common. The old
    style folders will be automatically deleted from filesystem.
  * stats: Update exported metrics to be compliant with OpenMetrics standard.
  + doveadm: Add an optional '-p' parameter to metadata list command. If
    enabled, "/private", and "/shared" metadata prefixes will be prepended
    to the keys in the list output.
  + doveconf: Support environment variables in config files. See
    https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
    for more details.
  + indexer-worker: Change indexer to disconnect from indexer-worker
    after each request. This allows service indexer-worker's service_count &amp;
    idle_kill settings to work. These can be used to restart indexer-worker
    processes once in a while to reduce their memory usage.
  - auth: "nodelay" with various authentication mechanisms such as apop
    and digest-md5 crashed AUTH process if authentication failed.
  - auth: Auth lua script generating an error triggered an assertion
    failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
    assertion failed: (lua_gettop(script-&gt;L) == 0).
  - configure: Fix libunwind detection to work on other than x86_64 systems.
  - doveadm-server: Process could crash if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or Panic:
    file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - dsync: Folder name escaping with BROKENCHAR didn't work completely
    correctly. This especially caused problems with dsync-migrations using
    imapc where some of the remote folder names may not have been accessible.
  - dsync: doveadm sync + imapc doesn't always sync all mails when doing
    an incremental sync (-1), which could lead to mail loss when it's used
    for migration. This happens only when GUIDs aren't used (i.e.
    imapc without imapc_features=guid-forced).
  - fts-tika: When tika server returns error, some mails cause Panic:
    file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
    resulted in crashes. This exposed that Dovecot was wrongly accepting
    atoms in "nstring" handling. Changed the IMAP parsing to be more
    strict about this now.
  - lib-index: If dovecot.index.cache has corrupted message size, fetching
    BODY/BODYSTRUCTURE may cause assert-crash:
    Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
    assertion failed: (mail-&gt;data.parts != NULL).
  - lib-index: Minor error handling and race condition fixes related to
    rotating dovecot.index.log. These didn't usually cause problems,
    unless the log files were rotated rapidly.
  - lib-lua: Lua scripts using coroutines or lua libraries using coroutines
    (e.g., cqueues) panicked.
  - Message PREVIEW handled whitespace wrong so first space would get
    eaten from between words.
  - FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for IMAP clients
    and also Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
    use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
    (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
  - event filters: NOT keyword did not have the correct associativity.
  - Ignore ECONNRESET when closing socket. This avoids logging useless
    errors on systems like FreeBSD.
  - event filters: event filter syntax error may lead to Panic:
    file event-filter.c: line 137 (event_filter_parse): assertion failed:
    (state.output == NULL)
  - lib: timeval_cmp_margin() was broken on 32-bit systems. This could
    potentially have caused HTTP timeouts to be handled incorrectly.
  - log: instance_name wasn't used as syslog ident by the log process.
  - master: After a service reached process_limit and client_limit, it
    could have taken up to 1 second to realize that more client connections
    became available. During this time client connections could have been
    unnecessarily rejected and a warning logged:
    Warning: service(...): process_limit (...) reached, client connections are being dropped
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
  - stats: Event filters comparing against empty strings crash the stats
    process.
  * CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
    allow logged in user to access other people's emails and filesystem
    information.
  * Metric filter and global event filter variable syntax changed to a
    SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
  * auth: Added new aliases for %{variables}. Usage of the old ones is
    possible, but discouraged.
  * auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
    mechanism and related password schemes.
  * auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
  * auth: Removed postfix postmap socket
  + auth: Added new fields for auth server events. These fields are now
    also available for all auth events. See
    https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
    for details.
  + imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
    and imap_client_unhibernate_retried events. See
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + lib-index: Added new mail_index_recreated event. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
  + lib-sql: Support TLS options for cassandra driver. This requires
    cpp-driver v2.15 (or later) to work reliably.
  + lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
    added to existing mails if mail_attachment_detection_option=add-flags
    and it can be done inexpensively.
  + login proxy: Added login_proxy_max_reconnects setting (default 3) to
    control how many reconnections are attempted.
  + login proxy: imap/pop3/submission/managesieve proxying now supports
    reconnection retrying on more than just connect() failure. Any error
    except a non-temporary authentication failure will result in reconnect
    attempts.
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - auth: SASL authentication PLAIN mechanism could be used to trigger
    read buffer overflow. However, this doesn't seem to be exploitable in
    any way.
  - auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
    disallows NUL bytes for it.
  - dict: Process used too much CPU when iterating keys, because each key
    used a separate write() syscall.
  - doveadm-server: Crash could occur if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or
    Panic: file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
    process via starttls assert-crashed if there were no ssl=yes listeners:
    Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
    assertion failed: (service-&gt;ssl_ctx_initialized).
  - fts-solr: HTTP requests may have assert-crashed:
    Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
    assertion failed: (req-&gt;payload_input != NULL)
  - imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
    configuration that causes errors. Sending the error responses to the
    client can cause the segmentation fault. This can for example happen
    when several namespaces use the same mail storage location.
  - imap: IMAP NOTIFY used on a shared namespace that doesn't actually
    exist (e.g. public namespace for a nonexistent user) can crash with a panic:
    Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
  - imap: IMAP session can crash with QRESYNC extension if many changes
    are done before asking for expunged mails since last sync.
  - imap: Process might hang indefinitely if client disconnects after
    sending some long-running commands pipelined, for example FETCH+LOGOUT.
  - lib-compress: Mitigate crashes when configuring a not compiled in
    compression. Errors with compression configuration now distinguish
    between not supported and unknown.
  - lib-compression: Using xz/lzma compression in v2.3.11 could have
    written truncated output in some situations. This would result in
    "Broken pipe" read errors when trying to read it back.
  - lib-compression: zstd compression could have crashed in some situations:
    Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
  - lib-dict: dict client could have crashed in some rare situations when
    iterating keys.
  - lib-http: Fix several assert-crashes in HTTP client.
  - lib-index: v2.3.11 regression: When mails were expunged at the same
    time as lots of new content was being saved to the cache (e.g. cache
    file was lost and is being re-filled) a deadlock could occur with
    dovecot.index.cache / dovecot.index.log.
  - lib-index: v2.3.11 regression: dovecot.index.cache file was being
    purged (rewritten) too often when it had a field that hadn't been
    accessed for over 1 month, but less than 2 months. Every cache file
    change caused a purging in this situation.
  - lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
    Regression caused by fixing CVE-2020-12100.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for both IMAP
    clients and Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
    10000th MIME part was message/rfc822 (or if parent was multipart/digest):
    Panic: file message-parser.c: line 167 (message_part_append):
    assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
  - lib-oauth2: Dovecot incorrectly required oauth2 server introspection
    reply to contain username with invalid token.
  - lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
    deprecated APIs disabled.
  - lib-storage: When mail's size is different from the cached one (in
    dovecot.index.cache or Maildir S=size in the filename), this is
    handled by logging "Cached message size smaller/larger than expected"
    error. However, in some situations this also ended up crashing with:
    Panic: file istream.c: line 315 (i_stream_read_memarea):
    assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
  - lib-storage: v2.3 regression: Copying/moving mails was taking much more
    memory than before. This was mainly visible when copying/moving
    thousands of mails in a single transaction.
  - lib-storage: v2.3.11 regression: Searching messages assert-crashed
    (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
    assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
  - lib: Dovecot v2.3 moved signal handlers around in ioloops,
    causing more CPU usage than in v2.2.
  - lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
    in error if it happened to be at read boundary. Any NUL characters and
    '\u0000' will now result in parsing error instead of silently
    truncating the data.
  - lmtp, submission: Server may hang if SSL client connection disconnects
    during the delivery. If this happened repeated, it could have ended
    up reaching process_limit and preventing any further lmtp/submission
    deliveries.
  - lmtp: Proxy does not always properly log TLS connection problems as
    errors; in some cases, only a debug message is logged if enabled.
  - lmtp: The LMTP service can hang when commands are pipelined. This can
    particularly occur when one command in the middle of the pipeline fails.
    One example of this occurs for proxied LMTP transactions in which the
    final DATA or BDAT command is pipelined after a failing RCPT command.
  - login-proxy: The login_source_ips setting has no effect, and therefore
    the proxy source IPs are not cycled through as they should be.
  - master: Process was using 100% CPU in some situations when a broken
    service was being throttled.
  - pop3-login: POP3 login would fail with "Input buffer full" if the
    initial response for SASL was too long.
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
- Update pigeonhole to version 0.5.15
  * CVE-2020-28200: Sieve interpreter is not protected against abusive
    scripts that claim excessive resource usage. Fixed by limiting the
    user CPU time per single script execution and cumulatively over
    several script runs within a configurable timeout period. Sufficiently
    large CPU time usage is summed in the Sieve script binary and execution
    is blocked when the sum exceeds the limit within that time. The block
    is lifted when the script is updated after the resource usage times out.
    (bsc#1187420) Attacker can DoS the mail delivery system
    (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * managesieve: Commands pipelined together with and just after the
    authenticate command cause these commands to be executed twice.
  * duplicate: The test was handled badly in a multiscript (sieve_before,
    sieve_after) scenario in which an earlier script in the sequence with
    a duplicate test succeeded, while a later script caused a runtime
    failure. In that case, the message is recorded for duplicate tracking,
    while the message may not actually have been delivered in the end.
  * editheader: Sieve interpreter entered infinite loop at startup when
    the "editheader" configuration listed an invalid header name. This
    problem can only be triggered by the administrator.
  * relational: The Sieve relational extension can cause a segfault at
    compile time. This is triggered by invalid script syntax. The segfault
    happens when this match type is the last argument of the test command.
    This situation is not possible in a valid script; positional arguments
    are normally present after that, which would prevent the segfault.
  * sieve: For some Sieve commands the provided mailbox name is not
    properly checked for UTF-8 validity, which can cause assert crashes at
    runtime when an invalid mailbox name is encountered. This can be
    caused by the user by writing a bad Sieve script involving the
    affected commands ("mailboxexists", "specialuse_exists").
    This can be triggered by the remote sender only when the user has
    written a Sieve script that passes message content to one of the
    affected commands.
  * sieve: Large sequences of 8-bit octets passed to certain Sieve
    commands that create or modify message headers that allow UTF-8 text
    (vacation, notify and addheader) can cause the delivery or IMAP
    process (when IMAPSieve is used) to enter a memory-consuming
    semi-infinite loop that ends when the process exceeds its memory
    limits. Logged in users can cause these hangs only for their own
    processes.
- Remove upstream applied pathces:
  0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
  0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
  0002-imap-Add-unit-test-for-imap-client-hibernate.patch
  0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="59e3446f3b18d19176315203346c11ca0de2207e66a4a003c465e4ce4f2d9d99" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="524f7cfdeb273132d192de65b61d9df3688e4d7028d4a662b4e4ed1e7a7e70f2" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="25fd270e06a4a4ca74f4ddd666b5d893f4af9547b0357cab813325174b864c01" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="0362a4c8752bd478b58a94b18b624a3b23e60cfad6f20e89ebfc5265c79769f3" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.15" rel="lp152.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1624363200">- Update to version 2.3.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access.
    Local attacker can login as any user and access their emails
  - CVE-2021-33515:  On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client.
    Attacker can potentially steal user credentials and mails
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * Dovecot now depends on libsystemd for systemd integration.
  * Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
  * config: Some settings are now marked as "hidden". It's discouraged to
    change these settings. They will no longer be visible in doveconf
    output, except if they have been changed or if doveconf -s parameter
    is used. See https://doc.dovecot.org/settings/advanced/ for details.
  * imap-compress: Compression level is now algorithm specific.
    See https://doc.dovecot.org/settings/plugin/compress-plugin/
  * indexer-worker: Convert "Indexed" info logs to an event named
    "indexer_worker_indexing_finished". See
    https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
  + Add TSLv1.3 support to min_protocols.
  + Allow configuring ssl_cipher_suites. (for TLSv1.3+)
  + acl: Add acl_ignore_namespace setting which allows to entirely ignore
    ACLs for the listed namespaces.
  + imap: Support official RFC8970 preview/snippet syntax. Old methods of
    retrieving preview information via IMAP commands ("SNIPPET and PREVIEW
    with explicit algorithm selection") have been deprecated.
  + imapc: Support INDEXPVT for imapc storage to enable private
    message flags for cluster wide shared mailboxes.
  + lib-storage: Add new events: mail_opened, mail_expunge_requested,
    mail_expunged, mail_cache_lookup_finished. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail
  + zlib, imap-compression, fs-compress: Support compression levels that
    the algorithm supports. Before, we would allow hardcoded value between
    1 to 9 and would default to 6. Now we allow using per-algorithm value
    range and default to whatever default the algorithm specifies.
  - *-login: Commands pipelined together with and just after the authenticate
    command cause these commands to be executed twice. This applies to all
    protocols that involve user login, which currently comprises of imap,
    pop3, submisision and managesieve.
  - *-login: Processes are supposed to disconnect the oldest non-logged in
    connection when process_limit was reached. This didn't actually happen
    with the default "high-security mode" (with service_count=1) where each
    connection is handled by a separate process.
  - *-login: When login process reaches client/process limits, oldest
    client connections are disconnected. If one of these was still doing
    anvil lookup, this caused a crash. This could happen only if the login
    process limits were very low or if the server was overloaded.
  - Fixed building with link time optimizations (-flto).
  - auth: Userdb iteration with passwd driver does not always return all
    users with some nss drivers.
  - dsync: Shared INBOX not synced when "mail_shared_explicit_inbox" was
    disabled. If a user has a shared mailbox which is another user's INBOX,
    dsync didn't include the mailbox in syncing unless explicit naming is
    enabled with "mail_shared_explicit_inbox" set to "yes".
  - dsync: Shared namespaces were not synced with "-n" flag.
  - dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
    If a user has a shared mailbox that is another user's INBOX, dsync
    failed to export the mailbox if mail attributes are disabled.
  - fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
    requests to assert-crash: Panic: file http-client-request.c: line 1232
    (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
  - fts-tika: 5xx errors returned by Tika server as indexing failures.
    However, Tika can return 5xx for some attachments every time.
    So the 5xx error should be retried once, but treated as success if it
    happens on the retry as well. v2.3 regression.
  - fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
    resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - imap: SETMETADATA could not be used to unset metadata values.
    Instead NIL was handled as a "NIL" string. v2.3.14 regression.
  - imap: IMAP BINARY FETCH crashes at least on empty base64 body:
    Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
    assertion failed: (block_count == 0 || block_idx+1 == block_count)
  - imap: If IMAP client using the NOTIFY command was disconnected while
    sending FETCH notifications to the client, imap could crash with
    Panic: Trying to close mailbox INBOX with open transactions.
  - imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
    when IMAP commands are &gt;8 kB long.
  - imapc: If remote server sent BYE but didn't immediately disconnect, it
    could cause infinite busy-loop.
  - lib-index: Corrupted cache record size in dovecot.index.cache file
    could have caused a crash (segfault) when accessing it.
  - lib-oauth2: JWT token time validation now works correctly with
    32-bit systems.
  - lib-ssl-iostream: Checking hostnames against an SSL certificate was
    case-sensitive.
  - lib-storage: Corrupted mime.parts in dovecot.index.cache may have
    resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
    assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
  - lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
    preserve the "hdr-pop3-uidl" header. Because of this, the next pop3
    session could have accessed all of the emails' metadata to read their
    POP3 UIDL (opening dbox files).
  - listescape: When using the listescape plugin and a shared namespace
    the plugin didn't work properly anymore resulting in errors like:
    "Invalid mailbox name: Name must not have '/' character."
  - lmtp: Connection crashes if connection gets disconnected due to
    multiple bad commands and the last bad command is BDAT.
  - lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
    forwarded by LMTP proxy without checking that the backend has support.
    This caused a command parameter error from the backend if it was
    running an older Dovecot release. This could only occur in more complex
    setups where the message was proxied twice; when the proxy generated
    the XRCPTFORWARD parameter itself the problem did not occur, so this
    only happened when it was forwarded.
  - lmtp: The LMTP proxy crashes with a panic when the remote server
    replies with an error while the mail is still being forwarded through
    a DATA/BDAT command.
  - lmtp: Username may have been missing from lmtp log line prefixes when
    it was performing autoexpunging.
  - master: Dovecot would incorrectly fail with haproxy 2.0.14 service
    checks.
  - master: Systemd service: Dovecot announces readiness for accepting
    connections earlier than it should. The following environment variables
    are now imported automatically and can be omitted from
    import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
  - master: service { process_min_avail } was launching processes too
    slowly when master was forking a lot of processes.
  - util: Make the health-check.sh example script POSIX shell compatible.
  * Added new aliases for some variables. Usage of the old ones is possible,
    but discouraged. (These were partially added already to v2.3.13.)
    See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
    for more information.
  * Optimize imap/pop3/submission/managesieve proxies to use less CPU at
    the cost of extra memory usage.
  * Remove autocreate, expire, snarf and mail-filter plugins.
  * Remove cydir storage driver.
  * Remove XZ/LZMA write support. Read support will be removed in future release.
  * doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
    environment variable is not set. Timestamp format is taken from
    log_timestamp setting.
  * If BROKENCHAR or listescape plugin is used, the escaped folder names
    may be slightly different from before in some situations. This is
    unlikely to cause issues, although caching clients may redownload the
    folders.
  * imapc: It now enables BROKENCHAR=~ by default to escape remote folder
    names if necessary. This also means that if there are any '~'
    characters in the remote folder names, they will be visible as "~7e".
  * imapc: When using local index files folder names were escaped on
    filesystem a bit differently. This affects only if there are folder
    names that actually require escaping, which isn't so common. The old
    style folders will be automatically deleted from filesystem.
  * stats: Update exported metrics to be compliant with OpenMetrics standard.
  + doveadm: Add an optional '-p' parameter to metadata list command. If
    enabled, "/private", and "/shared" metadata prefixes will be prepended
    to the keys in the list output.
  + doveconf: Support environment variables in config files. See
    https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
    for more details.
  + indexer-worker: Change indexer to disconnect from indexer-worker
    after each request. This allows service indexer-worker's service_count &amp;
    idle_kill settings to work. These can be used to restart indexer-worker
    processes once in a while to reduce their memory usage.
  - auth: "nodelay" with various authentication mechanisms such as apop
    and digest-md5 crashed AUTH process if authentication failed.
  - auth: Auth lua script generating an error triggered an assertion
    failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
    assertion failed: (lua_gettop(script-&gt;L) == 0).
  - configure: Fix libunwind detection to work on other than x86_64 systems.
  - doveadm-server: Process could crash if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or Panic:
    file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - dsync: Folder name escaping with BROKENCHAR didn't work completely
    correctly. This especially caused problems with dsync-migrations using
    imapc where some of the remote folder names may not have been accessible.
  - dsync: doveadm sync + imapc doesn't always sync all mails when doing
    an incremental sync (-1), which could lead to mail loss when it's used
    for migration. This happens only when GUIDs aren't used (i.e.
    imapc without imapc_features=guid-forced).
  - fts-tika: When tika server returns error, some mails cause Panic:
    file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
    resulted in crashes. This exposed that Dovecot was wrongly accepting
    atoms in "nstring" handling. Changed the IMAP parsing to be more
    strict about this now.
  - lib-index: If dovecot.index.cache has corrupted message size, fetching
    BODY/BODYSTRUCTURE may cause assert-crash:
    Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
    assertion failed: (mail-&gt;data.parts != NULL).
  - lib-index: Minor error handling and race condition fixes related to
    rotating dovecot.index.log. These didn't usually cause problems,
    unless the log files were rotated rapidly.
  - lib-lua: Lua scripts using coroutines or lua libraries using coroutines
    (e.g., cqueues) panicked.
  - Message PREVIEW handled whitespace wrong so first space would get
    eaten from between words.
  - FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for IMAP clients
    and also Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
    use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
    (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
  - event filters: NOT keyword did not have the correct associativity.
  - Ignore ECONNRESET when closing socket. This avoids logging useless
    errors on systems like FreeBSD.
  - event filters: event filter syntax error may lead to Panic:
    file event-filter.c: line 137 (event_filter_parse): assertion failed:
    (state.output == NULL)
  - lib: timeval_cmp_margin() was broken on 32-bit systems. This could
    potentially have caused HTTP timeouts to be handled incorrectly.
  - log: instance_name wasn't used as syslog ident by the log process.
  - master: After a service reached process_limit and client_limit, it
    could have taken up to 1 second to realize that more client connections
    became available. During this time client connections could have been
    unnecessarily rejected and a warning logged:
    Warning: service(...): process_limit (...) reached, client connections are being dropped
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
  - stats: Event filters comparing against empty strings crash the stats
    process.
  * CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
    allow logged in user to access other people's emails and filesystem
    information.
  * Metric filter and global event filter variable syntax changed to a
    SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
  * auth: Added new aliases for %{variables}. Usage of the old ones is
    possible, but discouraged.
  * auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
    mechanism and related password schemes.
  * auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
  * auth: Removed postfix postmap socket
  + auth: Added new fields for auth server events. These fields are now
    also available for all auth events. See
    https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
    for details.
  + imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
    and imap_client_unhibernate_retried events. See
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + lib-index: Added new mail_index_recreated event. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
  + lib-sql: Support TLS options for cassandra driver. This requires
    cpp-driver v2.15 (or later) to work reliably.
  + lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
    added to existing mails if mail_attachment_detection_option=add-flags
    and it can be done inexpensively.
  + login proxy: Added login_proxy_max_reconnects setting (default 3) to
    control how many reconnections are attempted.
  + login proxy: imap/pop3/submission/managesieve proxying now supports
    reconnection retrying on more than just connect() failure. Any error
    except a non-temporary authentication failure will result in reconnect
    attempts.
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - auth: SASL authentication PLAIN mechanism could be used to trigger
    read buffer overflow. However, this doesn't seem to be exploitable in
    any way.
  - auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
    disallows NUL bytes for it.
  - dict: Process used too much CPU when iterating keys, because each key
    used a separate write() syscall.
  - doveadm-server: Crash could occur if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or
    Panic: file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
    process via starttls assert-crashed if there were no ssl=yes listeners:
    Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
    assertion failed: (service-&gt;ssl_ctx_initialized).
  - fts-solr: HTTP requests may have assert-crashed:
    Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
    assertion failed: (req-&gt;payload_input != NULL)
  - imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
    configuration that causes errors. Sending the error responses to the
    client can cause the segmentation fault. This can for example happen
    when several namespaces use the same mail storage location.
  - imap: IMAP NOTIFY used on a shared namespace that doesn't actually
    exist (e.g. public namespace for a nonexistent user) can crash with a panic:
    Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
  - imap: IMAP session can crash with QRESYNC extension if many changes
    are done before asking for expunged mails since last sync.
  - imap: Process might hang indefinitely if client disconnects after
    sending some long-running commands pipelined, for example FETCH+LOGOUT.
  - lib-compress: Mitigate crashes when configuring a not compiled in
    compression. Errors with compression configuration now distinguish
    between not supported and unknown.
  - lib-compression: Using xz/lzma compression in v2.3.11 could have
    written truncated output in some situations. This would result in
    "Broken pipe" read errors when trying to read it back.
  - lib-compression: zstd compression could have crashed in some situations:
    Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
  - lib-dict: dict client could have crashed in some rare situations when
    iterating keys.
  - lib-http: Fix several assert-crashes in HTTP client.
  - lib-index: v2.3.11 regression: When mails were expunged at the same
    time as lots of new content was being saved to the cache (e.g. cache
    file was lost and is being re-filled) a deadlock could occur with
    dovecot.index.cache / dovecot.index.log.
  - lib-index: v2.3.11 regression: dovecot.index.cache file was being
    purged (rewritten) too often when it had a field that hadn't been
    accessed for over 1 month, but less than 2 months. Every cache file
    change caused a purging in this situation.
  - lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
    Regression caused by fixing CVE-2020-12100.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for both IMAP
    clients and Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
    10000th MIME part was message/rfc822 (or if parent was multipart/digest):
    Panic: file message-parser.c: line 167 (message_part_append):
    assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
  - lib-oauth2: Dovecot incorrectly required oauth2 server introspection
    reply to contain username with invalid token.
  - lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
    deprecated APIs disabled.
  - lib-storage: When mail's size is different from the cached one (in
    dovecot.index.cache or Maildir S=size in the filename), this is
    handled by logging "Cached message size smaller/larger than expected"
    error. However, in some situations this also ended up crashing with:
    Panic: file istream.c: line 315 (i_stream_read_memarea):
    assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
  - lib-storage: v2.3 regression: Copying/moving mails was taking much more
    memory than before. This was mainly visible when copying/moving
    thousands of mails in a single transaction.
  - lib-storage: v2.3.11 regression: Searching messages assert-crashed
    (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
    assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
  - lib: Dovecot v2.3 moved signal handlers around in ioloops,
    causing more CPU usage than in v2.2.
  - lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
    in error if it happened to be at read boundary. Any NUL characters and
    '\u0000' will now result in parsing error instead of silently
    truncating the data.
  - lmtp, submission: Server may hang if SSL client connection disconnects
    during the delivery. If this happened repeated, it could have ended
    up reaching process_limit and preventing any further lmtp/submission
    deliveries.
  - lmtp: Proxy does not always properly log TLS connection problems as
    errors; in some cases, only a debug message is logged if enabled.
  - lmtp: The LMTP service can hang when commands are pipelined. This can
    particularly occur when one command in the middle of the pipeline fails.
    One example of this occurs for proxied LMTP transactions in which the
    final DATA or BDAT command is pipelined after a failing RCPT command.
  - login-proxy: The login_source_ips setting has no effect, and therefore
    the proxy source IPs are not cycled through as they should be.
  - master: Process was using 100% CPU in some situations when a broken
    service was being throttled.
  - pop3-login: POP3 login would fail with "Input buffer full" if the
    initial response for SASL was too long.
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
- Update pigeonhole to version 0.5.15
  * CVE-2020-28200: Sieve interpreter is not protected against abusive
    scripts that claim excessive resource usage. Fixed by limiting the
    user CPU time per single script execution and cumulatively over
    several script runs within a configurable timeout period. Sufficiently
    large CPU time usage is summed in the Sieve script binary and execution
    is blocked when the sum exceeds the limit within that time. The block
    is lifted when the script is updated after the resource usage times out.
    (bsc#1187420) Attacker can DoS the mail delivery system
    (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * managesieve: Commands pipelined together with and just after the
    authenticate command cause these commands to be executed twice.
  * duplicate: The test was handled badly in a multiscript (sieve_before,
    sieve_after) scenario in which an earlier script in the sequence with
    a duplicate test succeeded, while a later script caused a runtime
    failure. In that case, the message is recorded for duplicate tracking,
    while the message may not actually have been delivered in the end.
  * editheader: Sieve interpreter entered infinite loop at startup when
    the "editheader" configuration listed an invalid header name. This
    problem can only be triggered by the administrator.
  * relational: The Sieve relational extension can cause a segfault at
    compile time. This is triggered by invalid script syntax. The segfault
    happens when this match type is the last argument of the test command.
    This situation is not possible in a valid script; positional arguments
    are normally present after that, which would prevent the segfault.
  * sieve: For some Sieve commands the provided mailbox name is not
    properly checked for UTF-8 validity, which can cause assert crashes at
    runtime when an invalid mailbox name is encountered. This can be
    caused by the user by writing a bad Sieve script involving the
    affected commands ("mailboxexists", "specialuse_exists").
    This can be triggered by the remote sender only when the user has
    written a Sieve script that passes message content to one of the
    affected commands.
  * sieve: Large sequences of 8-bit octets passed to certain Sieve
    commands that create or modify message headers that allow UTF-8 text
    (vacation, notify and addheader) can cause the delivery or IMAP
    process (when IMAPSieve is used) to enter a memory-consuming
    semi-infinite loop that ends when the process exceeds its memory
    limits. Logged in users can cause these hangs only for their own
    processes.
- Remove upstream applied pathces:
  0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
  0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
  0002-imap-Add-unit-test-for-imap-client-hibernate.patch
  0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="d431f0eda44c892830845b452652fbdd1c9a189b13f0d261e30840ec78c53138" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="b0e823936b1f480bef7ee46af42757d45f2e8412ccc85cd4adb604eda6634195" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="5eb909eb114d8f72cee7eeaa3cfc4ee6ae34101590b59d146b1ea1d5696b8632" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="de5bf7d91d4cc67eef294ef044043d84990cacf7bd4cc47e4abf25febf41d45a" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.15" rel="lp152.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1624363200">- Update to version 2.3.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access.
    Local attacker can login as any user and access their emails
  - CVE-2021-33515:  On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client.
    Attacker can potentially steal user credentials and mails
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * Dovecot now depends on libsystemd for systemd integration.
  * Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
  * config: Some settings are now marked as "hidden". It's discouraged to
    change these settings. They will no longer be visible in doveconf
    output, except if they have been changed or if doveconf -s parameter
    is used. See https://doc.dovecot.org/settings/advanced/ for details.
  * imap-compress: Compression level is now algorithm specific.
    See https://doc.dovecot.org/settings/plugin/compress-plugin/
  * indexer-worker: Convert "Indexed" info logs to an event named
    "indexer_worker_indexing_finished". See
    https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
  + Add TSLv1.3 support to min_protocols.
  + Allow configuring ssl_cipher_suites. (for TLSv1.3+)
  + acl: Add acl_ignore_namespace setting which allows to entirely ignore
    ACLs for the listed namespaces.
  + imap: Support official RFC8970 preview/snippet syntax. Old methods of
    retrieving preview information via IMAP commands ("SNIPPET and PREVIEW
    with explicit algorithm selection") have been deprecated.
  + imapc: Support INDEXPVT for imapc storage to enable private
    message flags for cluster wide shared mailboxes.
  + lib-storage: Add new events: mail_opened, mail_expunge_requested,
    mail_expunged, mail_cache_lookup_finished. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail
  + zlib, imap-compression, fs-compress: Support compression levels that
    the algorithm supports. Before, we would allow hardcoded value between
    1 to 9 and would default to 6. Now we allow using per-algorithm value
    range and default to whatever default the algorithm specifies.
  - *-login: Commands pipelined together with and just after the authenticate
    command cause these commands to be executed twice. This applies to all
    protocols that involve user login, which currently comprises of imap,
    pop3, submisision and managesieve.
  - *-login: Processes are supposed to disconnect the oldest non-logged in
    connection when process_limit was reached. This didn't actually happen
    with the default "high-security mode" (with service_count=1) where each
    connection is handled by a separate process.
  - *-login: When login process reaches client/process limits, oldest
    client connections are disconnected. If one of these was still doing
    anvil lookup, this caused a crash. This could happen only if the login
    process limits were very low or if the server was overloaded.
  - Fixed building with link time optimizations (-flto).
  - auth: Userdb iteration with passwd driver does not always return all
    users with some nss drivers.
  - dsync: Shared INBOX not synced when "mail_shared_explicit_inbox" was
    disabled. If a user has a shared mailbox which is another user's INBOX,
    dsync didn't include the mailbox in syncing unless explicit naming is
    enabled with "mail_shared_explicit_inbox" set to "yes".
  - dsync: Shared namespaces were not synced with "-n" flag.
  - dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
    If a user has a shared mailbox that is another user's INBOX, dsync
    failed to export the mailbox if mail attributes are disabled.
  - fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
    requests to assert-crash: Panic: file http-client-request.c: line 1232
    (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
  - fts-tika: 5xx errors returned by Tika server as indexing failures.
    However, Tika can return 5xx for some attachments every time.
    So the 5xx error should be retried once, but treated as success if it
    happens on the retry as well. v2.3 regression.
  - fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
    resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - imap: SETMETADATA could not be used to unset metadata values.
    Instead NIL was handled as a "NIL" string. v2.3.14 regression.
  - imap: IMAP BINARY FETCH crashes at least on empty base64 body:
    Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
    assertion failed: (block_count == 0 || block_idx+1 == block_count)
  - imap: If IMAP client using the NOTIFY command was disconnected while
    sending FETCH notifications to the client, imap could crash with
    Panic: Trying to close mailbox INBOX with open transactions.
  - imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
    when IMAP commands are &gt;8 kB long.
  - imapc: If remote server sent BYE but didn't immediately disconnect, it
    could cause infinite busy-loop.
  - lib-index: Corrupted cache record size in dovecot.index.cache file
    could have caused a crash (segfault) when accessing it.
  - lib-oauth2: JWT token time validation now works correctly with
    32-bit systems.
  - lib-ssl-iostream: Checking hostnames against an SSL certificate was
    case-sensitive.
  - lib-storage: Corrupted mime.parts in dovecot.index.cache may have
    resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
    assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
  - lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
    preserve the "hdr-pop3-uidl" header. Because of this, the next pop3
    session could have accessed all of the emails' metadata to read their
    POP3 UIDL (opening dbox files).
  - listescape: When using the listescape plugin and a shared namespace
    the plugin didn't work properly anymore resulting in errors like:
    "Invalid mailbox name: Name must not have '/' character."
  - lmtp: Connection crashes if connection gets disconnected due to
    multiple bad commands and the last bad command is BDAT.
  - lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
    forwarded by LMTP proxy without checking that the backend has support.
    This caused a command parameter error from the backend if it was
    running an older Dovecot release. This could only occur in more complex
    setups where the message was proxied twice; when the proxy generated
    the XRCPTFORWARD parameter itself the problem did not occur, so this
    only happened when it was forwarded.
  - lmtp: The LMTP proxy crashes with a panic when the remote server
    replies with an error while the mail is still being forwarded through
    a DATA/BDAT command.
  - lmtp: Username may have been missing from lmtp log line prefixes when
    it was performing autoexpunging.
  - master: Dovecot would incorrectly fail with haproxy 2.0.14 service
    checks.
  - master: Systemd service: Dovecot announces readiness for accepting
    connections earlier than it should. The following environment variables
    are now imported automatically and can be omitted from
    import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
  - master: service { process_min_avail } was launching processes too
    slowly when master was forking a lot of processes.
  - util: Make the health-check.sh example script POSIX shell compatible.
  * Added new aliases for some variables. Usage of the old ones is possible,
    but discouraged. (These were partially added already to v2.3.13.)
    See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
    for more information.
  * Optimize imap/pop3/submission/managesieve proxies to use less CPU at
    the cost of extra memory usage.
  * Remove autocreate, expire, snarf and mail-filter plugins.
  * Remove cydir storage driver.
  * Remove XZ/LZMA write support. Read support will be removed in future release.
  * doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
    environment variable is not set. Timestamp format is taken from
    log_timestamp setting.
  * If BROKENCHAR or listescape plugin is used, the escaped folder names
    may be slightly different from before in some situations. This is
    unlikely to cause issues, although caching clients may redownload the
    folders.
  * imapc: It now enables BROKENCHAR=~ by default to escape remote folder
    names if necessary. This also means that if there are any '~'
    characters in the remote folder names, they will be visible as "~7e".
  * imapc: When using local index files folder names were escaped on
    filesystem a bit differently. This affects only if there are folder
    names that actually require escaping, which isn't so common. The old
    style folders will be automatically deleted from filesystem.
  * stats: Update exported metrics to be compliant with OpenMetrics standard.
  + doveadm: Add an optional '-p' parameter to metadata list command. If
    enabled, "/private", and "/shared" metadata prefixes will be prepended
    to the keys in the list output.
  + doveconf: Support environment variables in config files. See
    https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
    for more details.
  + indexer-worker: Change indexer to disconnect from indexer-worker
    after each request. This allows service indexer-worker's service_count &amp;
    idle_kill settings to work. These can be used to restart indexer-worker
    processes once in a while to reduce their memory usage.
  - auth: "nodelay" with various authentication mechanisms such as apop
    and digest-md5 crashed AUTH process if authentication failed.
  - auth: Auth lua script generating an error triggered an assertion
    failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
    assertion failed: (lua_gettop(script-&gt;L) == 0).
  - configure: Fix libunwind detection to work on other than x86_64 systems.
  - doveadm-server: Process could crash if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or Panic:
    file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - dsync: Folder name escaping with BROKENCHAR didn't work completely
    correctly. This especially caused problems with dsync-migrations using
    imapc where some of the remote folder names may not have been accessible.
  - dsync: doveadm sync + imapc doesn't always sync all mails when doing
    an incremental sync (-1), which could lead to mail loss when it's used
    for migration. This happens only when GUIDs aren't used (i.e.
    imapc without imapc_features=guid-forced).
  - fts-tika: When tika server returns error, some mails cause Panic:
    file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
    resulted in crashes. This exposed that Dovecot was wrongly accepting
    atoms in "nstring" handling. Changed the IMAP parsing to be more
    strict about this now.
  - lib-index: If dovecot.index.cache has corrupted message size, fetching
    BODY/BODYSTRUCTURE may cause assert-crash:
    Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
    assertion failed: (mail-&gt;data.parts != NULL).
  - lib-index: Minor error handling and race condition fixes related to
    rotating dovecot.index.log. These didn't usually cause problems,
    unless the log files were rotated rapidly.
  - lib-lua: Lua scripts using coroutines or lua libraries using coroutines
    (e.g., cqueues) panicked.
  - Message PREVIEW handled whitespace wrong so first space would get
    eaten from between words.
  - FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for IMAP clients
    and also Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
    use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
    (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
  - event filters: NOT keyword did not have the correct associativity.
  - Ignore ECONNRESET when closing socket. This avoids logging useless
    errors on systems like FreeBSD.
  - event filters: event filter syntax error may lead to Panic:
    file event-filter.c: line 137 (event_filter_parse): assertion failed:
    (state.output == NULL)
  - lib: timeval_cmp_margin() was broken on 32-bit systems. This could
    potentially have caused HTTP timeouts to be handled incorrectly.
  - log: instance_name wasn't used as syslog ident by the log process.
  - master: After a service reached process_limit and client_limit, it
    could have taken up to 1 second to realize that more client connections
    became available. During this time client connections could have been
    unnecessarily rejected and a warning logged:
    Warning: service(...): process_limit (...) reached, client connections are being dropped
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
  - stats: Event filters comparing against empty strings crash the stats
    process.
  * CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
    allow logged in user to access other people's emails and filesystem
    information.
  * Metric filter and global event filter variable syntax changed to a
    SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
  * auth: Added new aliases for %{variables}. Usage of the old ones is
    possible, but discouraged.
  * auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
    mechanism and related password schemes.
  * auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
  * auth: Removed postfix postmap socket
  + auth: Added new fields for auth server events. These fields are now
    also available for all auth events. See
    https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
    for details.
  + imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
    and imap_client_unhibernate_retried events. See
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + lib-index: Added new mail_index_recreated event. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
  + lib-sql: Support TLS options for cassandra driver. This requires
    cpp-driver v2.15 (or later) to work reliably.
  + lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
    added to existing mails if mail_attachment_detection_option=add-flags
    and it can be done inexpensively.
  + login proxy: Added login_proxy_max_reconnects setting (default 3) to
    control how many reconnections are attempted.
  + login proxy: imap/pop3/submission/managesieve proxying now supports
    reconnection retrying on more than just connect() failure. Any error
    except a non-temporary authentication failure will result in reconnect
    attempts.
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - auth: SASL authentication PLAIN mechanism could be used to trigger
    read buffer overflow. However, this doesn't seem to be exploitable in
    any way.
  - auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
    disallows NUL bytes for it.
  - dict: Process used too much CPU when iterating keys, because each key
    used a separate write() syscall.
  - doveadm-server: Crash could occur if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or
    Panic: file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
    process via starttls assert-crashed if there were no ssl=yes listeners:
    Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
    assertion failed: (service-&gt;ssl_ctx_initialized).
  - fts-solr: HTTP requests may have assert-crashed:
    Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
    assertion failed: (req-&gt;payload_input != NULL)
  - imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
    configuration that causes errors. Sending the error responses to the
    client can cause the segmentation fault. This can for example happen
    when several namespaces use the same mail storage location.
  - imap: IMAP NOTIFY used on a shared namespace that doesn't actually
    exist (e.g. public namespace for a nonexistent user) can crash with a panic:
    Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
  - imap: IMAP session can crash with QRESYNC extension if many changes
    are done before asking for expunged mails since last sync.
  - imap: Process might hang indefinitely if client disconnects after
    sending some long-running commands pipelined, for example FETCH+LOGOUT.
  - lib-compress: Mitigate crashes when configuring a not compiled in
    compression. Errors with compression configuration now distinguish
    between not supported and unknown.
  - lib-compression: Using xz/lzma compression in v2.3.11 could have
    written truncated output in some situations. This would result in
    "Broken pipe" read errors when trying to read it back.
  - lib-compression: zstd compression could have crashed in some situations:
    Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
  - lib-dict: dict client could have crashed in some rare situations when
    iterating keys.
  - lib-http: Fix several assert-crashes in HTTP client.
  - lib-index: v2.3.11 regression: When mails were expunged at the same
    time as lots of new content was being saved to the cache (e.g. cache
    file was lost and is being re-filled) a deadlock could occur with
    dovecot.index.cache / dovecot.index.log.
  - lib-index: v2.3.11 regression: dovecot.index.cache file was being
    purged (rewritten) too often when it had a field that hadn't been
    accessed for over 1 month, but less than 2 months. Every cache file
    change caused a purging in this situation.
  - lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
    Regression caused by fixing CVE-2020-12100.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for both IMAP
    clients and Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
    10000th MIME part was message/rfc822 (or if parent was multipart/digest):
    Panic: file message-parser.c: line 167 (message_part_append):
    assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
  - lib-oauth2: Dovecot incorrectly required oauth2 server introspection
    reply to contain username with invalid token.
  - lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
    deprecated APIs disabled.
  - lib-storage: When mail's size is different from the cached one (in
    dovecot.index.cache or Maildir S=size in the filename), this is
    handled by logging "Cached message size smaller/larger than expected"
    error. However, in some situations this also ended up crashing with:
    Panic: file istream.c: line 315 (i_stream_read_memarea):
    assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
  - lib-storage: v2.3 regression: Copying/moving mails was taking much more
    memory than before. This was mainly visible when copying/moving
    thousands of mails in a single transaction.
  - lib-storage: v2.3.11 regression: Searching messages assert-crashed
    (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
    assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
  - lib: Dovecot v2.3 moved signal handlers around in ioloops,
    causing more CPU usage than in v2.2.
  - lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
    in error if it happened to be at read boundary. Any NUL characters and
    '\u0000' will now result in parsing error instead of silently
    truncating the data.
  - lmtp, submission: Server may hang if SSL client connection disconnects
    during the delivery. If this happened repeated, it could have ended
    up reaching process_limit and preventing any further lmtp/submission
    deliveries.
  - lmtp: Proxy does not always properly log TLS connection problems as
    errors; in some cases, only a debug message is logged if enabled.
  - lmtp: The LMTP service can hang when commands are pipelined. This can
    particularly occur when one command in the middle of the pipeline fails.
    One example of this occurs for proxied LMTP transactions in which the
    final DATA or BDAT command is pipelined after a failing RCPT command.
  - login-proxy: The login_source_ips setting has no effect, and therefore
    the proxy source IPs are not cycled through as they should be.
  - master: Process was using 100% CPU in some situations when a broken
    service was being throttled.
  - pop3-login: POP3 login would fail with "Input buffer full" if the
    initial response for SASL was too long.
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
- Update pigeonhole to version 0.5.15
  * CVE-2020-28200: Sieve interpreter is not protected against abusive
    scripts that claim excessive resource usage. Fixed by limiting the
    user CPU time per single script execution and cumulatively over
    several script runs within a configurable timeout period. Sufficiently
    large CPU time usage is summed in the Sieve script binary and execution
    is blocked when the sum exceeds the limit within that time. The block
    is lifted when the script is updated after the resource usage times out.
    (bsc#1187420) Attacker can DoS the mail delivery system
    (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * managesieve: Commands pipelined together with and just after the
    authenticate command cause these commands to be executed twice.
  * duplicate: The test was handled badly in a multiscript (sieve_before,
    sieve_after) scenario in which an earlier script in the sequence with
    a duplicate test succeeded, while a later script caused a runtime
    failure. In that case, the message is recorded for duplicate tracking,
    while the message may not actually have been delivered in the end.
  * editheader: Sieve interpreter entered infinite loop at startup when
    the "editheader" configuration listed an invalid header name. This
    problem can only be triggered by the administrator.
  * relational: The Sieve relational extension can cause a segfault at
    compile time. This is triggered by invalid script syntax. The segfault
    happens when this match type is the last argument of the test command.
    This situation is not possible in a valid script; positional arguments
    are normally present after that, which would prevent the segfault.
  * sieve: For some Sieve commands the provided mailbox name is not
    properly checked for UTF-8 validity, which can cause assert crashes at
    runtime when an invalid mailbox name is encountered. This can be
    caused by the user by writing a bad Sieve script involving the
    affected commands ("mailboxexists", "specialuse_exists").
    This can be triggered by the remote sender only when the user has
    written a Sieve script that passes message content to one of the
    affected commands.
  * sieve: Large sequences of 8-bit octets passed to certain Sieve
    commands that create or modify message headers that allow UTF-8 text
    (vacation, notify and addheader) can cause the delivery or IMAP
    process (when IMAPSieve is used) to enter a memory-consuming
    semi-infinite loop that ends when the process exceeds its memory
    limits. Logged in users can cause these hangs only for their own
    processes.
- Remove upstream applied pathces:
  0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
  0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
  0002-imap-Add-unit-test-for-imap-client-hibernate.patch
  0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="cec4aca3316baad86b44acfacd2c344119c88c91aee45398001cae5d614bdca5" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="e948bef639ec855eb24192e78ac2ea09a1dfff6d0cc73ba8ef24dab350eab5c8" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="d7cf80856e0f5e8a7e06886b8897e4713baa117e7a3983d4a22cfae2ef266a44" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="9553080599f2998594105aec18e3fe037a08ffee46c2dcc48b48db2570a609fe" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.15" rel="lp152.2.12.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1624363200">- Update to version 2.3.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access.
    Local attacker can login as any user and access their emails
  - CVE-2021-33515:  On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client.
    Attacker can potentially steal user credentials and mails
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * Dovecot now depends on libsystemd for systemd integration.
  * Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
  * config: Some settings are now marked as "hidden". It's discouraged to
    change these settings. They will no longer be visible in doveconf
    output, except if they have been changed or if doveconf -s parameter
    is used. See https://doc.dovecot.org/settings/advanced/ for details.
  * imap-compress: Compression level is now algorithm specific.
    See https://doc.dovecot.org/settings/plugin/compress-plugin/
  * indexer-worker: Convert "Indexed" info logs to an event named
    "indexer_worker_indexing_finished". See
    https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
  + Add TSLv1.3 support to min_protocols.
  + Allow configuring ssl_cipher_suites. (for TLSv1.3+)
  + acl: Add acl_ignore_namespace setting which allows to entirely ignore
    ACLs for the listed namespaces.
  + imap: Support official RFC8970 preview/snippet syntax. Old methods of
    retrieving preview information via IMAP commands ("SNIPPET and PREVIEW
    with explicit algorithm selection") have been deprecated.
  + imapc: Support INDEXPVT for imapc storage to enable private
    message flags for cluster wide shared mailboxes.
  + lib-storage: Add new events: mail_opened, mail_expunge_requested,
    mail_expunged, mail_cache_lookup_finished. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail
  + zlib, imap-compression, fs-compress: Support compression levels that
    the algorithm supports. Before, we would allow hardcoded value between
    1 to 9 and would default to 6. Now we allow using per-algorithm value
    range and default to whatever default the algorithm specifies.
  - *-login: Commands pipelined together with and just after the authenticate
    command cause these commands to be executed twice. This applies to all
    protocols that involve user login, which currently comprises of imap,
    pop3, submisision and managesieve.
  - *-login: Processes are supposed to disconnect the oldest non-logged in
    connection when process_limit was reached. This didn't actually happen
    with the default "high-security mode" (with service_count=1) where each
    connection is handled by a separate process.
  - *-login: When login process reaches client/process limits, oldest
    client connections are disconnected. If one of these was still doing
    anvil lookup, this caused a crash. This could happen only if the login
    process limits were very low or if the server was overloaded.
  - Fixed building with link time optimizations (-flto).
  - auth: Userdb iteration with passwd driver does not always return all
    users with some nss drivers.
  - dsync: Shared INBOX not synced when "mail_shared_explicit_inbox" was
    disabled. If a user has a shared mailbox which is another user's INBOX,
    dsync didn't include the mailbox in syncing unless explicit naming is
    enabled with "mail_shared_explicit_inbox" set to "yes".
  - dsync: Shared namespaces were not synced with "-n" flag.
  - dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
    If a user has a shared mailbox that is another user's INBOX, dsync
    failed to export the mailbox if mail attributes are disabled.
  - fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
    requests to assert-crash: Panic: file http-client-request.c: line 1232
    (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
  - fts-tika: 5xx errors returned by Tika server as indexing failures.
    However, Tika can return 5xx for some attachments every time.
    So the 5xx error should be retried once, but treated as success if it
    happens on the retry as well. v2.3 regression.
  - fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
    resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - imap: SETMETADATA could not be used to unset metadata values.
    Instead NIL was handled as a "NIL" string. v2.3.14 regression.
  - imap: IMAP BINARY FETCH crashes at least on empty base64 body:
    Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
    assertion failed: (block_count == 0 || block_idx+1 == block_count)
  - imap: If IMAP client using the NOTIFY command was disconnected while
    sending FETCH notifications to the client, imap could crash with
    Panic: Trying to close mailbox INBOX with open transactions.
  - imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
    when IMAP commands are &gt;8 kB long.
  - imapc: If remote server sent BYE but didn't immediately disconnect, it
    could cause infinite busy-loop.
  - lib-index: Corrupted cache record size in dovecot.index.cache file
    could have caused a crash (segfault) when accessing it.
  - lib-oauth2: JWT token time validation now works correctly with
    32-bit systems.
  - lib-ssl-iostream: Checking hostnames against an SSL certificate was
    case-sensitive.
  - lib-storage: Corrupted mime.parts in dovecot.index.cache may have
    resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
    assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
  - lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
    preserve the "hdr-pop3-uidl" header. Because of this, the next pop3
    session could have accessed all of the emails' metadata to read their
    POP3 UIDL (opening dbox files).
  - listescape: When using the listescape plugin and a shared namespace
    the plugin didn't work properly anymore resulting in errors like:
    "Invalid mailbox name: Name must not have '/' character."
  - lmtp: Connection crashes if connection gets disconnected due to
    multiple bad commands and the last bad command is BDAT.
  - lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
    forwarded by LMTP proxy without checking that the backend has support.
    This caused a command parameter error from the backend if it was
    running an older Dovecot release. This could only occur in more complex
    setups where the message was proxied twice; when the proxy generated
    the XRCPTFORWARD parameter itself the problem did not occur, so this
    only happened when it was forwarded.
  - lmtp: The LMTP proxy crashes with a panic when the remote server
    replies with an error while the mail is still being forwarded through
    a DATA/BDAT command.
  - lmtp: Username may have been missing from lmtp log line prefixes when
    it was performing autoexpunging.
  - master: Dovecot would incorrectly fail with haproxy 2.0.14 service
    checks.
  - master: Systemd service: Dovecot announces readiness for accepting
    connections earlier than it should. The following environment variables
    are now imported automatically and can be omitted from
    import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
  - master: service { process_min_avail } was launching processes too
    slowly when master was forking a lot of processes.
  - util: Make the health-check.sh example script POSIX shell compatible.
  * Added new aliases for some variables. Usage of the old ones is possible,
    but discouraged. (These were partially added already to v2.3.13.)
    See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
    for more information.
  * Optimize imap/pop3/submission/managesieve proxies to use less CPU at
    the cost of extra memory usage.
  * Remove autocreate, expire, snarf and mail-filter plugins.
  * Remove cydir storage driver.
  * Remove XZ/LZMA write support. Read support will be removed in future release.
  * doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
    environment variable is not set. Timestamp format is taken from
    log_timestamp setting.
  * If BROKENCHAR or listescape plugin is used, the escaped folder names
    may be slightly different from before in some situations. This is
    unlikely to cause issues, although caching clients may redownload the
    folders.
  * imapc: It now enables BROKENCHAR=~ by default to escape remote folder
    names if necessary. This also means that if there are any '~'
    characters in the remote folder names, they will be visible as "~7e".
  * imapc: When using local index files folder names were escaped on
    filesystem a bit differently. This affects only if there are folder
    names that actually require escaping, which isn't so common. The old
    style folders will be automatically deleted from filesystem.
  * stats: Update exported metrics to be compliant with OpenMetrics standard.
  + doveadm: Add an optional '-p' parameter to metadata list command. If
    enabled, "/private", and "/shared" metadata prefixes will be prepended
    to the keys in the list output.
  + doveconf: Support environment variables in config files. See
    https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
    for more details.
  + indexer-worker: Change indexer to disconnect from indexer-worker
    after each request. This allows service indexer-worker's service_count &amp;
    idle_kill settings to work. These can be used to restart indexer-worker
    processes once in a while to reduce their memory usage.
  - auth: "nodelay" with various authentication mechanisms such as apop
    and digest-md5 crashed AUTH process if authentication failed.
  - auth: Auth lua script generating an error triggered an assertion
    failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
    assertion failed: (lua_gettop(script-&gt;L) == 0).
  - configure: Fix libunwind detection to work on other than x86_64 systems.
  - doveadm-server: Process could crash if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or Panic:
    file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - dsync: Folder name escaping with BROKENCHAR didn't work completely
    correctly. This especially caused problems with dsync-migrations using
    imapc where some of the remote folder names may not have been accessible.
  - dsync: doveadm sync + imapc doesn't always sync all mails when doing
    an incremental sync (-1), which could lead to mail loss when it's used
    for migration. This happens only when GUIDs aren't used (i.e.
    imapc without imapc_features=guid-forced).
  - fts-tika: When tika server returns error, some mails cause Panic:
    file message-parser.c: line 802 (message_parser_deinit_from_parts):
    assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
  - lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
    resulted in crashes. This exposed that Dovecot was wrongly accepting
    atoms in "nstring" handling. Changed the IMAP parsing to be more
    strict about this now.
  - lib-index: If dovecot.index.cache has corrupted message size, fetching
    BODY/BODYSTRUCTURE may cause assert-crash:
    Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
    assertion failed: (mail-&gt;data.parts != NULL).
  - lib-index: Minor error handling and race condition fixes related to
    rotating dovecot.index.log. These didn't usually cause problems,
    unless the log files were rotated rapidly.
  - lib-lua: Lua scripts using coroutines or lua libraries using coroutines
    (e.g., cqueues) panicked.
  - Message PREVIEW handled whitespace wrong so first space would get
    eaten from between words.
  - FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for IMAP clients
    and also Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
    use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
    (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
  - event filters: NOT keyword did not have the correct associativity.
  - Ignore ECONNRESET when closing socket. This avoids logging useless
    errors on systems like FreeBSD.
  - event filters: event filter syntax error may lead to Panic:
    file event-filter.c: line 137 (event_filter_parse): assertion failed:
    (state.output == NULL)
  - lib: timeval_cmp_margin() was broken on 32-bit systems. This could
    potentially have caused HTTP timeouts to be handled incorrectly.
  - log: instance_name wasn't used as syslog ident by the log process.
  - master: After a service reached process_limit and client_limit, it
    could have taken up to 1 second to realize that more client connections
    became available. During this time client connections could have been
    unnecessarily rejected and a warning logged:
    Warning: service(...): process_limit (...) reached, client connections are being dropped
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
  - stats: Event filters comparing against empty strings crash the stats
    process.
  * CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
    allow logged in user to access other people's emails and filesystem
    information.
  * Metric filter and global event filter variable syntax changed to a
    SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
  * auth: Added new aliases for %{variables}. Usage of the old ones is
    possible, but discouraged.
  * auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
    mechanism and related password schemes.
  * auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
  * auth: Removed postfix postmap socket
  + auth: Added new fields for auth server events. These fields are now
    also available for all auth events. See
    https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
    for details.
  + imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
    and imap_client_unhibernate_retried events. See
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + lib-index: Added new mail_index_recreated event. See
    https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
  + lib-sql: Support TLS options for cassandra driver. This requires
    cpp-driver v2.15 (or later) to work reliably.
  + lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
    added to existing mails if mail_attachment_detection_option=add-flags
    and it can be done inexpensively.
  + login proxy: Added login_proxy_max_reconnects setting (default 3) to
    control how many reconnections are attempted.
  + login proxy: imap/pop3/submission/managesieve proxying now supports
    reconnection retrying on more than just connect() failure. Any error
    except a non-temporary authentication failure will result in reconnect
    attempts.
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - auth: SASL authentication PLAIN mechanism could be used to trigger
    read buffer overflow. However, this doesn't seem to be exploitable in
    any way.
  - auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
    disallows NUL bytes for it.
  - dict: Process used too much CPU when iterating keys, because each key
    used a separate write() syscall.
  - doveadm-server: Crash could occur if logging was done outside command
    handling. For example http-client could have done debug logging
    afterwards, resulting in either segfault or
    Panic: file http-client.c: line 642 (http_client_context_close):
    assertion failed: (cctx-&gt;clients_list == NULL).
  - doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
    process via starttls assert-crashed if there were no ssl=yes listeners:
    Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
    assertion failed: (service-&gt;ssl_ctx_initialized).
  - fts-solr: HTTP requests may have assert-crashed:
    Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
    assertion failed: (req-&gt;payload_input != NULL)
  - imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
    configuration that causes errors. Sending the error responses to the
    client can cause the segmentation fault. This can for example happen
    when several namespaces use the same mail storage location.
  - imap: IMAP NOTIFY used on a shared namespace that doesn't actually
    exist (e.g. public namespace for a nonexistent user) can crash with a panic:
    Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
  - imap: IMAP session can crash with QRESYNC extension if many changes
    are done before asking for expunged mails since last sync.
  - imap: Process might hang indefinitely if client disconnects after
    sending some long-running commands pipelined, for example FETCH+LOGOUT.
  - lib-compress: Mitigate crashes when configuring a not compiled in
    compression. Errors with compression configuration now distinguish
    between not supported and unknown.
  - lib-compression: Using xz/lzma compression in v2.3.11 could have
    written truncated output in some situations. This would result in
    "Broken pipe" read errors when trying to read it back.
  - lib-compression: zstd compression could have crashed in some situations:
    Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
  - lib-dict: dict client could have crashed in some rare situations when
    iterating keys.
  - lib-http: Fix several assert-crashes in HTTP client.
  - lib-index: v2.3.11 regression: When mails were expunged at the same
    time as lots of new content was being saved to the cache (e.g. cache
    file was lost and is being re-filled) a deadlock could occur with
    dovecot.index.cache / dovecot.index.log.
  - lib-index: v2.3.11 regression: dovecot.index.cache file was being
    purged (rewritten) too often when it had a field that hadn't been
    accessed for over 1 month, but less than 2 months. Every cache file
    change caused a purging in this situation.
  - lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
    Regression caused by fixing CVE-2020-12100.
  - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
    was written in a way that may have caused confusion for both IMAP
    clients and Dovecot itself when parsing it. The truncated part is now
    written out using application/octet-stream MIME type.
  - lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
    10000th MIME part was message/rfc822 (or if parent was multipart/digest):
    Panic: file message-parser.c: line 167 (message_part_append):
    assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
  - lib-oauth2: Dovecot incorrectly required oauth2 server introspection
    reply to contain username with invalid token.
  - lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
    deprecated APIs disabled.
  - lib-storage: When mail's size is different from the cached one (in
    dovecot.index.cache or Maildir S=size in the filename), this is
    handled by logging "Cached message size smaller/larger than expected"
    error. However, in some situations this also ended up crashing with:
    Panic: file istream.c: line 315 (i_stream_read_memarea):
    assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
  - lib-storage: v2.3 regression: Copying/moving mails was taking much more
    memory than before. This was mainly visible when copying/moving
    thousands of mails in a single transaction.
  - lib-storage: v2.3.11 regression: Searching messages assert-crashed
    (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
    assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
  - lib: Dovecot v2.3 moved signal handlers around in ioloops,
    causing more CPU usage than in v2.2.
  - lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
    in error if it happened to be at read boundary. Any NUL characters and
    '\u0000' will now result in parsing error instead of silently
    truncating the data.
  - lmtp, submission: Server may hang if SSL client connection disconnects
    during the delivery. If this happened repeated, it could have ended
    up reaching process_limit and preventing any further lmtp/submission
    deliveries.
  - lmtp: Proxy does not always properly log TLS connection problems as
    errors; in some cases, only a debug message is logged if enabled.
  - lmtp: The LMTP service can hang when commands are pipelined. This can
    particularly occur when one command in the middle of the pipeline fails.
    One example of this occurs for proxied LMTP transactions in which the
    final DATA or BDAT command is pipelined after a failing RCPT command.
  - login-proxy: The login_source_ips setting has no effect, and therefore
    the proxy source IPs are not cycled through as they should be.
  - master: Process was using 100% CPU in some situations when a broken
    service was being throttled.
  - pop3-login: POP3 login would fail with "Input buffer full" if the
    initial response for SASL was too long.
  - stats: Crash would occur when generating openmetrics data for metrics
    using aggregating functions.
- Update pigeonhole to version 0.5.15
  * CVE-2020-28200: Sieve interpreter is not protected against abusive
    scripts that claim excessive resource usage. Fixed by limiting the
    user CPU time per single script execution and cumulatively over
    several script runs within a configurable timeout period. Sufficiently
    large CPU time usage is summed in the Sieve script binary and execution
    is blocked when the sum exceeds the limit within that time. The block
    is lifted when the script is updated after the resource usage times out.
    (bsc#1187420) Attacker can DoS the mail delivery system
    (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
  * Disconnection log messages are now more standardized across services.
    They also always now start with "Disconnected" prefix.
  * managesieve: Commands pipelined together with and just after the
    authenticate command cause these commands to be executed twice.
  * duplicate: The test was handled badly in a multiscript (sieve_before,
    sieve_after) scenario in which an earlier script in the sequence with
    a duplicate test succeeded, while a later script caused a runtime
    failure. In that case, the message is recorded for duplicate tracking,
    while the message may not actually have been delivered in the end.
  * editheader: Sieve interpreter entered infinite loop at startup when
    the "editheader" configuration listed an invalid header name. This
    problem can only be triggered by the administrator.
  * relational: The Sieve relational extension can cause a segfault at
    compile time. This is triggered by invalid script syntax. The segfault
    happens when this match type is the last argument of the test command.
    This situation is not possible in a valid script; positional arguments
    are normally present after that, which would prevent the segfault.
  * sieve: For some Sieve commands the provided mailbox name is not
    properly checked for UTF-8 validity, which can cause assert crashes at
    runtime when an invalid mailbox name is encountered. This can be
    caused by the user by writing a bad Sieve script involving the
    affected commands ("mailboxexists", "specialuse_exists").
    This can be triggered by the remote sender only when the user has
    written a Sieve script that passes message content to one of the
    affected commands.
  * sieve: Large sequences of 8-bit octets passed to certain Sieve
    commands that create or modify message headers that allow UTF-8 text
    (vacation, notify and addheader) can cause the delivery or IMAP
    process (when IMAPSieve is used) to enter a memory-consuming
    semi-infinite loop that ends when the process exceeds its memory
    limits. Logged in users can cause these hangs only for their own
    processes.
- Remove upstream applied pathces:
  0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
  0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
  0002-imap-Add-unit-test-for-imap-client-hibernate.patch
  0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="1259e3f8d7e95f16155672156a36adec430069ff051e0b70c9249a853d13dd69" name="doxygen" arch="i586">
  <version epoch="0" ver="1.8.14" rel="lp152.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Split documentation to separate package
- Do not bundle pdf documentation
- Generate html documentation</changelog>
  <changelog author="pgajdos@suse.com" date="1425297600">- remove doxygen-html.sh</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10
  * Change the build system to use cmake.
  * Add support for basic XML syntax highlighting
  * Added documentation for ``` style fenced code block and more
    robust parsing
  * Added function arguments to the LaTeX toc
  * Added support for language codes
  * etc. see http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- removed unneded patches:
  - doxygen-1.5.9-64archs.patch
  - doxygen-1.5.9-man.patch
  - doxygen-1.7.0-modify_footer.patch renamed to doxygen-modify_footer.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="pgajdos@suse.com" date="1444046400">- work around Power8 double free or corruption [bnc#921577]
  + doxygen-dot-one-thread.patch</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Do not link with -pie if we are not compiling with -fPIE</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="be2da08f341347973b5032b5d703e67e90f6e61f96052e8cccc9681aa4315dc5" name="doxygen" arch="src">
  <version epoch="0" ver="1.8.14" rel="lp152.4.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1409227200">- Doxygen 1.8.8
- New features:
  * Support for PlantUML
  * Add BREAD_CRUMB_TRAIL
- A selection of bug fixes and updates as listed in
  http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_8</changelog>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Split documentation to separate package
- Do not bundle pdf documentation
- Generate html documentation</changelog>
  <changelog author="pgajdos@suse.com" date="1425297600">- remove doxygen-html.sh</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10
  * Change the build system to use cmake.
  * Add support for basic XML syntax highlighting
  * Added documentation for ``` style fenced code block and more
    robust parsing
  * Added function arguments to the LaTeX toc
  * Added support for language codes
  * etc. see http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- removed unneded patches:
  - doxygen-1.5.9-64archs.patch
  - doxygen-1.5.9-man.patch
  - doxygen-1.7.0-modify_footer.patch renamed to doxygen-modify_footer.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="pgajdos@suse.com" date="1444046400">- work around Power8 double free or corruption [bnc#921577]
  + doxygen-dot-one-thread.patch</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Do not link with -pie if we are not compiling with -fPIE</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="dc57d32528ac7bbaffd51ad8dcb3dac65b74632828ebee7e5f19833a22ba9881" name="doxygen" arch="x86_64">
  <version epoch="0" ver="1.8.14" rel="lp152.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Split documentation to separate package
- Do not bundle pdf documentation
- Generate html documentation</changelog>
  <changelog author="pgajdos@suse.com" date="1425297600">- remove doxygen-html.sh</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10
  * Change the build system to use cmake.
  * Add support for basic XML syntax highlighting
  * Added documentation for ``` style fenced code block and more
    robust parsing
  * Added function arguments to the LaTeX toc
  * Added support for language codes
  * etc. see http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- removed unneded patches:
  - doxygen-1.5.9-64archs.patch
  - doxygen-1.5.9-man.patch
  - doxygen-1.7.0-modify_footer.patch renamed to doxygen-modify_footer.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="pgajdos@suse.com" date="1444046400">- work around Power8 double free or corruption [bnc#921577]
  + doxygen-dot-one-thread.patch</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Do not link with -pie if we are not compiling with -fPIE</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="b37f1492342c5ab4e930eb14d5c0daf32cba8293ac276fe2f219ec3412d0fac5" name="doxywizard" arch="src">
  <version epoch="0" ver="1.8.14" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1377518400">- updated to 1.8.5:
  * Added SOURCE_TOOLTIPS option for advanced tooltip support while
    source browsing.
  * bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated to 1.8.6:
  * many bugfixes and features, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="pgajdos@suse.com" date="1399982400">- updated to 1.8.7:
  * many bugfixes and features, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1409227200">- Doxygen 1.8.8
- New features:
  * Support for PlantUML
  * Add BREAD_CRUMB_TRAIL
- A selection of bug fixes and updates as listed in
  http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_8</changelog>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Enable tests</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10, see doxygen.changes
- move tests to doxygen.spec
- remove doxywizard-1.5.9-flex.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="pgajdos@suse.com" date="1451995201">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="012bde1911b9a3e95afee5d1b83bc76cfcf23637f6206d512550e8ce121fc106" name="doxywizard" arch="x86_64">
  <version epoch="0" ver="1.8.14" rel="lp152.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Enable tests</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10, see doxygen.changes
- move tests to doxygen.spec
- remove doxywizard-1.5.9-flex.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="pgajdos@suse.com" date="1451995201">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="c2031ea2816749069f4bec10b2f1dca718dc5a4817e35197c817fbdf2787b2a4" name="dpdk" arch="src">
  <version epoch="0" ver="19.11.1" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="175b9a4e1bf3d9cd60d6b0d703b3d583824af034374e66eb29d1ebfda3407aa5" name="dpdk" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="e72866b485d63e3aa3adf423caa902eb1c2e4b3cfacacad01dd03e6ca0a48f38" name="dpdk" arch="src">
  <version epoch="0" ver="19.11.1" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="10b354bff373c0eed7cd7d3e0bfdf835cb3e5b1bc12e38b34443cb2edee90845" name="dpdk" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="3941454cddc82443b52637ef1b808b40f28911c334bc4bcdb15e73b7ca6185bb" name="dpdk" arch="src">
  <version epoch="0" ver="19.11.4" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="84aa327a8d1350a4abf2587756be907962d136b90a87e9e45bd5c03cf1276021" name="dpdk" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="e8012479df17bf07f63df2854aed1f4e04dbe60ed155f4bbd0975fd92ddc6f5d" name="dpdk" arch="src">
  <version epoch="0" ver="19.11.4" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="2904a7218662cc4369536696af9a942d820a0a0e316e716d7773865f9b7176d6" name="dpdk" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="6b5df79cc1aa7f99ff8e1553955421a0be551e94d7e97621eb6544b07f9c38e5" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="9847090a82612fe54fb10da8efbfa6be55d12b79b92ef9b76beffcba84e2b5e0" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="b2eccbbad7705fdaab11366addb62a854843ef0525865ffc8615e2f84e3962e6" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="ce82444670eea88c1880ed138de2603f4ea43fe24320a0c3ec7a15e2320925e8" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="7bc286eaae7f0b064559aa92d4941954b5d3d892c791a255cab1131caca6a49a" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="19.11.1" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="985476a7f1503b8ab88f724205a38d50e44b28eb5c4693b2a0b15cb6a10f878f" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="19.11.1" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="d23b46d492ed8315a758721a463bd670f49d3b2716541bf610c22647de5a2091" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="19.11.4" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="228e017c6265e375cd8a274a15774d7e6a917b11d7a2b86033dc8e78820356f9" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="19.11.4" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="0ca070ef2cc7e74b3105376467a69d4b3f24eddadbbcd0dd75091ab9ec064c12" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="2a1f032edc2d4ff1f218e9fadbb0a58aa642ea5bcbeea4f6df208ae0b6cdfa62" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="4792566b85fe88df36078fc4162b9392982f5fbaba087fe748e58897cdefbdd9" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="2c4c53f19d95dc908185b908ebab79496e19bc8b80ce09aaba10df109a2eee83" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="76979e5597ce4638fcb58876f86ff21d41cccb2438d8daa8694408ba3994b93f" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="19.11.1_k5.3.18_lp152.33" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="8a5c727f4e23f25a452a278e33b369158dead1de3e438df5c9c6554dab9af924" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="19.11.1_k5.3.18_lp152.36" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="c30c267596e2b701d548ffe2137bfc6bf14aa9a8095a77b9d82622a471a05ec2" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="19.11.4_k5.3.18_lp152.41" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="609562ea4d0b9387af638652e4bdb73f923a1c598132939df7c72b0293006667" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="19.11.4_k5.3.18_lp152.69" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="9a5b18dd4b5a8add9d98aacfaab69df7cc16399400002efe94256eea9774bbe6" name="dpdk-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="19.11.1_k5.3.18_lp152.33" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="29eab3b21e6ce52a0c7a19434466f471e11eb23b5f01fa3a3316b8dab55be3b5" name="dpdk-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="19.11.1_k5.3.18_lp152.36" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="5b4f2dbb194691d4fce2cae229d9638d854729acdaa885f41ef4a479e714f453" name="dpdk-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="19.11.4_k5.3.18_lp152.41" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="09eefe83f57e7bbf6907a712b2bea6032dd0b584d4895c133f1eb23b88d588fb" name="dpdk-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="19.11.4_k5.3.18_lp152.69" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="e08d466eb76833807dcb83149b13f57ddbe434d746d27c8a14eaceee14f48a03" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="e518560ebaae7dd5a616f6304bae8c77466f5dcf967112ec357c38708acaeae2" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="586990ee661f944074073b25728fea574af50f353e2805a02c4f5a3746ee28c1" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="5457c01205aa53df64fea2163a757f58fcdc392a2c018bf9299046dca94543ab" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="4493c0dd28a95f760aef455624d449e780055a4e63759c0df3f10612a9daef8b" name="dracut" arch="i586">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="412126bbfc9c3dbfb00d64b84153d9ed07d3ebd741d74df507865ad7d7701951" name="dracut" arch="src">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="d88195af7bdec33aed83fb1885e915dd36b675a0694d01b197607648813ec579" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="a6f6977db06bdf1300e475c44b460b91df3da01267454798b5256efdcfd53523" name="dracut" arch="i586">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="80b9d59a5e355cf1f5e7cb6f554b01353dd51e9c31c07c60aee2860cf2442205" name="dracut" arch="src">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="bafbff8bdba010034e55f5453ef67817d3e01d110b79bc72510c022d4dd006d1" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="5c945f151b6905eebebdab91d45cd69100a6a22431d55ebd76a153e35ecc8ffc" name="dracut" arch="i586">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="69215516dddbed55b35ad9719d64e0bb283ffba965f58a41a06ba58d2cdef3d9" name="dracut" arch="src">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="1b5a381001ebbf40c7f2bf55af52bb5049b3bd3bba82df8aa56f3102cf2778a6" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="3c2ff5248579bbef441d43203e010c1d7c5ee20a8fc115378f015b8acd9efc74" name="dracut" arch="i586">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="f2c888b673aed9aa59c1adfe8da2af704c664ebf1d3b3dbac8e104d1de2f0964" name="dracut" arch="src">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="c61220fc67b620df125ff874d9d3bfa7396a01498184fe9e903a51713b1c7e35" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="108e95035f7299a7685b167ada98483d2eb6de66d395229bb4b99fefbe3ed47c" name="dracut" arch="i586">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="3c9454dcbbdbfb84a1ef17b815b6326fa847f353fd5f9fcb6ea88e746eccf11c" name="dracut" arch="src">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="fd024bb743dd8fd0a35d0558e838c7e40aad7f2b6cf9e96f56ddf5cbe479b731" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="086f6547738bf2249404d9bf4d641ffbebf07caf4f0201e89ea0e1c9e482bdd6" name="dracut" arch="i586">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="ab23154eeb58bf2acf11ad3a95259282fd49ea3343cc5b09f073709e41c4a953" name="dracut" arch="src">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="6855d052593a49017bb6a8cebf214394f204cf53299615aab81e9433609b0153" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="e9c240aca45b9bdf2cec785a9e3396cabf79a31c23c7d6bb81fd30396df8618b" name="dracut" arch="i586">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="d65e8e6cbe6f0455afb171430fccb60101d732bcef0a838ff6e35ae13e6b8877" name="dracut" arch="src">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="3712e989edd117d747b8d4fdedc87a80ad1ec023f45ee32c534512197db88691" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="504e6a698db6d514f7102228281c01e699b1d9d864bdde791317b832c90aa6cf" name="dracut" arch="i586">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="14014dcde2515ac51e07cc36392bada64e4191a788821890ff899ad115d544b3" name="dracut" arch="src">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="fce50ef348a0e52eb2ec7ee8baa0a6e25c24a1d01c1836ecc1e5f3c1299104db" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="2d82236cd278cbe1168206f80f8f401d4fab017da7ad85a798477952a7214492" name="dracut" arch="i586">
  <version epoch="0" ver="049.1+suse.188.gbf445638" rel="lp152.2.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
</package>
<package pkgid="6e01de6411b4cebbbf2bcd6dda00c4110aecbbc6dd56412a67f80e8e359e4499" name="dracut" arch="src">
  <version epoch="0" ver="049.1+suse.188.gbf445638" rel="lp152.2.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
</package>
<package pkgid="72611151e390229c82a701bddf2311061d5b4a76884ebfb9ec6ad5c4e5f51178" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.188.gbf445638" rel="lp152.2.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
</package>
<package pkgid="5960639b047e05d27016316054e806d452baf7f849b7aebfe6c5ea6c4729ef01" name="dracut" arch="i586">
  <version epoch="0" ver="049.1+suse.203.g8ee14a90" rel="lp152.2.30.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
</package>
<package pkgid="734495bc0239e8898cf1c074d7471821854f5ca5215b840c3595fa8a4c990527" name="dracut" arch="src">
  <version epoch="0" ver="049.1+suse.203.g8ee14a90" rel="lp152.2.30.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
</package>
<package pkgid="0434f3b09e29274c8797c91d3c5fa7ce97b99105bfe9519c00f347576b9d3192" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.203.g8ee14a90" rel="lp152.2.30.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
</package>
<package pkgid="242c71fdb289f636046b90420251740fa56786980df29ade7728c86a89adad14" name="dracut" arch="i586">
  <version epoch="0" ver="049.1+suse.209.gebcf4f33" rel="lp152.2.33.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
</package>
<package pkgid="c68e58c03712021179b97db6982fd210f547c50182a6786135b239eb3f00042b" name="dracut" arch="src">
  <version epoch="0" ver="049.1+suse.209.gebcf4f33" rel="lp152.2.33.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
</package>
<package pkgid="7df41822d820f918956367098feaafc552ecf92e17cfd60453be23a298207c6a" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.209.gebcf4f33" rel="lp152.2.33.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
</package>
<package pkgid="0ba23dbe6ed37438a1a642d851c908ac5ebcedb07afe67698037870e51861703" name="dracut" arch="i586">
  <version epoch="0" ver="049.1+suse.216.gf705637b" rel="lp152.2.36.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
</package>
<package pkgid="fae184321c239f166898ba7da7ad5715767e3683fdf1fb643f9d57faa0f53082" name="dracut" arch="src">
  <version epoch="0" ver="049.1+suse.216.gf705637b" rel="lp152.2.36.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
</package>
<package pkgid="912cff53da9372ce537865bfd67cbe1bce62109f9efc3083c693e258c64b732e" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.216.gf705637b" rel="lp152.2.36.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
</package>
<package pkgid="2bd54d3bfbe7e5978d4070672e01d022a7f612275b1f72af8b8e6bab3be6f120" name="dracut-extra" arch="i586">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="6d60ce5484ea2272891a13e49580149942eee6a7002c353682dc8c00dba5d740" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="8b43d8f2f69bfdf25b5bfc6cbed8ff63c5f9bc34531d567f7b2b877cef4087e8" name="dracut-extra" arch="i586">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="11ab44ee3563efe0be64e7a2eb294d44dd5629a0862407d627a12b90a820c16f" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="a61ce2c02b934cdd00825efbef71a4199353454540e452997b2cd7454612e0e1" name="dracut-extra" arch="i586">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="a537c2823937b22abbd9f2d5890a1bab9084ab8e7574205b706d4acf0a568256" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="7e5f88aced7f640fa3121bf00b09cebd05bb98a835845efdaf07f5c3547d3969" name="dracut-extra" arch="i586">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="85f2697dfc6468679945dc8b4eeab49f583ff9f336c2e8048b831c855c6fdff7" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="2499d578b46a36961d9fb4f496b2b7b33812b5286db011c77dd3f120c863ec26" name="dracut-extra" arch="i586">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="88295667c5a7c539e1c929d6fe49cec29fcbfe0c9ee138d7e6c3eda68f324755" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="6a0c448ba6e5a7836292958d9aba9a3a442eebeac1a700b18a48e6385d340961" name="dracut-extra" arch="i586">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="66e681e462bc7e0cd3485ec215cb2c2241002fad500d7c9a2459d99fc95ea69f" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="92f50f385ec87e1fb08769bfd96fb1864e5fd5880525e608bd5e10fecbbc6e6c" name="dracut-extra" arch="i586">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="773315e40317b441ec352e350e40f34d3feb64fe6f920cb63a4f9c18a095606d" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="cca122e9625a8e47cf68503057694520b3bb607750ab1c1d384c261fb3a8977b" name="dracut-extra" arch="i586">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="03f6679ac87480f52546233856db9a8a37dd0b72a00db05afe066adf25addd99" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="96a075b252c4ad7fd91f719ee682d536f894ff5faa53c04f216ec16bb4893707" name="dracut-extra" arch="i586">
  <version epoch="0" ver="049.1+suse.188.gbf445638" rel="lp152.2.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
</package>
<package pkgid="e7f495f36b0715bf249c3bdc1f8c8c29f7ef509bd5fa32c2355da92d01bb0031" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="049.1+suse.188.gbf445638" rel="lp152.2.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
</package>
<package pkgid="ab7adba11bd408d26179e5ba50d320c47ed0f923da91938e2fa53c03a5c3d26f" name="dracut-extra" arch="i586">
  <version epoch="0" ver="049.1+suse.203.g8ee14a90" rel="lp152.2.30.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
</package>
<package pkgid="8c4992e74ee56ececf9de30dfe4d839af053b22105f06a4833277c4c253c1d5b" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="049.1+suse.203.g8ee14a90" rel="lp152.2.30.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
</package>
<package pkgid="5d017466d64797409e4941d138f07d7d9eea5352b5a6c394a8561ece4bf3f550" name="dracut-extra" arch="i586">
  <version epoch="0" ver="049.1+suse.209.gebcf4f33" rel="lp152.2.33.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
</package>
<package pkgid="59187aaf9290a0691e32dc1521cf1f7e6e13bed2ef00519d92b76995fc3cc5e5" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="049.1+suse.209.gebcf4f33" rel="lp152.2.33.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
</package>
<package pkgid="3c1e0f2ed9611a95e3a4bb1758ebfbda00a4b8ad64d349061396b80377613fca" name="dracut-extra" arch="i586">
  <version epoch="0" ver="049.1+suse.216.gf705637b" rel="lp152.2.36.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
</package>
<package pkgid="451b0c9212996d36ee26072df083bc2b6706d6ff9cef8646da34ee880317c10e" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="049.1+suse.216.gf705637b" rel="lp152.2.36.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
</package>
<package pkgid="82a0eeee9a2a37ad5037ec2ae6b201d85a418e27a73154bc1f8819ee44889090" name="dracut-fips" arch="i586">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="ef836ff2821fddd108f5b27454a1be2aacec4a3f94b8ba6d7fa07eebd74da79f" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="17fcb59e8a4c3053389aca29990e12ec5b68508bd96d2384213579d7eef84749" name="dracut-fips" arch="i586">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="09dc239e953892fb7820104bf3423078c1845724709f2c2b538620937cdf103c" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="bb23a644d6f90397a14ed4ab35aa39239f200fb804302cee91b2378db24d1f15" name="dracut-fips" arch="i586">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="255a562d0b98e952b1be80793c5afa863de01fdb1f1159be50b2288aa9002eba" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="6f45eb652447206c4a3aefb5f198c5e6c7dc52089dd86cbd7c53553410d61cc7" name="dracut-fips" arch="i586">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="cfebacaf03c8f0c6231b0c68d24e5d6145a7cb4ffbd896f987ae22e08bd6f662" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="4ebde5fe01a0a4aee74dd3803f16fb0958f7bc38261f0bfe0ad18a51972fc8ea" name="dracut-fips" arch="i586">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="e5f15b9a4c41e09003ff4fb49b1e8e62e3c372fde3f9f2aa4d7d06d56347459c" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="cd57a430b660d1bb504f2c62e0ef363916756ed701cfedf00abba72c9732b3a9" name="dracut-fips" arch="i586">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="b4a3ff03562f3de017c0a64fb44a2f34d2e51304b22a25f2b66a01ce4db4f82e" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="24b8fb7acb2c82e0acd2baaf236a14b41e9709d5f5e63d647320199c96844495" name="dracut-fips" arch="i586">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="0835c0bb4b41ecf4512b4a9fe1e5557154459400fdd1992ef72171b69cc7b22a" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="70d63dd4e7fd62b2b966edbf7c6d65ac8d368194b99fc7e69b3ae1503f2f6c95" name="dracut-fips" arch="i586">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="9b8eb158448e129fa3e4948721e0c39f51d8e0e45d222b48e616e21f710eef28" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="5e43ab2e8ea730cfbc5c8cd17a52a4158ce378c5c478ff050b0aa8b92e6f620e" name="dracut-fips" arch="i586">
  <version epoch="0" ver="049.1+suse.188.gbf445638" rel="lp152.2.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
</package>
<package pkgid="7dcef09e2e4913e32d48eb3406ee72efec71f59abd85533722dc734a34ac043b" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.188.gbf445638" rel="lp152.2.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
</package>
<package pkgid="54063db5314db2becbc67a2d0c8d39ecfa008fbb7b287f4504083644c9446f20" name="dracut-fips" arch="i586">
  <version epoch="0" ver="049.1+suse.203.g8ee14a90" rel="lp152.2.30.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
</package>
<package pkgid="9e008460b20951080ae541131adc0d6694a03870ea0b4ff0a6cc39e6ac1e4efa" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.203.g8ee14a90" rel="lp152.2.30.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
</package>
<package pkgid="985bb5cddc5f10299d00a7a22ea870613ab264a514e866dfbbd9e22eb71f570e" name="dracut-fips" arch="i586">
  <version epoch="0" ver="049.1+suse.209.gebcf4f33" rel="lp152.2.33.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
</package>
<package pkgid="4206b147fc2b227dad455321d1cf66f5af9759f7e6162629525ce75d9a9338c2" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.209.gebcf4f33" rel="lp152.2.33.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
</package>
<package pkgid="154ce69effa1adb8c685a5c045daa4081d5edb29665b270bb651b88255691d6e" name="dracut-fips" arch="i586">
  <version epoch="0" ver="049.1+suse.216.gf705637b" rel="lp152.2.36.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
</package>
<package pkgid="f12a65ea12b949bed7807a096bed7b4fb47bd96eb18d071a8eaf297e90d31f09" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.216.gf705637b" rel="lp152.2.36.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
</package>
<package pkgid="9d7723b1d197b7b8e52c5bc3ece2c1cf20b23b2009e5435d8bddc3c7c5710fd1" name="dracut-ima" arch="i586">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="8cfaa5ed3e4cf12ef6108c7c5a2df835237620aa1c6152cda2c2128002199bef" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="f2ca9a9f9b8a3ca61c791da5ded4fceebc45a1432fbf784a669c8700dda2d8c6" name="dracut-ima" arch="i586">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="906888b5016896575c8e604b4e1f72f586c3510ad55b28db6542f5f5d153ace8" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="ac0154371da35c5f8f59e87aaa0a29ffa2652b9dd8c22dd93de961880af9c3f6" name="dracut-ima" arch="i586">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="b0263d66548bb091940df894fb7a9743262caf633575c6faaee4be18c2192efa" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="b7497fb90f8ef5ee3fcb59661665d4e2617308131931f8c72b3098d5231a0ed4" name="dracut-ima" arch="i586">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="791fa4276c62e5c7b991db4fb60900ed1bb147c61ac5c0dbb735de42af28d174" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="96f81de00fafd7a6043954a85142bbbab68a9c1f9ef09b8fd47d797db5f5e6f8" name="dracut-ima" arch="i586">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="391326ad00f70c1e694d2974dbd41776be0f21bc367939c4473d10e1218801b7" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="bf413c64bbb3a91e69d82a72d2ba956b6bd8d597f643bf2bddba1beb3838c2be" name="dracut-ima" arch="i586">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="53ce12ad54bd6a67fa206ef794006848d3e31e0191267e2597b27054285fdb9e" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="ee031ac4386c943ed8824e734bfa63ee1688ca172c640bdd95953f9ff9468662" name="dracut-ima" arch="i586">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="accf92acd350db82c574931d626018ecb63a29cecb93bc8a89e4e9e4bffb3930" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="e36a7b1f26aa8562dff4040174753d528aaa4b6fc0f0f7a7797a7388d7bb43e6" name="dracut-ima" arch="i586">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="41d1e97bf875aa236e9681f0b9b04560fff16cb63258c659c9d08e27ae07ec05" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="14ad8ad3508f00d1e039d1a4555112d5e792600fa9ddae865426d796590dd617" name="dracut-ima" arch="i586">
  <version epoch="0" ver="049.1+suse.188.gbf445638" rel="lp152.2.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
</package>
<package pkgid="eb552094bc7258109f73b95594049aae0957b48480d3bb94599cfa4fdf717a93" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="049.1+suse.188.gbf445638" rel="lp152.2.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
</package>
<package pkgid="dbd8758ed2d1225d54eb6598cb7bce0c2d25ef6376a7aa9d84de0d287d982b6c" name="dracut-ima" arch="i586">
  <version epoch="0" ver="049.1+suse.203.g8ee14a90" rel="lp152.2.30.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
</package>
<package pkgid="83372e9f125d5a555d55453e6e766589f269471ffa4767140031182a5bcd4aa7" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="049.1+suse.203.g8ee14a90" rel="lp152.2.30.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
</package>
<package pkgid="e6fbd6e219a7b00419f3d7ddc8fdcdeef63543c1d1903fffa74960f9a5840809" name="dracut-ima" arch="i586">
  <version epoch="0" ver="049.1+suse.209.gebcf4f33" rel="lp152.2.33.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
</package>
<package pkgid="f89035e8c1325c74a955e74d6e4bfca232a2a04250de7a344a8f8edd3b303d02" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="049.1+suse.209.gebcf4f33" rel="lp152.2.33.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
</package>
<package pkgid="6aea44f752963162b736422fd449083f4e7e29b79bbf458e85d1bea5e902f2e2" name="dracut-ima" arch="i586">
  <version epoch="0" ver="049.1+suse.216.gf705637b" rel="lp152.2.36.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
</package>
<package pkgid="d2fb70073817e30505ba3167eebc8baf169543a49d69b8e58f4ef47f39b68599" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="049.1+suse.216.gf705637b" rel="lp152.2.36.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
</package>
<package pkgid="c814057d34090db1f8db08e6447db383723831000912727351fafe0e2cd68252" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp152.5.3.1"/>
  <changelog author="dcassany@suse.com" date="1565006400">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006401">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
</package>
<package pkgid="6f6d9c723156c8d58f119cc2394ec0ee6df5ce31824a50c00519d43bd4322749" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp152.5.3.1"/>
  <changelog author="dcassany@suse.com" date="1565006400">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006401">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
</package>
<package pkgid="c7763373cf1af0ea5d9d4b56819e064a6bf17deb1c9a7a19933c8baa0d5ae5c1" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp152.5.4.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="a6b249f741d8756dadb717523287434adc8e9ffbc6cc5cc7232921df444b816c" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp152.5.4.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="551f658f73f84a17b4c5267b434a0e5b159618d55c72186a336b373506a0e4bd" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp152.5.10.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="9049eb1832774607917a4bb23e0160b643a829a116d5627281036539b81b98f4" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp152.5.10.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="1f0f640621e6d403b8614b45fcc0381274247878c896a0cf8f9e02b4bfeda1c7" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp152.5.13.1"/>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
</package>
<package pkgid="b3a764323c4b5af689f14c463dac6732794cce42bc383fe1d7178d1c8044504b" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp152.5.13.1"/>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
</package>
<package pkgid="6ad3d05948001ece30f261de283195e187f102a919c215efeec4995214906fc8" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.21.7" rel="lp152.5.7.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="fb386b097e4976b88dae4f73ce2bf9308bc261c3294e4308760f1ec7dfec4caa" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.21.7" rel="lp152.5.7.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="f90117be6597129696a763cb2c0693d8434680c932d63b5b412ca4e0bcb37e28" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.23.20" rel="lp152.5.16.1"/>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
</package>
<package pkgid="1e1a4605d9416738e8f88427df0cb1d7baccf379c8cd1c2c098ecdb573eb9507" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="lp152.5.16.1"/>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
</package>
<package pkgid="ccaef776f90b13f10868b6a96b14258b3596bf82bb960dde8049e69511d38165" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.23.20" rel="lp152.5.19.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="51abc9d57f1b96e4aac4fe13a52a4f249f95d136ca780a1b2627443ab0b12c3e" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="lp152.5.19.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="ec236156c9e66b23db3e89f8c1c004266df47953a060342e78c94c307844f86d" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp152.5.3.1"/>
  <changelog author="dcassany@suse.com" date="1565006400">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006401">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
</package>
<package pkgid="58180508f3263dc25c5451426ebb90326de066959b6daf4f45da4ebd3ec6f91c" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp152.5.3.1"/>
  <changelog author="dcassany@suse.com" date="1565006400">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006401">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
</package>
<package pkgid="3e92becd57fe2753fc826fde7e2f1722d246ad3ba9b5ae4f071d88d5b040809b" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp152.5.4.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="bb6284e89b1e58aed3553855a9020df12608c4cfd68dece77fb7634307cb0d0e" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp152.5.4.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="24e6fe74ef7744931e763014852b298c7425b043d2c76b07a876274366baac25" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp152.5.10.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="abdf997d867404632c1b780f16830052cfb00c748d3b7da66e03976fc4a436c5" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp152.5.10.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="492e3071c436a760e77ad752005120caba77a478614544986fd81d38b05617d9" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp152.5.13.1"/>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
</package>
<package pkgid="fff9cd3fe4026897913d4c62f061d9b1320442a93fbccd895eb03a819e5f58f5" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp152.5.13.1"/>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
</package>
<package pkgid="041642878988cd86481d94c7b7be24936a8eae05c80741a78f58ee31fc5f35cd" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.21.7" rel="lp152.5.7.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="294c687ea81a0e54246f8b8eace85d6f5abf7eb6319b36c735c3c97e338d1ff5" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.21.7" rel="lp152.5.7.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="5bc7c2f54364b629c4ee2ba1efb0a74ef5d95672594bf1f79579f86407a179ce" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.23.20" rel="lp152.5.16.1"/>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
</package>
<package pkgid="4557bc788e880ee3328a45d04c62019ff877b1adc61cda8463565d07e68eba08" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="lp152.5.16.1"/>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
</package>
<package pkgid="c650e412427deaa599d5a0fa8808ed032d4d58715fd78a9e1f1e4b47052c7e57" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.23.20" rel="lp152.5.19.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="c07746df2d2888abe009f7218d78a967fa70c20c2d9237a9e3ed98365e0b38c3" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="lp152.5.19.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="637ee383349c3c137feba0bb1509c3edb8e8953f908ddb40ac57e9c1b73d263d" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp152.5.3.1"/>
  <changelog author="dcassany@suse.com" date="1565006400">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006401">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
</package>
<package pkgid="964b74ee941aa786e9704668d728b2af0a2290a2def413683b46e3a4b82845de" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp152.5.3.1"/>
  <changelog author="dcassany@suse.com" date="1565006400">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006401">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
</package>
<package pkgid="62beeff01696714f692ead214a7200cd4f0fdf3e1b166d2cbafd501b1506eb0b" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp152.5.4.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="f9470be6e2d0ee93bafc041d9205e5bd07ac465e80ad3b71934cc9919ddec7bd" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp152.5.4.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="143337d71a3b5bcc5626b4ef9bb4fdeed0fea7aaf8c55076f394cb2c1fc2a477" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp152.5.10.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="fc8b2a5eb6bfa6f715df35a7965498c5f5f4d86db2d03aa056dd5d61c7e05224" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp152.5.10.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="4c7a1a8e7ab02c84974d0dd02eaf00a81ac4a214a01abaa71a2e0e3c4f2d7dc4" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp152.5.13.1"/>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
</package>
<package pkgid="bd0597e88cd506dfbcfa17493e6e9339a36e40f10028c87533229889a89a1e9a" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp152.5.13.1"/>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
</package>
<package pkgid="881bfdc43625740831b36d492130dc3cf6c46ef9d0a7f37c9ed4be7eabc7c646" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.21.7" rel="lp152.5.7.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="57a0acea98088e94734c3f56cd4a3384060f5b2f18e5f3ba9c77a857458d641e" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.21.7" rel="lp152.5.7.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="734902fd53415b343777d56834e459be38b00b4500a898a181c939a6636a5560" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.23.20" rel="lp152.5.16.1"/>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
</package>
<package pkgid="d72d80e36b009174e3de78601bb8923689f565ec3d4c340a55d5c0cc8c3a02fd" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="lp152.5.16.1"/>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
</package>
<package pkgid="3f627391c2b354a24320147a9ce29d66ac7fff9a0f7fe7c6de8e6323dbc3f8ca" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.23.20" rel="lp152.5.19.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="13c0bdf56b58b159eb12f981cadaa5f8fd5e772243ed0dd4bf340d369263376a" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="lp152.5.19.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="02be401b947477768fed185450b86c11789f795e664cd15f9c764f3fab4cdd87" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp152.5.3.1"/>
  <changelog author="dcassany@suse.com" date="1565006400">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006401">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
</package>
<package pkgid="703a8687ecbf350f08389a425e5e005b9addc28f69df9b83461672a1bfe5b48c" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp152.5.3.1"/>
  <changelog author="dcassany@suse.com" date="1565006400">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006401">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
</package>
<package pkgid="4d83f2c6b7e6ddffc3f864dc81e5c84796f83f29da0f8044641bac63d0b347ae" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp152.5.4.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="6a8b98287c6ea54484ef7a348e92b7c633e44bad6a86b9b89faf602c64f8e2e2" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp152.5.4.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="12807db1bdc72aa45f9f54e9f597824865433bca36f05232ca08318867042080" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp152.5.10.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="dc139217f68b676852af0beee3d7257a417027575ef7a2dc21d58996f15dd8a3" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp152.5.10.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="007333872b6b13a43f7c7062e5c603ddcf2e04b136590f429a77e0f207f2c2f0" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp152.5.13.1"/>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
</package>
<package pkgid="a1a08675a7e8b15a2368697937e733fcaf2bb3456f695aca0632de5d35cfe177" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp152.5.13.1"/>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
</package>
<package pkgid="5fcbfaac9e43a2eceb86181114a166b9e1806bf1aae8e6d386091477f086c873" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.21.7" rel="lp152.5.7.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="15d0cb6b17ca69191197ce0be4b39326e1acc5057a0952fc78285ce11d9b80b6" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.21.7" rel="lp152.5.7.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="7dadb63da16c7dcb012dcd5776c15af6a8ed4b1f6581fcc86397d14cfb5a8bf7" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.23.20" rel="lp152.5.16.1"/>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
</package>
<package pkgid="86eaf6558b7482b73840e978216c05c7aa128d7cacf76a711e03da33d6e36d97" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="lp152.5.16.1"/>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
</package>
<package pkgid="730aaecd5ed4ce6cb84ed6375fc7edae4201a890aedc9b7ff504bf85276e9c9d" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.23.20" rel="lp152.5.19.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="1231e09f119305a1243c04df5632c7b275e16c093b6aff381e3af6488c1be90a" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="lp152.5.19.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a5c698512a603778d00f38e696f234601bd5851998f0f65196e60dfcf83f87b7" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp152.5.3.1"/>
  <changelog author="dcassany@suse.com" date="1565006400">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006401">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
</package>
<package pkgid="56d2f213329c3e3bfb86004b6e3db3642f47b190124ffa3b53de6997b934ea23" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp152.5.3.1"/>
  <changelog author="dcassany@suse.com" date="1565006400">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006401">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
</package>
<package pkgid="7eb96d3c38554010375902bb9682cfbfe96c5d247c50dde2f48b6f22539b20ec" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp152.5.4.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="7d275f8f311639596c5d0d3b7a3cf8d5cfb2f9979bff3e128e805449f548adb5" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp152.5.4.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="1974c3548f5341d1ee717a471fb3d46a1ab9ed310bee394f4007e44261ab6e8b" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp152.5.10.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="8a5b5e2101601ed99b98dc764c6fd7a11f2dbd97b99ecb8c59974ba094b3771e" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp152.5.10.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="6b0a9ab04c2ef4bc072c2d91b8dcef7b13547f9571653229caef8fa53eb0f46b" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp152.5.13.1"/>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
</package>
<package pkgid="71942742acafeacee44e49bd923205e03ce71b8a08a51df18e805b9b687e9fba" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp152.5.13.1"/>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
</package>
<package pkgid="bc2fb41621fd9c3c87f1d989d4366f568327fcd8e5333dd441dab3af7b047176" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.21.7" rel="lp152.5.7.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="5c61dccba7f72883b97a0b90c3e899785c80239ce61d1ec95f5b9a36c2521b85" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.21.7" rel="lp152.5.7.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="854c6af3fab80b7d1c167051186cde7278f86df7120f29e2b73d276f7dc19d41" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.23.20" rel="lp152.5.16.1"/>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
</package>
<package pkgid="9498757b056b430089acaf429cab872a82bc98688c435749c9de727c58bd4041" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="lp152.5.16.1"/>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
</package>
<package pkgid="de0fe379f2a364980c74dac441209e9ba3fde29ab1bf4067018777ee0f7f36e6" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.23.20" rel="lp152.5.19.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="84a0cd5dd45f0b23c0c16409839065bb800da26a3cd9a9c5c66069c91b4be726" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="lp152.5.19.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="53220769f2684e9c673bcb7dfc49f70171cd278d5a09b5c935f1714923b4ba75" name="dracut-saltboot" arch="noarch">
  <version epoch="0" ver="0.1.1590413773.a959db7" rel="lp152.2.3.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
</package>
<package pkgid="8bc2dd062ba767f79041d953e16d2c41f661e3a0f601217bfa3a39b1e0f61131" name="dracut-saltboot" arch="src">
  <version epoch="0" ver="0.1.1590413773.a959db7" rel="lp152.2.3.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
</package>
<package pkgid="d9cc15076b2f000832f6e5b78be7c1cb641131754dc1ceb90a3a83ba46b55fa5" name="dracut-saltboot" arch="noarch">
  <version epoch="0" ver="0.1.1595937550.0285244" rel="lp152.2.14.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
</package>
<package pkgid="5ab193a8c6182bcd93d42b9acaa83c381d1c975e48e648ae782b29e7e7a144ca" name="dracut-saltboot" arch="src">
  <version epoch="0" ver="0.1.1595937550.0285244" rel="lp152.2.14.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
</package>
<package pkgid="a596e7d6493719f112c654edfa313ee580f87ee8ca38d06bd37475d04023f566" name="dracut-saltboot" arch="noarch">
  <version epoch="0" ver="0.1.1595937550.0285244" rel="lp152.2.6.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
</package>
<package pkgid="afbb5daf7f0b64d6d587dae3594d900481e58edef894cb4756f9fdcb46659180" name="dracut-saltboot" arch="src">
  <version epoch="0" ver="0.1.1595937550.0285244" rel="lp152.2.6.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
</package>
<package pkgid="c99de52f7aea059e7953ee57513a2eef07b07f9a65cf76dc421bfdfae8dfc233" name="dracut-saltboot" arch="noarch">
  <version epoch="0" ver="0.1.1595937550.0285244" rel="lp152.2.7.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
</package>
<package pkgid="0b3d826ffe36c61a7002993bd13d181b677e8944e4bc8ab582cf03160d74966e" name="dracut-saltboot" arch="src">
  <version epoch="0" ver="0.1.1595937550.0285244" rel="lp152.2.7.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
</package>
<package pkgid="dc0e0a7884bf3238e66e47446953ebab0ac8953ce30507a931df883d97c2cf60" name="dracut-saltboot" arch="noarch">
  <version epoch="0" ver="0.1.1599461997.6ce3693" rel="lp152.2.17.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
</package>
<package pkgid="bdbf35a343b4cd2e72b3051839e8e459bdc3ca581b781f5495a116a0c9415773" name="dracut-saltboot" arch="src">
  <version epoch="0" ver="0.1.1599461997.6ce3693" rel="lp152.2.17.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
</package>
<package pkgid="3f5071dfe3d6d51b1c0fb9f5249f0d06e2ea977852bec0c0e242d88b44e0440d" name="dracut-saltboot" arch="noarch">
  <version epoch="0" ver="0.1.1602150122.f08af0a" rel="lp152.2.20.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
</package>
<package pkgid="a43a9e2f6719a0301512e1cd0bb109620f5de8e4457c4d5ed1e8fefafd17bbd7" name="dracut-saltboot" arch="src">
  <version epoch="0" ver="0.1.1602150122.f08af0a" rel="lp152.2.20.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
</package>
<package pkgid="fe5ed16b39cc083972504f8505b6c5d93a4534ddab76d583d8f5df635a834d0a" name="dracut-saltboot" arch="noarch">
  <version epoch="0" ver="0.1.1614159840.ef7cad5" rel="lp152.2.23.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1612180800">- Use saltboot/defaults file
- Update to version 0.1.1614159840.ef7cad5</changelog>
</package>
<package pkgid="bf6ee743674ce5d875f1fc5c5c2583d0a411af4ade701236e63084dd387c0cb1" name="dracut-saltboot" arch="src">
  <version epoch="0" ver="0.1.1614159840.ef7cad5" rel="lp152.2.23.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1612180800">- Use saltboot/defaults file
- Update to version 0.1.1614159840.ef7cad5</changelog>
</package>
<package pkgid="688c9d35b0736c66815ac9e1e57c705ee799146dd2ca7672356cd7d4d2d0dd9f" name="dracut-saltboot" arch="noarch">
  <version epoch="0" ver="0.1.1627546504.96a0b3e" rel="lp152.2.26.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1612180800">- Use saltboot/defaults file
- Update to version 0.1.1614159840.ef7cad5</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1622203200">- Use kernel parameters from PXE formula also for local boot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1627473600">- Force installation of libexpat.so.1 (bsc#1188846)
- Update to version 0.1.1627546504.96a0b3e</changelog>
</package>
<package pkgid="2d417b91b9db3bea606df0fe3bbe301313160679fc8a95990a51d2065b8f4893" name="dracut-saltboot" arch="src">
  <version epoch="0" ver="0.1.1627546504.96a0b3e" rel="lp152.2.26.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1612180800">- Use saltboot/defaults file
- Update to version 0.1.1614159840.ef7cad5</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1622203200">- Use kernel parameters from PXE formula also for local boot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1627473600">- Force installation of libexpat.so.1 (bsc#1188846)
- Update to version 0.1.1627546504.96a0b3e</changelog>
</package>
<package pkgid="4604b3b1b3ccccc45140550366482570eea67dfa6ef9b5265f1abe9803844126" name="dracut-saltboot" arch="noarch">
  <version epoch="0" ver="0.1.1628156312.dbd0dec" rel="lp152.2.29.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1612180800">- Use saltboot/defaults file
- Update to version 0.1.1614159840.ef7cad5</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1622203200">- Use kernel parameters from PXE formula also for local boot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1627473600">- Force installation of libexpat.so.1 (bsc#1188846)
- Update to version 0.1.1627546504.96a0b3e</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1628078400">- Fix dependencies of python libs (bsc#1188846)
- Update to version 0.1.1628156312.dbd0dec</changelog>
</package>
<package pkgid="5210b85d33ff54fc357832c34d99e8f3a84f4405859e6dd4c9cf80a1f49dafbb" name="dracut-saltboot" arch="src">
  <version epoch="0" ver="0.1.1628156312.dbd0dec" rel="lp152.2.29.1"/>
  <changelog author="nadvornik@suse.com" date="1511179200">- new package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1565697600">- Copy saltboot.sh from kiwi-desc-saltboot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1566216000">- Updated for SLES15
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1574251200">- Include swapon in saltboot initrd
- Update to version 0.1.1574263639.c30ba46</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1578571200">- Source wicked network information to access IPADDR and DNSDOMAIN variables
- Replace systemException functions by log and reboot actions
- Stop waiting for devices when dracut timeout is hit
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1580299200">- Add support for FQDN as a terminal name
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1582977600">- Use start event grains to avoid extra grains calls
- Update to version 0.1.1583842676.2fc2fa6</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="Ondrej Holecek &lt;oholecek@suse.com&gt;" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1612180800">- Use saltboot/defaults file
- Update to version 0.1.1614159840.ef7cad5</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1622203200">- Use kernel parameters from PXE formula also for local boot</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1627473600">- Force installation of libexpat.so.1 (bsc#1188846)
- Update to version 0.1.1627546504.96a0b3e</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1628078400">- Fix dependencies of python libs (bsc#1188846)
- Update to version 0.1.1628156312.dbd0dec</changelog>
</package>
<package pkgid="d0895b2aacccea1710715e23e97d5c9a679b3477454d548114e090f00d0dff94" name="dracut-tools" arch="i586">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="fd036d8e950295db952957befddfe5b99631f4b6d9d49c65a068503fe692eb61" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="f1b2c764b77c269755d0daa04f727ce4c1839da7303fe0455d358a72ad662b13" name="dracut-tools" arch="i586">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="b4b7a3c2d43a0fefd3367858ee1a2391b468ccab9ec21394c698d5a01e93781a" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="1181f1813213e6686e44d34fc01d360736b8ae53ed998935ff1a11483d6c1be4" name="dracut-tools" arch="i586">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="07f5e3916dac7548c53d8c2a4a53a91fb0f382b471c7624fd7f1beab16c02c4a" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="5280ba59c9030041551f466efd41e452ae12977ae32ce3bfb90a071421dc9532" name="dracut-tools" arch="i586">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="0c540d458945bf9992a79f3cf36610439c6a06e36f6603edc3bdacb2fd9cc0eb" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="9adedcb3fec78103f7373b954894405407e105ed1ae88750078e62ed7b0e897d" name="dracut-tools" arch="i586">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="4ce994c7c9e8eb12ddabd154f771e15e00e4eab5ec75ec072aca2f52bbe3983a" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="ea3f0f3da24915e6f02be772f8555b479827f45136e9d79badd933afc4049da2" name="dracut-tools" arch="i586">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="4451766b1cd38f456a8479f72b1e1120c1c64f675276420a13a083963a03ee1f" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="306affcff3ab864c368329a6a8ed387563cd9a2675b92eaa93e67e11df41a78e" name="dracut-tools" arch="i586">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="866a4b24d8f28c9a28017b7ad07a02f7719b7820831462b6d05c47448305e406" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="992dfeb708b0c0a5cff8db77309e78b4d7b11ad619e6226c595a97a074e2b82e" name="dracut-tools" arch="i586">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="b559acedff25bd3705b12bc02a30d7ea6cab337b84e592977c8b72779ca2062c" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="d6ab5fd960a53cf0d80bba47ea6418ddd5ed3bd5fb309fd0e14c55d0169ca799" name="dracut-tools" arch="i586">
  <version epoch="0" ver="049.1+suse.188.gbf445638" rel="lp152.2.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
</package>
<package pkgid="9e183fe65902743ec4c61715bc01405e7affd97d4029db18d2ba5f74e9a69a74" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049.1+suse.188.gbf445638" rel="lp152.2.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
</package>
<package pkgid="a9c84d1aad93dd90f70f80efdfac1ac031b8bee185106379d18396fb4d632891" name="dracut-tools" arch="i586">
  <version epoch="0" ver="049.1+suse.203.g8ee14a90" rel="lp152.2.30.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
</package>
<package pkgid="897b3c66015491c56319e6b1951d8abe318f0280dd499a8d6b86c6bcea02e42c" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049.1+suse.203.g8ee14a90" rel="lp152.2.30.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
</package>
<package pkgid="ba300237131cb0b32daddfeb28ca70a55c7f8d42ecfcf8092453947d224c3da0" name="dracut-tools" arch="i586">
  <version epoch="0" ver="049.1+suse.209.gebcf4f33" rel="lp152.2.33.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
</package>
<package pkgid="8a11a54094b5d29bf907347d7dd86b19699bfbb74253ae8965c3380280bb6f3b" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049.1+suse.209.gebcf4f33" rel="lp152.2.33.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
</package>
<package pkgid="418e6436936c1cac16981fe92e312fae3e92641eaee3972c1357338a432e15a0" name="dracut-tools" arch="i586">
  <version epoch="0" ver="049.1+suse.216.gf705637b" rel="lp152.2.36.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
</package>
<package pkgid="17cc0b96ffffeb6529cfec17368807711123ea2ce16f29d1d9cf03577b0da881" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="049.1+suse.216.gf705637b" rel="lp152.2.36.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1620043200">- Update to version 049.1+suse.188.gbf445638:
  * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
</package>
<package pkgid="b7a19542c40986f304e39d6bd33d5279b5d4230dbf7cbaa729a1134b49cadf1c" name="dracut-wireless" arch="noarch">
  <version epoch="0" ver="0.1.1595937550.0285244" rel="lp152.2.3.1"/>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1569931200">- New package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1592827200">- Make sure ifup is scheduled (bsc#1173149)
- Update to version 0.1.1595937550.0285244</changelog>
</package>
<package pkgid="681b518b34ccf181eee271727ea717637ab16a6eccdb342535d495408784759b" name="dracut-wireless" arch="src">
  <version epoch="0" ver="0.1.1595937550.0285244" rel="lp152.2.3.1"/>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1569931200">- New package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1592827200">- Make sure ifup is scheduled (bsc#1173149)
- Update to version 0.1.1595937550.0285244</changelog>
</package>
<package pkgid="2163dda7d1b583059fa270b2e74b3c5a3cd9edb1787c3c982973d504afbedfc2" name="dracut-wireless" arch="noarch">
  <version epoch="0" ver="0.1.1595937550.0285244" rel="lp152.2.6.1"/>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1569931200">- New package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1592827200">- Make sure ifup is scheduled (bsc#1173149)
- Update to version 0.1.1595937550.0285244</changelog>
</package>
<package pkgid="16bdba0a23cce187c9392a274654f85e631ee9c358a8407a40a05914b4d7be3d" name="dracut-wireless" arch="src">
  <version epoch="0" ver="0.1.1595937550.0285244" rel="lp152.2.6.1"/>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1569931200">- New package</changelog>
  <changelog author="Vladimir Nadvornik &lt;nadvornik@suse.com&gt;" date="1592827200">- Make sure ifup is scheduled (bsc#1173149)
- Update to version 0.1.1595937550.0285244</changelog>
</package>
<package pkgid="c67b4ef135db9b970bbab1b099d9c3eca393b24266f4a7841b264acbdcc48e71" name="drbd" arch="src">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983" rel="lp152.2.12.2"/>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1616760000">- bsc#1183970, disconnect when invalid dual primaries
  Add patch disconnect-invalid-two-primaries.patch</changelog>
</package>
<package pkgid="0fe0f81189d90c891ebf6b518d75868c9e653f4a6b3d2dda444531cfa8be28b6" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983" rel="lp152.2.12.2"/>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1616760000">- bsc#1183970, disconnect when invalid dual primaries
  Add patch disconnect-invalid-two-primaries.patch</changelog>
</package>
<package pkgid="71b8e4652e20586cf74a3a9720cc73cf3b3f211b73889b8efe2dd703a41c26c5" name="drbd" arch="src">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983" rel="lp152.2.2.1"/>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
</package>
<package pkgid="90581c0ef968e3dd3fa8d18b892f375a8fab96a13011061b3a716bdc955eb361" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983" rel="lp152.2.2.1"/>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
</package>
<package pkgid="c7f779b7faec0e5e5bc8d38009a7604e4ce8dc2e20786af3eab95715b7a6de45" name="drbd" arch="src">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983" rel="lp152.2.5.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="477520a291df904c39250d58c76975c78d4e1903d1e1bcdb9898eb759dceeb1d" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983" rel="lp152.2.5.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="d505303d8de214dc55bb3a11a77c1553b135cc84b2084ecc2a7b13e2ad1fd635" name="drbd" arch="src">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983" rel="lp152.2.9.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="7ff2fb850a171b6152835c65134ece4abb7ea436863ed05a22bd15b2eca8229f" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983" rel="lp152.2.9.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="a84a5b64f3017bf993b697eca650f8d4c86c01b1aa6e3b8618a479f605666c89" name="drbd-formula" arch="noarch">
  <version epoch="0" ver="0.4.0+git.1611073587.55c0dfd" rel="lp152.2.3.1"/>
  <changelog author="nwang@suse.com" date="1557748800">- Initial version</changelog>
  <changelog author="nwang@suse.com" date="1557921600">- Version 0.2.0
  * Add description in pillar.example.
  * Support more parameters in global_common.conf
  * Fix bugs in initial sync.
  * Add promote/demote state.
  * Use grains['host'] for primary node.
- Basic manual test PASSED</changelog>
  <changelog author="nwang@suse.com" date="1559736000">- Version 0.2.1
  * Polish the README
  * Add travis file for auto package to obs
  * Change node names in example
  * Modify state ID to avoid conflict of other formulas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1561377600">- Version 0.2.2
  * Support make file system after initialization
  * Support mount to specific folder
  * Add habootstrap-formula pillar/tempalte</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1562587200">- Version 0.3.0, jsc#SLE-6970
  * Move to SUSE org
  * Add SUSE manager support</changelog>
  <changelog author="Diego Akechi &lt;dakechi@suse.com&gt;" date="1563796800">- Version 0.3.1
  * Change the requires to salt-formulas-configuration as this is
    the virtual "provides" shared by salt and SUMA to guarantee that
    the formula works integrated with both (not at the same time).
    (boo#1142306)
  * Change the directory permission to avoid file conflicts with
    SUMA.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1564056000">- Version 0.3.2, boo#1142762
  * Restructure the deploy and examples directories
  * Add examples of using NFS formula
  * Fix the issue of mkfs and mount NFS share
  * Polish the form.yml based on SUMA4.0, change some default values.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1565179200">- Version 0.3.3
  * Add prefix to ID to avoid conflicts
  * Install xfsprogs when need to format xfs</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1574942400">- Version 0.3.8
  * Add json rendering to jinja templates for old salt versions</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576670400">- Version 0.3.9
  * Make file system after initial resync finished
  * Sleep longer in case sync source change state late</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577102400">- Version 0.3.10
  * With the fix of salt-shaptools 0.2.9, doesn't need to
  estimate a long time for write I/O completion.
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1611057600">- Version bump 0.4.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
</package>
<package pkgid="59d90ac7be2a1cba07fb505f48448b708a7e8508b7f04623d43dde5ffcc99a29" name="drbd-formula" arch="src">
  <version epoch="0" ver="0.4.0+git.1611073587.55c0dfd" rel="lp152.2.3.1"/>
  <changelog author="nwang@suse.com" date="1557748800">- Initial version</changelog>
  <changelog author="nwang@suse.com" date="1557921600">- Version 0.2.0
  * Add description in pillar.example.
  * Support more parameters in global_common.conf
  * Fix bugs in initial sync.
  * Add promote/demote state.
  * Use grains['host'] for primary node.
- Basic manual test PASSED</changelog>
  <changelog author="nwang@suse.com" date="1559736000">- Version 0.2.1
  * Polish the README
  * Add travis file for auto package to obs
  * Change node names in example
  * Modify state ID to avoid conflict of other formulas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1561377600">- Version 0.2.2
  * Support make file system after initialization
  * Support mount to specific folder
  * Add habootstrap-formula pillar/tempalte</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1562587200">- Version 0.3.0, jsc#SLE-6970
  * Move to SUSE org
  * Add SUSE manager support</changelog>
  <changelog author="Diego Akechi &lt;dakechi@suse.com&gt;" date="1563796800">- Version 0.3.1
  * Change the requires to salt-formulas-configuration as this is
    the virtual "provides" shared by salt and SUMA to guarantee that
    the formula works integrated with both (not at the same time).
    (boo#1142306)
  * Change the directory permission to avoid file conflicts with
    SUMA.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1564056000">- Version 0.3.2, boo#1142762
  * Restructure the deploy and examples directories
  * Add examples of using NFS formula
  * Fix the issue of mkfs and mount NFS share
  * Polish the form.yml based on SUMA4.0, change some default values.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1565179200">- Version 0.3.3
  * Add prefix to ID to avoid conflicts
  * Install xfsprogs when need to format xfs</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1574942400">- Version 0.3.8
  * Add json rendering to jinja templates for old salt versions</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576670400">- Version 0.3.9
  * Make file system after initial resync finished
  * Sleep longer in case sync source change state late</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577102400">- Version 0.3.10
  * With the fix of salt-shaptools 0.2.9, doesn't need to
  estimate a long time for write I/O completion.
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1611057600">- Version bump 0.4.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
</package>
<package pkgid="f948800d6c804df9539bf3a670e1be3e823db219905b7d3fc14494adc99a1f82" name="drbd-formula" arch="noarch">
  <version epoch="0" ver="0.4.2+git.1616116365.1e3ab34" rel="lp152.2.6.1"/>
  <changelog author="nwang@suse.com" date="1557748800">- Initial version</changelog>
  <changelog author="nwang@suse.com" date="1557921600">- Version 0.2.0
  * Add description in pillar.example.
  * Support more parameters in global_common.conf
  * Fix bugs in initial sync.
  * Add promote/demote state.
  * Use grains['host'] for primary node.
- Basic manual test PASSED</changelog>
  <changelog author="nwang@suse.com" date="1559736000">- Version 0.2.1
  * Polish the README
  * Add travis file for auto package to obs
  * Change node names in example
  * Modify state ID to avoid conflict of other formulas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1561377600">- Version 0.2.2
  * Support make file system after initialization
  * Support mount to specific folder
  * Add habootstrap-formula pillar/tempalte</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1562587200">- Version 0.3.0, jsc#SLE-6970
  * Move to SUSE org
  * Add SUSE manager support</changelog>
  <changelog author="Diego Akechi &lt;dakechi@suse.com&gt;" date="1563796800">- Version 0.3.1
  * Change the requires to salt-formulas-configuration as this is
    the virtual "provides" shared by salt and SUMA to guarantee that
    the formula works integrated with both (not at the same time).
    (boo#1142306)
  * Change the directory permission to avoid file conflicts with
    SUMA.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1564056000">- Version 0.3.2, boo#1142762
  * Restructure the deploy and examples directories
  * Add examples of using NFS formula
  * Fix the issue of mkfs and mount NFS share
  * Polish the form.yml based on SUMA4.0, change some default values.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1565179200">- Version 0.3.3
  * Add prefix to ID to avoid conflicts
  * Install xfsprogs when need to format xfs</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1574942400">- Version 0.3.8
  * Add json rendering to jinja templates for old salt versions</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576670400">- Version 0.3.9
  * Make file system after initial resync finished
  * Sleep longer in case sync source change state late</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577102400">- Version 0.3.10
  * With the fix of salt-shaptools 0.2.9, doesn't need to
  estimate a long time for write I/O completion.
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1611057600">- Version bump 0.4.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1614168000">- Version bump 0.4.1
  * Support different backing device per node
  (bsc#1179529)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1615464000">- Version bump 0.4.2
  * Fix github issue#15
  * Rename examples to templates</changelog>
</package>
<package pkgid="85b41ddfd84b549cd8193dcf3242dfbf2991e433035adc8c75de3fcf0e410e40" name="drbd-formula" arch="src">
  <version epoch="0" ver="0.4.2+git.1616116365.1e3ab34" rel="lp152.2.6.1"/>
  <changelog author="nwang@suse.com" date="1557748800">- Initial version</changelog>
  <changelog author="nwang@suse.com" date="1557921600">- Version 0.2.0
  * Add description in pillar.example.
  * Support more parameters in global_common.conf
  * Fix bugs in initial sync.
  * Add promote/demote state.
  * Use grains['host'] for primary node.
- Basic manual test PASSED</changelog>
  <changelog author="nwang@suse.com" date="1559736000">- Version 0.2.1
  * Polish the README
  * Add travis file for auto package to obs
  * Change node names in example
  * Modify state ID to avoid conflict of other formulas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1561377600">- Version 0.2.2
  * Support make file system after initialization
  * Support mount to specific folder
  * Add habootstrap-formula pillar/tempalte</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1562587200">- Version 0.3.0, jsc#SLE-6970
  * Move to SUSE org
  * Add SUSE manager support</changelog>
  <changelog author="Diego Akechi &lt;dakechi@suse.com&gt;" date="1563796800">- Version 0.3.1
  * Change the requires to salt-formulas-configuration as this is
    the virtual "provides" shared by salt and SUMA to guarantee that
    the formula works integrated with both (not at the same time).
    (boo#1142306)
  * Change the directory permission to avoid file conflicts with
    SUMA.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1564056000">- Version 0.3.2, boo#1142762
  * Restructure the deploy and examples directories
  * Add examples of using NFS formula
  * Fix the issue of mkfs and mount NFS share
  * Polish the form.yml based on SUMA4.0, change some default values.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1565179200">- Version 0.3.3
  * Add prefix to ID to avoid conflicts
  * Install xfsprogs when need to format xfs</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1574942400">- Version 0.3.8
  * Add json rendering to jinja templates for old salt versions</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576670400">- Version 0.3.9
  * Make file system after initial resync finished
  * Sleep longer in case sync source change state late</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577102400">- Version 0.3.10
  * With the fix of salt-shaptools 0.2.9, doesn't need to
  estimate a long time for write I/O completion.
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="Xabier Arbulu &lt;xarbulu@suse.com&gt;" date="1611057600">- Version bump 0.4.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1614168000">- Version bump 0.4.1
  * Support different backing device per node
  (bsc#1179529)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1615464000">- Version bump 0.4.2
  * Fix github issue#15
  * Rename examples to templates</changelog>
</package>
<package pkgid="6b3c56b19b7b9e3bbd7971a8443ffaae160f521b67a5323f0e9a3b4d5f7a7620" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.36" rel="lp152.2.2.1"/>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
</package>
<package pkgid="89e053a8ffe753ed2ae3d7cc7dd4a0ef0eb90a766bccdbc5921f2148379bac09" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.50" rel="lp152.2.5.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="38a9f9d113641c6c8aaaf10e7eb77511363589bf9e3ce415737bcbf58ac658f3" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.69" rel="lp152.2.9.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="100ec7a5a29a611027468eb250578cbd553bc037f4d47519d9269b5709080cf5" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.72" rel="lp152.2.12.2"/>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1616760000">- bsc#1183970, disconnect when invalid dual primaries
  Add patch disconnect-invalid-two-primaries.patch</changelog>
</package>
<package pkgid="4c9b764e0324559765409112f6a34059ecf0eb638776c35dadc5163a5c968f07" name="drbd-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.36" rel="lp152.2.2.1"/>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
</package>
<package pkgid="d30ccf1d2e1d305c811ad8218c2f770965340f4eab1b7fb8f96363644914ad38" name="drbd-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.50" rel="lp152.2.5.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="9c2e628e91ebb2c6eacd02a859d1514a0c02487cf20dbf16be66aca56d23bd79" name="drbd-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.69" rel="lp152.2.9.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="4248ea8aa01cedb563212505d61b4c17986838911f7171ccda5fc284a98ffebe" name="drbd-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.72" rel="lp152.2.12.2"/>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1616760000">- bsc#1183970, disconnect when invalid dual primaries
  Add patch disconnect-invalid-two-primaries.patch</changelog>
</package>
<package pkgid="b3b256e76daa6b9911d07ec9c264836beb09bc64d4533df8d57f4af29377e840" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.13.0" rel="lp152.2.12.1"/>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1602763200">- Back port bsc#1177531, move block-drbd back to /etc/xen/scripts
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1613736000">- bsc#1182361, pacemaker2 compat issue for crm-fence-peer.9
  use --xml format of crm_mon
  Add patch crm-fence-peer-pacemaker2-format.patch
  Add patch crm-fence-peer-pacemaker2-use-xml.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1619179200">- bsc#1185132, all binaries in SLE-15 are position independent
  Add patch pie-fix.patch</changelog>
</package>
<package pkgid="a3dedf352d1b2ed42845bed4cf4d1adc31d277d7f18a1e50614b7ba83eee3e63" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.13.0" rel="lp152.2.12.1"/>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1602763200">- Back port bsc#1177531, move block-drbd back to /etc/xen/scripts
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1613736000">- bsc#1182361, pacemaker2 compat issue for crm-fence-peer.9
  use --xml format of crm_mon
  Add patch crm-fence-peer-pacemaker2-format.patch
  Add patch crm-fence-peer-pacemaker2-use-xml.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1619179200">- bsc#1185132, all binaries in SLE-15 are position independent
  Add patch pie-fix.patch</changelog>
</package>
<package pkgid="4969b50c4cc1fdb9ef3f26aa0768766cdce3c7f7f1ef07361715d42c12a7f29b" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.13.0" rel="lp152.2.3.1"/>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
</package>
<package pkgid="94851667edc881f9bb2cc0923101af5966eb63f55f529fe31c5242dcf744c0f5" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.13.0" rel="lp152.2.3.1"/>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
</package>
<package pkgid="a5d55d79bb851cf136c49b9f3484c4325bb419a7bbd56c30a1f4186d6826b6d5" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.13.0" rel="lp152.2.6.1"/>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1602763200">- Back port bsc#1177531, move block-drbd back to /etc/xen/scripts
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
</package>
<package pkgid="dd367dc1f01ec8f670dddd8ea584fc2eb7ea29e75b45f6715c699605f85448fe" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.13.0" rel="lp152.2.6.1"/>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1602763200">- Back port bsc#1177531, move block-drbd back to /etc/xen/scripts
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
</package>
<package pkgid="14fe0ed888860e26ffe184513adf2997fb0ca8891b8b4c9497e8bcbaa8ff36b7" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.13.0" rel="lp152.2.9.1"/>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1602763200">- Back port bsc#1177531, move block-drbd back to /etc/xen/scripts
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1613736000">- bsc#1182361, pacemaker2 compat issue for crm-fence-peer.9
  use --xml format of crm_mon
  Add patch crm-fence-peer-pacemaker2-format.patch
  Add patch crm-fence-peer-pacemaker2-use-xml.patch</changelog>
</package>
<package pkgid="19d5ef92f57221cccc965a451db4678a2a4b7f1f1718f12d700b35537ae51666" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.13.0" rel="lp152.2.9.1"/>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1602763200">- Back port bsc#1177531, move block-drbd back to /etc/xen/scripts
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1613736000">- bsc#1182361, pacemaker2 compat issue for crm-fence-peer.9
  use --xml format of crm_mon
  Add patch crm-fence-peer-pacemaker2-format.patch
  Add patch crm-fence-peer-pacemaker2-use-xml.patch</changelog>
</package>
<package pkgid="8f578df2dd5202b031b257b182bb720f215cf9d36b2ea6be1319f0c3ed15deee" name="dtc" arch="i586">
  <version epoch="0" ver="1.5.1" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1447070400">- Update to version 1.4.1
  * No changelog available
- Use download Url as source
- Use original project page as home page</changelog>
  <changelog author="mpluskal@suse.com" date="1449316800">- Cleanup spec file with spec-cleaner
- Dont include soname version in devel package name</changelog>
  <changelog author="mpluskal@suse.com" date="1449921600">- Obsolete old devel package as well</changelog>
  <changelog author="jloeser@suse.com" date="1486382400">- version update to 1.4.2
  * including patches up to git commit 3b9c9709
  * Fix NULL pointer use in dtlabel + dtref case
  * fdtdump: check fdt if not in scanning mode
  * Fix memory leak in character literal parsing
  * Don't always generate __symbols__ for plugins
  * Plugin and fixup support
  * fix fdt_stringlist_search()
  * fix fdt_stringlist_count()
  * improve tests
  * minor bugfixes/typos
  * including symbols in version.lds
  * no changelog available
- modified patches:
  * use-tx-as-the-type-specifier-instead-of-zx.patch</changelog>
  <changelog author="jloeser@suse.com" date="1488542400">- version update to 1.4.3
  * Add printf format attributes
  * Correct some broken printf() like format mismatches
  * libfdt: Add fdt_setprop_empty()
  * libfdt: Remove undefined behaviour setting empty properties
  * Print output filename as part of warning messages
  * dtc: Use streq() in preference to strcmp()
  * checks: Add Warning for stricter node name character checking
  * checks: Add Warning for stricter property name character checking
  * dtc: pos parameter to srcpos_string() can't be NULL
  * livetree.c: Fix memory leak</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Update to version 1.4.4:
  * fdtput: Remove star from value_len documentation
  * fdtget: Use @return to document the return value
  * tests: Make realloc_fdt() really allocate *fdt
  * libfdt: overlay: Check the value of the right variable
  * dtc: Simplify asm_emit_string() implementation
  * libfdt: Change names of sparse helper macros
  * Fix assorted sparse warnings
  * Clean up gcc attributes
  * dtc: Don't abuse struct fdt_reserve_entry
- Refresh patches
- Make building more verbose
- Run tests</changelog>
  <changelog author="josef.moellers@suse.com" date="1544702400">- Upgrade to version 1.4.7:
  * checks.c: Overlay fragments are a special case
  * checks.c: added handling of various busses (eg PCI, simple,
    i2c, SPI)
  * checks.c: added some plausibility and syntax checks mainly
    for device proerties.
  * dtc.c: annotate .dts with input source location
  * some code restructuring, cosmetic changes.
  * decumentation cleanup and update
  * some more tests added.</changelog>
  <changelog author="josef.moellers@suse.com" date="1552651200">- Upgrade to version 1.5.0 (bsc#1153301):
  * Added i2c-bus and spi-bus support
  * New "-T" option: "Annotate output .dts with input source file
    and line"
  * Added YAML output format
  * Record source positions
  * Use inttypes.h macros for printing.
  * Fix some minor bugs which may lead to SIGSEGV.
  * Adjusted source URL to working path
  [bug#1128943, use-tx-as-the-type-specifier-instead-of-zx.patch]</changelog>
  <changelog author="Andreas F&#xE4;rber &lt;afaerber@suse.de&gt;" date="1572091200">- Enable YAML output format</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1572436800">- update to 1.5.1:
  * Numerous assorted bugfixes
  * Add a new fdt_create_with_flags() function, and a
    FDT_CREATE_FLAG_NO_NAME_DEDUP flag which improves speed at the
    cost of tree size by not deduplicating property names in the
    strings section
  * Run tests against shared library, so it will catch the common
    mistake of not adding new symbols to the versioning script
  * Add a number of missing symbols to versioning script
  * Use Python3 by default for pylibfdt
  * New fdt_append_addrrange() function in libfdt
- remove dtc-license.patch (upstream)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1572436801">- Enable python3 binding in python3-libfdt</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1572436802">- switch to building python3 bindings using setuptools to avoid
  patching</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1619092800">- explicitly pass -pie in CFLAGS, since the build system explicitly passes
  - fPIC, which breaks our gcc-PIE profile. This makes all packaged binaries
  PIE-executables (bsc#1184122).</changelog>
</package>
<package pkgid="f8737c153b8b16f9a93655ffffc3f2223623d3dbc11d5fdd9f3426d665867111" name="dtc" arch="src">
  <version epoch="0" ver="1.5.1" rel="lp152.2.3.1"/>
  <changelog author="k0da@opensuse.org" date="1309521600">- libfdt1 subpackage
  libfdt1-devel
- dtc 1.3.0 update
  dtc: Add code to make diffing trees easier
  dtc: Extend and better test dtbs_equal utility programs
  dtc: Audit and fix valgrind errors
  Assorted cleanups and extensions for ftdump
  Fix dtc bugs for 64-bit compile
- fix URL as mntioned site is no longer available</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Implement baselibs config</changelog>
  <changelog author="afaerber@suse.de" date="1369396800">- Use %makeinstall in place of %make_install, for SLE_11_SP2</changelog>
  <changelog author="afaerber@suse.de" date="1371556800">- Recent Git versions of dtc install libfdt_env.h, so that
  QEMU 1.6.0 will require this file. Install it for compatibility.</changelog>
  <changelog author="dmueller@suse.com" date="1371643200">- rename ftdump to dtc-ftdump to avoid conflict with ft2demos</changelog>
  <changelog author="dmueller@suse.com" date="1373371200">- update to 1.4.0 (bnc#826457):
- dtc-check.patch, dtc-flattree.patch: Remove</changelog>
  <changelog author="ro@suse.de" date="1394193600">- add use-tx-as-the-type-specifier-instead-of-zx.patch
  taken from fedora to fix build on s390</changelog>
  <changelog author="p.drouand@gmail.com" date="1447070400">- Update to version 1.4.1
  * No changelog available
- Use download Url as source
- Use original project page as home page</changelog>
  <changelog author="mpluskal@suse.com" date="1449316800">- Cleanup spec file with spec-cleaner
- Dont include soname version in devel package name</changelog>
  <changelog author="mpluskal@suse.com" date="1449921600">- Obsolete old devel package as well</changelog>
  <changelog author="jloeser@suse.com" date="1486382400">- version update to 1.4.2
  * including patches up to git commit 3b9c9709
  * Fix NULL pointer use in dtlabel + dtref case
  * fdtdump: check fdt if not in scanning mode
  * Fix memory leak in character literal parsing
  * Don't always generate __symbols__ for plugins
  * Plugin and fixup support
  * fix fdt_stringlist_search()
  * fix fdt_stringlist_count()
  * improve tests
  * minor bugfixes/typos
  * including symbols in version.lds
  * no changelog available
- modified patches:
  * use-tx-as-the-type-specifier-instead-of-zx.patch</changelog>
  <changelog author="jloeser@suse.com" date="1488542400">- version update to 1.4.3
  * Add printf format attributes
  * Correct some broken printf() like format mismatches
  * libfdt: Add fdt_setprop_empty()
  * libfdt: Remove undefined behaviour setting empty properties
  * Print output filename as part of warning messages
  * dtc: Use streq() in preference to strcmp()
  * checks: Add Warning for stricter node name character checking
  * checks: Add Warning for stricter property name character checking
  * dtc: pos parameter to srcpos_string() can't be NULL
  * livetree.c: Fix memory leak</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Update to version 1.4.4:
  * fdtput: Remove star from value_len documentation
  * fdtget: Use @return to document the return value
  * tests: Make realloc_fdt() really allocate *fdt
  * libfdt: overlay: Check the value of the right variable
  * dtc: Simplify asm_emit_string() implementation
  * libfdt: Change names of sparse helper macros
  * Fix assorted sparse warnings
  * Clean up gcc attributes
  * dtc: Don't abuse struct fdt_reserve_entry
- Refresh patches
- Make building more verbose
- Run tests</changelog>
  <changelog author="josef.moellers@suse.com" date="1544702400">- Upgrade to version 1.4.7:
  * checks.c: Overlay fragments are a special case
  * checks.c: added handling of various busses (eg PCI, simple,
    i2c, SPI)
  * checks.c: added some plausibility and syntax checks mainly
    for device proerties.
  * dtc.c: annotate .dts with input source location
  * some code restructuring, cosmetic changes.
  * decumentation cleanup and update
  * some more tests added.</changelog>
  <changelog author="josef.moellers@suse.com" date="1552651200">- Upgrade to version 1.5.0 (bsc#1153301):
  * Added i2c-bus and spi-bus support
  * New "-T" option: "Annotate output .dts with input source file
    and line"
  * Added YAML output format
  * Record source positions
  * Use inttypes.h macros for printing.
  * Fix some minor bugs which may lead to SIGSEGV.
  * Adjusted source URL to working path
  [bug#1128943, use-tx-as-the-type-specifier-instead-of-zx.patch]</changelog>
  <changelog author="Andreas F&#xE4;rber &lt;afaerber@suse.de&gt;" date="1572091200">- Enable YAML output format</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1572436800">- update to 1.5.1:
  * Numerous assorted bugfixes
  * Add a new fdt_create_with_flags() function, and a
    FDT_CREATE_FLAG_NO_NAME_DEDUP flag which improves speed at the
    cost of tree size by not deduplicating property names in the
    strings section
  * Run tests against shared library, so it will catch the common
    mistake of not adding new symbols to the versioning script
  * Add a number of missing symbols to versioning script
  * Use Python3 by default for pylibfdt
  * New fdt_append_addrrange() function in libfdt
- remove dtc-license.patch (upstream)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1572436801">- Enable python3 binding in python3-libfdt</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1572436802">- switch to building python3 bindings using setuptools to avoid
  patching</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1619092800">- explicitly pass -pie in CFLAGS, since the build system explicitly passes
  - fPIC, which breaks our gcc-PIE profile. This makes all packaged binaries
  PIE-executables (bsc#1184122).</changelog>
</package>
<package pkgid="c9ba1df7ed7fc0683083c9002b2d8c645bb5180588ac9989b3ad13f027924904" name="dtc" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1447070400">- Update to version 1.4.1
  * No changelog available
- Use download Url as source
- Use original project page as home page</changelog>
  <changelog author="mpluskal@suse.com" date="1449316800">- Cleanup spec file with spec-cleaner
- Dont include soname version in devel package name</changelog>
  <changelog author="mpluskal@suse.com" date="1449921600">- Obsolete old devel package as well</changelog>
  <changelog author="jloeser@suse.com" date="1486382400">- version update to 1.4.2
  * including patches up to git commit 3b9c9709
  * Fix NULL pointer use in dtlabel + dtref case
  * fdtdump: check fdt if not in scanning mode
  * Fix memory leak in character literal parsing
  * Don't always generate __symbols__ for plugins
  * Plugin and fixup support
  * fix fdt_stringlist_search()
  * fix fdt_stringlist_count()
  * improve tests
  * minor bugfixes/typos
  * including symbols in version.lds
  * no changelog available
- modified patches:
  * use-tx-as-the-type-specifier-instead-of-zx.patch</changelog>
  <changelog author="jloeser@suse.com" date="1488542400">- version update to 1.4.3
  * Add printf format attributes
  * Correct some broken printf() like format mismatches
  * libfdt: Add fdt_setprop_empty()
  * libfdt: Remove undefined behaviour setting empty properties
  * Print output filename as part of warning messages
  * dtc: Use streq() in preference to strcmp()
  * checks: Add Warning for stricter node name character checking
  * checks: Add Warning for stricter property name character checking
  * dtc: pos parameter to srcpos_string() can't be NULL
  * livetree.c: Fix memory leak</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Update to version 1.4.4:
  * fdtput: Remove star from value_len documentation
  * fdtget: Use @return to document the return value
  * tests: Make realloc_fdt() really allocate *fdt
  * libfdt: overlay: Check the value of the right variable
  * dtc: Simplify asm_emit_string() implementation
  * libfdt: Change names of sparse helper macros
  * Fix assorted sparse warnings
  * Clean up gcc attributes
  * dtc: Don't abuse struct fdt_reserve_entry
- Refresh patches
- Make building more verbose
- Run tests</changelog>
  <changelog author="josef.moellers@suse.com" date="1544702400">- Upgrade to version 1.4.7:
  * checks.c: Overlay fragments are a special case
  * checks.c: added handling of various busses (eg PCI, simple,
    i2c, SPI)
  * checks.c: added some plausibility and syntax checks mainly
    for device proerties.
  * dtc.c: annotate .dts with input source location
  * some code restructuring, cosmetic changes.
  * decumentation cleanup and update
  * some more tests added.</changelog>
  <changelog author="josef.moellers@suse.com" date="1552651200">- Upgrade to version 1.5.0 (bsc#1153301):
  * Added i2c-bus and spi-bus support
  * New "-T" option: "Annotate output .dts with input source file
    and line"
  * Added YAML output format
  * Record source positions
  * Use inttypes.h macros for printing.
  * Fix some minor bugs which may lead to SIGSEGV.
  * Adjusted source URL to working path
  [bug#1128943, use-tx-as-the-type-specifier-instead-of-zx.patch]</changelog>
  <changelog author="Andreas F&#xE4;rber &lt;afaerber@suse.de&gt;" date="1572091200">- Enable YAML output format</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1572436800">- update to 1.5.1:
  * Numerous assorted bugfixes
  * Add a new fdt_create_with_flags() function, and a
    FDT_CREATE_FLAG_NO_NAME_DEDUP flag which improves speed at the
    cost of tree size by not deduplicating property names in the
    strings section
  * Run tests against shared library, so it will catch the common
    mistake of not adding new symbols to the versioning script
  * Add a number of missing symbols to versioning script
  * Use Python3 by default for pylibfdt
  * New fdt_append_addrrange() function in libfdt
- remove dtc-license.patch (upstream)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1572436801">- Enable python3 binding in python3-libfdt</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1572436802">- switch to building python3 bindings using setuptools to avoid
  patching</changelog>
  <changelog author="Matthias Gerstner &lt;matthias.gerstner@suse.com&gt;" date="1619092800">- explicitly pass -pie in CFLAGS, since the build system explicitly passes
  - fPIC, which breaks our gcc-PIE profile. This makes all packaged binaries
  PIE-executables (bsc#1184122).</changelog>
</package>
<package pkgid="e8982e03f4ec3ffd690bb31f8a405af64ad930968899921819ac859eb12a9462" name="dwarves" arch="i586">
  <version epoch="0" ver="1.19" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1413374400">- Drop libdwarf dependency; it is not needed for build (libdw
  is used instead)</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add dwarves-no-DW_TAG_mutable.patch: Fix build with newer
  libdwarf versions: DW_TAG_mutable_type was a mistake in an early
  DWARFv3 draft and was removed in the final version.</changelog>
  <changelog author="mpluskal@suse.com" date="1485950400">- Use cmake macros</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- dwarves needs elfutils to have the EBL plugins available
  to carry out its work. [boo#1049871]
- Update to new upstream release 1.11
  * dwarf_loader: Do not stop processing after finding
    unsupported tags
  * dwarf_loader: Support DW_FORM_data{4,8} for reading class
    member offsets
  * dwarf_fprintf: Handle DW_TAG_GNU_call_site{_parameter}
  * dwarf_loader: Add support for DW_TAG_restrict_type
  * dwarf_loader: Initial support for DW_TAG_unspecified_type
- Remove dwarves-no-DW_TAG_mutable.patch (already applied)</changelog>
  <changelog author="jengelh@inai.de" date="1534420800">- Update to new upstream release 1.12
  * Added a BTF (BPF Type Format) encoder
  * Initial support for DW_TAG_partial_unit
  * Print cacheline boundaries in multiple union members
  * Show offsets at union members</changelog>
  <changelog author="dsterba@suse.cz" date="1556712000">- version 1.13
  - Use of the recently introduced BTF deduplication algorithm
  - Introduce a 'btfdiff' utility
  - Add a BTF loader, i.e. 'pahole -F btf' allows pretty printing of structs
    and unions in the same fashion as with DWARF info
  - Better union support
  - Infer __attribute__((__packed__)) when structs have no alignment holes
  - Support DWARF5's DW_AT_alignment
  - Add a '--compile' option to 'pfunct'</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561636800">- Update to new upstream release 1.15
  * Avoid null dereference with NULL configs
  * Fixup printing "const" early with "const void"
  * Fix recursively printing named structs in --expand_types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576497600">- Update to release 1.16
  * btf_loader: Add support for BTF_KIND_FUNC</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584273600">- Update to release 1.17
  * Support raw BTF as available in /sys/kernel/btf/vmlinux.
  * Make --find_pointers_to consider unions.
  * Make --contains and --find_pointers_to honour --unions.
  * Add support for finding pointers to void.
  * Make --contains and --find_pointers_to to work with base types.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1589889600">- Don't require libebl-plugins on suse_version &gt;= 1550</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1599048000">- add libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1600689600">- Backport fixes for segfault when processing dwz-ed kernel
  [bsc#1176095,https://github.com/acmel/dwarves/issues/10].
  * dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  * dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 1.18
  * pahole now should be segfault free when handling gdb test
    suit DWARF files, including ADA, FORTRAN, rust and dwp
    compressed files (the latter is refused).
  * Bail out on partial units for now, avoiding segfaults.
- Drop
  dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch,
  dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  (merged)
- Add forced ELF symvers because of ABI breaks</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603800000">- update to 1.18_15g040fd7f (bsc#1177921):
  * btf_encoder: Support cross-compiled ELF binaries with different endianness
  * strings: use BTF's string APIs for strings management
  * strings: Rename strings.h to avoid clashing with /usr/include/strings.h
  * dwarf_loader: increase the size of lookup hash map
  * btf_encoder: revamp how per-CPU variables are encoded
  * btf_encoder: Discard CUs after BTF encoding
  * btf_encoder: Fix emitting __ARRAY_SIZE_TYPE__ as index range type
  * btf_encoder: Use libbpf APIs to encode BTF type info
  * btf_loader: Use libbpf to load BTF
  * dwarves: Expose and maintain active debug info loader operations
  * btf_encoder: detect BTF encoding errors and exit
  * libbpf: Update to latest libbpf version
  * dwarf_loader: Conditionally define DW_AT_alignment
  * pahole: Implement --packed
  * man-pages: Fix 'coimbine' typo
- remove libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch (upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603800001">- Add _service file / move to 1.18.g19 (863e6f0f)
  * btf_encoder: Ignore zero-sized ELF symbols</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606219200">- Update to release 1.19
  * Support for split BTF.
  * Support cross-compiled ELF binaries with different endianness.
  * Support for showing typedefs for anonymous types, like structs,
    unions and enums.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1609934400">- Drop the version requirement of libdw-devel
  + DW_AT_alignment is defined in 1.19 so dwarves now is compatible
    with older libdw.</changelog>
</package>
<package pkgid="a96872f5d6d72fb4ce4b67c717d28c06a8042ecbc1b5b04c12e391d139e607f9" name="dwarves" arch="src">
  <version epoch="0" ver="1.19" rel="lp152.4.3.1"/>
  <changelog author="jengelh@medozas.de" date="1313064000">- Update to new upstream release 1.9
  * Add the "scncopy" tool - like object copy but tries not to change
  section content
  * pfunct: Introduce the -P option
  * dwarves fprintf: Add extra GNU tags
- Update group and description with something more detailed
- Remove redundant %clean section
- Strip duplicate changelog
- Remove redundant manual requires on libraries
- Update URL to acme's new location</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Implement baselibs config</changelog>
  <changelog author="jengelh@inai.de" date="1338984000">- Update to new upstream release 1.10
  * Initial DWARF4 support
  * Add stubs for some new GNU tags
  * Fix a crash when pahole is called with -R -S</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Drop libdwarf dependency; it is not needed for build (libdw
  is used instead)</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add dwarves-no-DW_TAG_mutable.patch: Fix build with newer
  libdwarf versions: DW_TAG_mutable_type was a mistake in an early
  DWARFv3 draft and was removed in the final version.</changelog>
  <changelog author="mpluskal@suse.com" date="1485950400">- Use cmake macros</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- dwarves needs elfutils to have the EBL plugins available
  to carry out its work. [boo#1049871]
- Update to new upstream release 1.11
  * dwarf_loader: Do not stop processing after finding
    unsupported tags
  * dwarf_loader: Support DW_FORM_data{4,8} for reading class
    member offsets
  * dwarf_fprintf: Handle DW_TAG_GNU_call_site{_parameter}
  * dwarf_loader: Add support for DW_TAG_restrict_type
  * dwarf_loader: Initial support for DW_TAG_unspecified_type
- Remove dwarves-no-DW_TAG_mutable.patch (already applied)</changelog>
  <changelog author="jengelh@inai.de" date="1534420800">- Update to new upstream release 1.12
  * Added a BTF (BPF Type Format) encoder
  * Initial support for DW_TAG_partial_unit
  * Print cacheline boundaries in multiple union members
  * Show offsets at union members</changelog>
  <changelog author="dsterba@suse.cz" date="1556712000">- version 1.13
  - Use of the recently introduced BTF deduplication algorithm
  - Introduce a 'btfdiff' utility
  - Add a BTF loader, i.e. 'pahole -F btf' allows pretty printing of structs
    and unions in the same fashion as with DWARF info
  - Better union support
  - Infer __attribute__((__packed__)) when structs have no alignment holes
  - Support DWARF5's DW_AT_alignment
  - Add a '--compile' option to 'pfunct'</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561636800">- Update to new upstream release 1.15
  * Avoid null dereference with NULL configs
  * Fixup printing "const" early with "const void"
  * Fix recursively printing named structs in --expand_types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576497600">- Update to release 1.16
  * btf_loader: Add support for BTF_KIND_FUNC</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584273600">- Update to release 1.17
  * Support raw BTF as available in /sys/kernel/btf/vmlinux.
  * Make --find_pointers_to consider unions.
  * Make --contains and --find_pointers_to honour --unions.
  * Add support for finding pointers to void.
  * Make --contains and --find_pointers_to to work with base types.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1589889600">- Don't require libebl-plugins on suse_version &gt;= 1550</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1599048000">- add libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1600689600">- Backport fixes for segfault when processing dwz-ed kernel
  [bsc#1176095,https://github.com/acmel/dwarves/issues/10].
  * dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  * dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 1.18
  * pahole now should be segfault free when handling gdb test
    suit DWARF files, including ADA, FORTRAN, rust and dwp
    compressed files (the latter is refused).
  * Bail out on partial units for now, avoiding segfaults.
- Drop
  dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch,
  dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  (merged)
- Add forced ELF symvers because of ABI breaks</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603800000">- update to 1.18_15g040fd7f (bsc#1177921):
  * btf_encoder: Support cross-compiled ELF binaries with different endianness
  * strings: use BTF's string APIs for strings management
  * strings: Rename strings.h to avoid clashing with /usr/include/strings.h
  * dwarf_loader: increase the size of lookup hash map
  * btf_encoder: revamp how per-CPU variables are encoded
  * btf_encoder: Discard CUs after BTF encoding
  * btf_encoder: Fix emitting __ARRAY_SIZE_TYPE__ as index range type
  * btf_encoder: Use libbpf APIs to encode BTF type info
  * btf_loader: Use libbpf to load BTF
  * dwarves: Expose and maintain active debug info loader operations
  * btf_encoder: detect BTF encoding errors and exit
  * libbpf: Update to latest libbpf version
  * dwarf_loader: Conditionally define DW_AT_alignment
  * pahole: Implement --packed
  * man-pages: Fix 'coimbine' typo
- remove libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch (upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603800001">- Add _service file / move to 1.18.g19 (863e6f0f)
  * btf_encoder: Ignore zero-sized ELF symbols</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606219200">- Update to release 1.19
  * Support for split BTF.
  * Support cross-compiled ELF binaries with different endianness.
  * Support for showing typedefs for anonymous types, like structs,
    unions and enums.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1609934400">- Drop the version requirement of libdw-devel
  + DW_AT_alignment is defined in 1.19 so dwarves now is compatible
    with older libdw.</changelog>
</package>
<package pkgid="22ff4a5b3120d846788bd4dda87dd242ef4639e7df655733fdf5a72e4bf9a7b3" name="dwarves" arch="x86_64">
  <version epoch="0" ver="1.19" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1413374400">- Drop libdwarf dependency; it is not needed for build (libdw
  is used instead)</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add dwarves-no-DW_TAG_mutable.patch: Fix build with newer
  libdwarf versions: DW_TAG_mutable_type was a mistake in an early
  DWARFv3 draft and was removed in the final version.</changelog>
  <changelog author="mpluskal@suse.com" date="1485950400">- Use cmake macros</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- dwarves needs elfutils to have the EBL plugins available
  to carry out its work. [boo#1049871]
- Update to new upstream release 1.11
  * dwarf_loader: Do not stop processing after finding
    unsupported tags
  * dwarf_loader: Support DW_FORM_data{4,8} for reading class
    member offsets
  * dwarf_fprintf: Handle DW_TAG_GNU_call_site{_parameter}
  * dwarf_loader: Add support for DW_TAG_restrict_type
  * dwarf_loader: Initial support for DW_TAG_unspecified_type
- Remove dwarves-no-DW_TAG_mutable.patch (already applied)</changelog>
  <changelog author="jengelh@inai.de" date="1534420800">- Update to new upstream release 1.12
  * Added a BTF (BPF Type Format) encoder
  * Initial support for DW_TAG_partial_unit
  * Print cacheline boundaries in multiple union members
  * Show offsets at union members</changelog>
  <changelog author="dsterba@suse.cz" date="1556712000">- version 1.13
  - Use of the recently introduced BTF deduplication algorithm
  - Introduce a 'btfdiff' utility
  - Add a BTF loader, i.e. 'pahole -F btf' allows pretty printing of structs
    and unions in the same fashion as with DWARF info
  - Better union support
  - Infer __attribute__((__packed__)) when structs have no alignment holes
  - Support DWARF5's DW_AT_alignment
  - Add a '--compile' option to 'pfunct'</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561636800">- Update to new upstream release 1.15
  * Avoid null dereference with NULL configs
  * Fixup printing "const" early with "const void"
  * Fix recursively printing named structs in --expand_types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576497600">- Update to release 1.16
  * btf_loader: Add support for BTF_KIND_FUNC</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584273600">- Update to release 1.17
  * Support raw BTF as available in /sys/kernel/btf/vmlinux.
  * Make --find_pointers_to consider unions.
  * Make --contains and --find_pointers_to honour --unions.
  * Add support for finding pointers to void.
  * Make --contains and --find_pointers_to to work with base types.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1589889600">- Don't require libebl-plugins on suse_version &gt;= 1550</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1599048000">- add libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1600689600">- Backport fixes for segfault when processing dwz-ed kernel
  [bsc#1176095,https://github.com/acmel/dwarves/issues/10].
  * dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  * dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 1.18
  * pahole now should be segfault free when handling gdb test
    suit DWARF files, including ADA, FORTRAN, rust and dwp
    compressed files (the latter is refused).
  * Bail out on partial units for now, avoiding segfaults.
- Drop
  dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch,
  dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  (merged)
- Add forced ELF symvers because of ABI breaks</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603800000">- update to 1.18_15g040fd7f (bsc#1177921):
  * btf_encoder: Support cross-compiled ELF binaries with different endianness
  * strings: use BTF's string APIs for strings management
  * strings: Rename strings.h to avoid clashing with /usr/include/strings.h
  * dwarf_loader: increase the size of lookup hash map
  * btf_encoder: revamp how per-CPU variables are encoded
  * btf_encoder: Discard CUs after BTF encoding
  * btf_encoder: Fix emitting __ARRAY_SIZE_TYPE__ as index range type
  * btf_encoder: Use libbpf APIs to encode BTF type info
  * btf_loader: Use libbpf to load BTF
  * dwarves: Expose and maintain active debug info loader operations
  * btf_encoder: detect BTF encoding errors and exit
  * libbpf: Update to latest libbpf version
  * dwarf_loader: Conditionally define DW_AT_alignment
  * pahole: Implement --packed
  * man-pages: Fix 'coimbine' typo
- remove libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch (upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603800001">- Add _service file / move to 1.18.g19 (863e6f0f)
  * btf_encoder: Ignore zero-sized ELF symbols</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606219200">- Update to release 1.19
  * Support for split BTF.
  * Support cross-compiled ELF binaries with different endianness.
  * Support for showing typedefs for anonymous types, like structs,
    unions and enums.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1609934400">- Drop the version requirement of libdw-devel
  + DW_AT_alignment is defined in 1.19 so dwarves now is compatible
    with older libdw.</changelog>
</package>
<package pkgid="e1578e09b8d409b576e565a099c5ea3152cf1856650eb52da1525a99880f548c" name="e2fsprogs" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp152.11.3.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="2ecbec95c8b2d6279091a64e365ced44668c829b5f1200ca41aa83f37f099db6" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp152.11.3.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="3e600a3ec98e4d91400d483ef9e084bca711ccd0a463c3e0fb3b48b0f64f1408" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp152.11.3.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="cead42e073e0b18db6a759865f128944602f27f9007778730f4cb7e1e93c2427" name="e2fsprogs" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp152.11.6.1"/>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="7a678ec9bff5b4de6010dd357c962978242cb4dba94de2c77c9ceb72669ebdd3" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp152.11.6.1"/>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="7ad218f40154fd16e2a4fca3e4f6b1f19ceaafee0b76b11a2a6478b18c272754" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp152.11.6.1"/>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="25acdbb9e7d4b2b2bb50e3785e1b8970cbee13108c84e358daab4b28c46f7411" name="e2fsprogs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp152.11.3.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="fdffe2299b9cec4aac44f021501b4244ae599622c07c432780cb967af9d9aab0" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp152.11.3.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="523fa111700fbbe8c420c7ec41a87e86fa23b9a30da597e04fc3c10fd016d8b0" name="e2fsprogs-devel" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp152.11.6.1"/>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="5cf3f735e17db987d888c007914441d0d8f2466860cee9e739c1a2767eb25713" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp152.11.6.1"/>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="6d7df3c9a48be1f7c4d6619e05063d7c77fdcdcfa1b4dc85c65f5db31565dac1" name="ebtables" arch="i586">
  <version epoch="0" ver="2.0.10.4" rel="lp152.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Move ebtables to ebtables-legacy and use update-alternatives to
  offer a selection mechanism.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1550836800">- Add upstream patches which improve handling stale locks.
  (boo#1126094)
  * 0001-Use-flock-for-concurrent-option.patch
  * 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1617710400">- Fix locking when on NFS shares and use of the concurrent flag
  in a non standard order bsc#1182824
  Adds fix-concurrent-and-nfs.patch</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1619784000">- Use the upstream fix rather then our fix for bsc#1182824
  * Remove fix-concurrent-and-nfs.patch
  * Add 0001-fix-concurrent-and-nfs.patch
  * Add 0002-fix-concurrent-and-nfs.patch</changelog>
</package>
<package pkgid="41b86f4a53db2ac84e152794f0bf27f82b7e9455b801aed41d35bbe0b83402b4" name="ebtables" arch="src">
  <version epoch="0" ver="2.0.10.4" rel="lp152.8.3.1"/>
  <changelog author="jengelh@medozas.de" date="1323000000">- Update to new upstream release 2.0.10.3
  * fix a counter setting bug</changelog>
  <changelog author="jengelh@medozas.de" date="1323950400">- Update to new upstream release 2.0.10.4
  * previous counter bug was still present and has been addressed now</changelog>
  <changelog author="jengelh@inai.de" date="1355918400">- Have build succeed on non-SUSE</changelog>
  <changelog author="vcizek@suse.com" date="1393588800">- add missing BuildRequires: sed (bnc#865848)</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Remove support for old distros from specfile
  (prjconf can do substitutions instead)</changelog>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Move ebtables to ebtables-legacy and use update-alternatives to
  offer a selection mechanism.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1550836800">- Add upstream patches which improve handling stale locks.
  (boo#1126094)
  * 0001-Use-flock-for-concurrent-option.patch
  * 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1617710400">- Fix locking when on NFS shares and use of the concurrent flag
  in a non standard order bsc#1182824
  Adds fix-concurrent-and-nfs.patch</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1619784000">- Use the upstream fix rather then our fix for bsc#1182824
  * Remove fix-concurrent-and-nfs.patch
  * Add 0001-fix-concurrent-and-nfs.patch
  * Add 0002-fix-concurrent-and-nfs.patch</changelog>
</package>
<package pkgid="6d533d6b24f4cc023390cbcb491ce8a796c88f140b82f3814a51eb4eb17b4230" name="ebtables" arch="x86_64">
  <version epoch="0" ver="2.0.10.4" rel="lp152.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Move ebtables to ebtables-legacy and use update-alternatives to
  offer a selection mechanism.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1550836800">- Add upstream patches which improve handling stale locks.
  (boo#1126094)
  * 0001-Use-flock-for-concurrent-option.patch
  * 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1617710400">- Fix locking when on NFS shares and use of the concurrent flag
  in a non standard order bsc#1182824
  Adds fix-concurrent-and-nfs.patch</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1619784000">- Use the upstream fix rather then our fix for bsc#1182824
  * Remove fix-concurrent-and-nfs.patch
  * Add 0001-fix-concurrent-and-nfs.patch
  * Add 0002-fix-concurrent-and-nfs.patch</changelog>
</package>
<package pkgid="12c5889303b11d204101cd4ef80ab0be627e22324170091d338a84835ef6b8e9" name="eclipse" arch="src">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="9ba20f1214fa36ed1058bab7225dcb36532ec7d174972f457ceb062b7ae3ef14" name="eclipse-bootstrap" arch="src">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="469bdaef78218473f56c2b90836510acb832c433900775a659f1262cc2094605" name="eclipse-contributor-tools" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="f29abef9bd67b9abbe81c1902d78d6a393facb0ca9fe0fca45bad66056f3d4a7" name="eclipse-contributor-tools-bootstrap" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="f1d17b4f5881eece08ba5a660c15dc0b5831ac53778870b91d38c3cb7587f830" name="eclipse-equinox-osgi" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="ef68386946c2412be5ddbd9edb712e492b095244fd149cfa59f39a3cc6cbaf4a" name="eclipse-equinox-osgi-bootstrap" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="5c9aa9b4db017fb7d506dc2641c914c17341c8ff597e3aae35d240af171981b2" name="eclipse-jdt" arch="noarch">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="6560c0abe139f5f565bde50eff5ad892b88916cac6d70de265343567184f1f4e" name="eclipse-jdt-bootstrap" arch="noarch">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="d157e6dee04904847f6c02f99f05457a140f6dbf406c38b1d414bb7735e309f8" name="eclipse-p2-discovery" arch="noarch">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="d424c177cafa0770ca6fda41e3905d613f842820803130703ba62dc0d11613af" name="eclipse-p2-discovery-bootstrap" arch="noarch">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="01eed80f564cc43880b324a7bf41778aeb5bc3b54faf92dc904d121904446324" name="eclipse-pde" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="2edb251e389238460dd102124c83c6978de3552e92ddb206659a19ce65341c33" name="eclipse-pde-bootstrap" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="807e0d1523252142f2244caa6fde74aa6caea18fac6be79412c3c180c77f7eb6" name="eclipse-platform" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="2852701f3b8f52b7330c40c1be0223879b930d5cf79fa05abb9fd703c61c4d4f" name="eclipse-platform-bootstrap" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="e18252b9e20b986d2136fc7546bad9552efe3709dafb41ab39d330f358b5c632" name="eclipse-swt" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="1bccd0eb9d5b170c091b450b36635146f59e4df90e0751eae79abee8cdb4873d" name="eclipse-swt-bootstrap" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="dcb24c7107769fa06e0d3645553a742b23f1380e6b374302fc4ff3734bff7c86" name="eclipse-tests" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="acf00b9f1905cd2632d300dd5fe2813b2ac8b336627b59a99cde08f4009a00f9" name="eclipse-tests-bootstrap" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="444c53e0937c3f48154fb44ea1ba30cf7855031d4c5bcf04d3b20879d854adac" name="editorconfig" arch="i586">
  <version epoch="0" ver="0.12.3" rel="lp152.2.3.1"/>
  <changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
  <changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>
  <changelog author="astieger@suse.com" date="1526644800">- update to 0.12.2:
  * Add support for pkgconfig
  * Memory leaks and crash fixes
  * Improve error messages</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1543924800">- update to 0.12.3:
  * Bump required minimum cmake version to 2.8.12.
  * Support pcre2 and drop support for pcre.
- use pkconfig to find libpcre2</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1598616000">- Add patch to fix crash when parsing certain files (boo#1175824):
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
</package>
<package pkgid="502e79c03b820d62342a131b9904948e480a72a392d81aca111840cedaddc653" name="editorconfig" arch="x86_64">
  <version epoch="0" ver="0.12.3" rel="lp152.2.3.1"/>
  <changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
  <changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>
  <changelog author="astieger@suse.com" date="1526644800">- update to 0.12.2:
  * Add support for pkgconfig
  * Memory leaks and crash fixes
  * Improve error messages</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1543924800">- update to 0.12.3:
  * Bump required minimum cmake version to 2.8.12.
  * Support pcre2 and drop support for pcre.
- use pkconfig to find libpcre2</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1598616000">- Add patch to fix crash when parsing certain files (boo#1175824):
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
</package>
<package pkgid="229cc39a0b7b06195419e116d4de09c99435fa14bc1532ce9deff78af6cf5b30" name="editorconfig-core-c" arch="src">
  <version epoch="0" ver="0.12.3" rel="lp152.2.3.1"/>
  <changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
  <changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>
  <changelog author="astieger@suse.com" date="1526644800">- update to 0.12.2:
  * Add support for pkgconfig
  * Memory leaks and crash fixes
  * Improve error messages</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1543924800">- update to 0.12.3:
  * Bump required minimum cmake version to 2.8.12.
  * Support pcre2 and drop support for pcre.
- use pkconfig to find libpcre2</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1598616000">- Add patch to fix crash when parsing certain files (boo#1175824):
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
</package>
<package pkgid="c64417052b369afa9d9ccc920cd9cefa218638de912e78678d7cb67bd1dd9402" name="efivar" arch="i586">
  <version epoch="0" ver="37" rel="lp152.3.12.1"/>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1623844800">- Add efivar-bsc1187386-fix-emmc-parsing.patch to fix the eMMC
  sysfs parsing (bsc#1187386)</changelog>
</package>
<package pkgid="7e8eed05d08db62090da1f5c30a135d5929e1c27e855f397e7f9661cd1b67b61" name="efivar" arch="src">
  <version epoch="0" ver="37" rel="lp152.3.12.1"/>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1623844800">- Add efivar-bsc1187386-fix-emmc-parsing.patch to fix the eMMC
  sysfs parsing (bsc#1187386)</changelog>
</package>
<package pkgid="8adaec61e086dc1c13f4317f39214497adedd1729176cc585c2e595ed166c16d" name="efivar" arch="x86_64">
  <version epoch="0" ver="37" rel="lp152.3.12.1"/>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1623844800">- Add efivar-bsc1187386-fix-emmc-parsing.patch to fix the eMMC
  sysfs parsing (bsc#1187386)</changelog>
</package>
<package pkgid="7137bece0fb748c3033ca60faf4f968dfbb6c1c6d57b001b2dd74f1f264c403f" name="efivar" arch="i586">
  <version epoch="0" ver="37" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
</package>
<package pkgid="bf72f66cb6cdf440955edbe4c27c1cce00b1ef559914941792261bca51929bf6" name="efivar" arch="src">
  <version epoch="0" ver="37" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
</package>
<package pkgid="04ae6d3bf3cdedd0552d7b969f21cb5ba70afe8fe6dc759662d538f1e7b2a6e9" name="efivar" arch="x86_64">
  <version epoch="0" ver="37" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
</package>
<package pkgid="3e6efb60b93312dc7ba9abf0c0915c5f0a26f21785e8f651cd251135b9f6ee8d" name="efivar" arch="i586">
  <version epoch="0" ver="37" rel="lp152.3.6.1"/>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
</package>
<package pkgid="4f3d1e8ff3cd1139736ddb7cd0667740c909344d3b6aed77dc84faf32b871263" name="efivar" arch="src">
  <version epoch="0" ver="37" rel="lp152.3.6.1"/>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
</package>
<package pkgid="a621a07a8667ce6f746b86ced4405a2708bbc036b66b4233b34735e984cf5155" name="efivar" arch="x86_64">
  <version epoch="0" ver="37" rel="lp152.3.6.1"/>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
</package>
<package pkgid="224eea044036c62091bb029b48fc888b052f4b2ff9fd5f89bc13cef1a108e263" name="efivar" arch="i586">
  <version epoch="0" ver="37" rel="lp152.3.9.1"/>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
</package>
<package pkgid="4a4b238a5c7ef69797c71d1c54f083e0c1de568305b3be5552076225a989cf68" name="efivar" arch="src">
  <version epoch="0" ver="37" rel="lp152.3.9.1"/>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
</package>
<package pkgid="7e99b4abfc0f43466988c8cf088575616d31313e390cc75e2a21b9a6fdb3c98d" name="efivar" arch="x86_64">
  <version epoch="0" ver="37" rel="lp152.3.9.1"/>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
</package>
<package pkgid="dbf677c78e77f3f1468239f063b80d835f6ad2c28baf56dcae3fb45e97e21a35" name="efivar-devel" arch="i586">
  <version epoch="0" ver="37" rel="lp152.3.12.1"/>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1623844800">- Add efivar-bsc1187386-fix-emmc-parsing.patch to fix the eMMC
  sysfs parsing (bsc#1187386)</changelog>
</package>
<package pkgid="8da5f9319e8fe51e8158e7e98c5306592c71f587436947669663d72565c1a618" name="efivar-devel" arch="x86_64">
  <version epoch="0" ver="37" rel="lp152.3.12.1"/>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1623844800">- Add efivar-bsc1187386-fix-emmc-parsing.patch to fix the eMMC
  sysfs parsing (bsc#1187386)</changelog>
</package>
<package pkgid="b6b10de12f3c5cc24a0aa45be89c38ea3517c58ff994359ad5026633a61f9307" name="efivar-devel" arch="i586">
  <version epoch="0" ver="37" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
 